Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer (raw, json)
Hash identifier: 5iyYRiazQOaNDGiZ+5/9Mc7VpYy9ScdFAPB54q7vKes=
Subject key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FA5BCDB713C178D6BC68445905D86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214973
IP: 185.18.221.0/24
IP: 2a13:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:a5:bc:db:71:3c:17:8d:6b:c6:84:45:90:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:04:a4:4e:6f:d9:3b:2d:21:8d:61:0c:5b:
f1:cb:94:c1:ce:38:ef:15:12:86:cb:e2:8f:a3:b8:
01:98:97:12:10:33:0a:f7:a6:0f:93:1f:5e:54:5a:
42:ea:51:06:7d:fa:50:39:94:f9:4a:35:67:7a:f7:
57:71:e9:7c:6e:c6:36:9c:07:af:e2:a7:67:dd:09:
d0:04:d1:fe:f0:da:c1:d4:c5:7e:4d:a0:e8:3f:28:
ec:a8:8b:14:cb:93:94:2e:db:51:af:de:2c:f9:6f:
04:8a:18:b7:cf:ae:84:ce:ce:62:06:e1:96:e7:30:
2c:9d:c6:fe:1e:d4:ff:64:98:7e:a0:13:10:89:05:
83:1c:a3:3a:c5:a0:d0:82:a6:aa:65:90:92:ab:cf:
8f:b8:32:fb:5f:5b:65:a8:0b:6a:0b:a7:77:a3:60:
72:f5:b6:7c:4e:4a:ad:d0:12:e6:1a:c4:bf:84:ff:
99:13:bc:fa:98:6a:66:5b:ef:2d:73:22:58:b8:fb:
1d:32:4f:9f:f4:58:67:57:29:9f:e6:29:80:11:6d:
e6:57:c2:12:73:c3:f2:85:2b:de:89:d8:44:f2:6b:
f3:f4:63:c5:2d:66:ea:da:43:5e:e9:4d:46:53:08:
1b:9a:1e:75:19:e7:a4:56:b8:6d:89:32:13:4f:48:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.221.0/24
IPv6:
2a13:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214973
Signature Algorithm: sha256WithRSAEncryption
78:28:e9:01:4d:9f:a5:94:8a:47:44:fa:43:bf:c6:56:18:87:
b5:6f:08:99:4d:61:22:e9:30:89:44:bd:e2:4b:11:b0:9b:70:
6d:98:75:f5:da:e4:f8:c0:d7:c8:f1:18:ad:05:a6:4b:53:3f:
7f:61:0c:61:3d:8d:da:27:34:f4:f2:01:08:39:87:b4:94:d8:
e2:1c:9c:07:bd:53:0f:d5:8e:f7:d5:5c:01:dd:6f:93:99:5b:
72:70:73:71:13:c0:b3:b9:50:3e:85:94:1c:38:be:6e:bb:90:
bb:3c:a6:e0:16:4d:72:a3:15:ff:1c:09:92:e7:8b:f6:d7:95:
d2:88:9c:69:a4:d5:7b:2b:94:49:c1:c3:2b:66:a3:19:29:d3:
37:0a:13:34:73:ea:23:fd:6b:be:02:4c:87:74:31:3f:18:d1:
d1:52:82:d2:6a:a1:19:59:71:3a:2b:d5:51:a2:8a:c2:3d:de:
b8:e4:2d:59:47:35:e0:f5:39:63:0c:a6:71:64:d9:fb:02:63:
b9:66:a2:43:94:85:38:c0:94:2c:dd:56:ae:9c:28:8d:78:20:
bd:3e:27:60:ac:2e:2d:93:38:c6:84:99:6d:f3:80:ed:11:84:
82:69:8e:f0:52:bf:6a:de:e0:a5:fd:27:10:e1:25:6f:d7:19:
5a:2a:e3:4a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt8f6W823E8F41rxoRFkF2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWY0NjA5ZDBkMDUzYWVjMDMwN2RhNDRiMGU2NzhjMzg4ZjY0MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodsEpE5v2TstIY1hDFvxy5TBzjjv
FRKGy+KPo7gBmJcSEDMK96YPkx9eVFpC6lEGffpQOZT5SjVnevdXcel8bsY2nAev
4qdn3QnQBNH+8NrB1MV+TaDoPyjsqIsUy5OULttRr94s+W8Eihi3z66Ezs5iBuGW
5zAsncb+HtT/ZJh+oBMQiQWDHKM6xaDQgqaqZZCSq8+PuDL7X1tlqAtqC6d3o2By
9bZ8Tkqt0BLmGsS/hP+ZE7z6mGpmW+8tcyJYuPsdMk+f9FhnVymf5imAEW3mV8IS
c8PyhSveidhE8mvz9GPFLWbq2kNe6U1GUwgbmh51GeekVrhtiTITT0jT2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPH0YJ0NBTrsAwfaRLDmeMOI9kGkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzlhMThh
ZC0wODdiLTRkMTItOWY2OS04Y2JmOTAzZTkxY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOWExOGFk
LTA4N2ItNGQxMi05ZjY5LThjYmY5MDNlOTFjZC8xLzhmUmduUTBGT3V3REI5cEVz
T1o0dzRqMlFhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuRLdMA0EAgACMAcDBQMqEwLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNHvTANBgkqhkiG9w0BAQsFAAOCAQEAeCjpAU2fpZSK
R0T6Q7/GVhiHtW8ImU1hIukwiUS94ksRsJtwbZh19drk+MDXyPEYrQWmS1M/f2EM
YT2N2ic09PIBCDmHtJTY4hycB71TD9WO99VcAd1vk5lbcnBzcRPAs7lQPoWUHDi+
bruQuzym4BZNcqMV/xwJkueL9teV0oicaaTVeyuUScHDK2ajGSnTNwoTNHPqI/1r
vgJMh3QxPxjR0VKC0mqhGVlxOivVUaKKwj3euOQtWUc14PU5YwymcWTZ+wJjuWai
Q5SFOMCULN1WrpwojXggvT4nYKwuLZM4xoSZbfOA7RGEgmmO8FK/at7gpf0nEOEl
b9cZWirjSg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:41 2026 by rpki-client