Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.cer (raw, json)
Hash identifier: P7yv7PVBRPDTOeXm4Z9+wDGtRsmlu9QcRnKjY9kQu9k=
Subject key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BB145B7B2F38C43B5839D5A6666ED829E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Jan 2026 08:14:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210892
IP: 5.1.45.0/24
IP: 37.235.120.0/21
IP: 79.135.124.0/22
IP: 94.198.80.0/21
IP: 109.224.223.0/24
IP: 109.224.232.0/24
IP: 168.222.160.0/20
IP: 185.199.72.0/22
IP: 213.254.180.0/22
IP: 2a11:2b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b1:45:b7:b2:f3:8c:43:b5:83:9d:5a:66:66:ed:82:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 12 08:14:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:30:b0:01:51:ce:6b:31:5f:30:5c:b1:12:
f9:a1:50:ce:d1:7b:7f:5c:a5:d9:a4:e7:72:98:67:
32:56:be:ec:ba:d9:88:b6:02:72:7c:51:da:b8:0b:
69:de:8c:b3:b3:c1:b1:5a:3a:e7:89:ea:41:25:ed:
db:f2:a0:10:90:d7:c7:8d:f1:16:39:c8:fb:0f:7e:
6a:bc:91:64:f5:0c:cf:e0:b1:23:46:0e:d1:35:b6:
98:1c:be:f6:74:a1:b9:e4:8f:c2:1a:91:d8:59:2e:
78:16:64:72:1b:b3:db:b0:63:7c:44:2c:5b:90:fb:
d8:69:c7:d6:09:3f:0d:a9:61:db:6a:45:c4:62:a9:
8b:db:19:47:4c:10:7f:b4:16:d7:b4:96:8e:e6:01:
a6:8b:20:6d:fb:b9:90:1f:26:43:1d:7a:f8:8c:17:
7b:98:91:f5:eb:9f:0d:18:ae:7c:a0:78:c8:23:ce:
14:1d:30:48:30:12:60:33:7c:8d:2c:cd:4e:13:82:
8c:a6:12:4b:76:b9:16:a0:d5:92:4d:46:84:f7:8e:
a1:91:24:7b:47:56:c4:ec:2c:1c:14:a9:57:31:a6:
98:72:51:8a:82:0c:b4:76:44:f8:de:de:41:db:45:
67:91:b3:e9:03:09:ce:13:1b:48:f7:9d:68:64:bf:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
37.235.120.0/21
79.135.124.0/22
94.198.80.0/21
109.224.223.0/24
109.224.232.0/24
168.222.160.0/20
185.199.72.0/22
213.254.180.0/22
IPv6:
2a11:2b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210892
Signature Algorithm: sha256WithRSAEncryption
53:4d:a7:ae:45:29:41:47:35:3c:af:d4:41:87:5c:e0:a5:8c:
ed:13:eb:46:4c:76:33:85:bd:ea:51:79:47:a1:5a:d0:4c:29:
14:3d:c7:4f:4d:85:75:b0:64:d1:9e:14:ab:44:61:7f:49:63:
53:fb:a0:7d:cf:8f:de:c5:df:d1:19:ab:96:86:7b:49:63:d2:
33:ab:a7:bb:59:89:18:db:a8:58:bf:e9:f6:a3:e7:8d:73:57:
d4:d4:1c:1b:0f:02:4d:02:a4:de:3a:31:bc:4f:98:43:2a:ed:
05:a6:8c:bc:0a:85:f3:1b:69:62:46:06:21:09:b4:2e:79:c3:
8c:4e:57:81:8d:0e:8a:96:0f:0c:1d:05:63:94:72:86:fb:c8:
88:dd:8d:ec:cc:86:20:1f:db:12:72:83:f6:44:a8:5e:2c:48:
8b:8c:67:28:22:6f:4b:ee:ad:0f:79:63:6c:33:f6:0d:3b:85:
6e:2f:f9:f1:6d:a3:66:ba:de:4f:80:62:28:34:77:7d:bb:da:
78:50:12:38:65:d8:c3:8f:c8:b5:a6:08:0a:57:b6:44:d0:30:
f1:83:36:1b:49:8c:ad:f1:de:6b:97:e3:61:17:27:f7:8d:99:
ea:af:fb:e9:be:4c:57:4b:0a:2b:73:a3:6c:5b:00:b4:3d:39:
8e:1d:52:5e
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAZuxRbey84xDtYOdWmZm7YKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTEyMDgxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmQ1OTNiMWM4N2I4MTczOWVjNDE5MTAyOTViZjM4NWYyYzlhOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uQwsAFRzmsxXzBcsRL5oVDO0Xt/
XKXZpOdymGcyVr7sutmItgJyfFHauAtp3oyzs8GxWjrniepBJe3b8qAQkNfHjfEW
Ocj7D35qvJFk9QzP4LEjRg7RNbaYHL72dKG55I/CGpHYWS54FmRyG7PbsGN8RCxb
kPvYacfWCT8NqWHbakXEYqmL2xlHTBB/tBbXtJaO5gGmiyBt+7mQHyZDHXr4jBd7
mJH1658NGK58oHjII84UHTBIMBJgM3yNLM1OE4KMphJLdrkWoNWSTUaE946hkSR7
R1bE7CwcFKlXMaaYclGKggy0dkT43t5B20VnkbPpAwnOExtI951oZL9KUQIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFPLVk7HIe4FznsQZEClb84XyyamSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzkzOTFh
Ni1kZDNmLTQ5MzMtOWRhMi05YjhkNjhlZTg3ZmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvOTM5MWE2
LWRkM2YtNDkzMy05ZGEyLTliOGQ2OGVlODdmYy8xLzh0V1RzY2g3Z1hPZXhCa1FL
VnZ6aGZMSnFaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF
BwEHAQH/BE8wTTA8BAIAATA2AwQABQEtAwQDJet4AwQCT4d8AwQDXsZQAwQAbeDf
AwQAbeDoAwQEqN6gAwQCucdIAwQC1f60MA0EAgACMAcDBQMqESsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3zDANBgkqhkiG9w0BAQsFAAOCAQEAU02nrkUpQUc1
PK/UQYdc4KWM7RPrRkx2M4W96lF5R6Fa0EwpFD3HT02FdbBk0Z4Uq0Rhf0ljU/ug
fc+P3sXf0RmrloZ7SWPSM6unu1mJGNuoWL/p9qPnjXNX1NQcGw8CTQKk3joxvE+Y
QyrtBaaMvAqF8xtpYkYGIQm0LnnDjE5XgY0OipYPDB0FY5RyhvvIiN2N7MyGIB/b
EnKD9kSoXixIi4xnKCJvS+6tD3ljbDP2DTuFbi/58W2jZrreT4BiKDR3fbvaeFAS
OGXYw4/ItaYICle2RNAw8YM2G0mMrfHea5fjYRcn942Z6q/76b5MV0sKK3OjbFsA
tD05jh1SXg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:24 2026 by rpki-client