Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer (raw, json)
Hash identifier: EGSC+4tgoPJRRGx/JDGQ+OMQf/XDwlcnu95kiZArzpY=
Subject key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B3543BCDF7BB09A7B85C58732686F65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43995
IP: 45.159.44.0/22
IP: 82.151.32.0/19
IP: 185.77.24.0/22
IP: 2a02:e040::/29
IP: 2a0f:7180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:43:bc:df:7b:b0:9a:7b:85:c5:87:32:68:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:83:62:ff:e2:60:b3:1d:67:bd:e7:ae:43:
98:bd:ad:c0:c0:bc:3a:58:5d:b8:df:2b:75:5b:36:
53:cb:4b:20:9b:c0:1f:f8:4c:45:11:69:c1:dd:e9:
c3:1f:78:7b:66:d3:7f:c4:29:6c:cc:06:8a:fd:41:
2e:ef:c4:df:d0:15:43:22:88:8b:18:19:b8:04:96:
ad:19:6e:b0:48:ee:57:b9:b3:dd:f9:de:61:cb:4c:
09:8b:49:e7:23:7b:9f:b0:f2:e0:01:85:d5:e9:99:
31:45:c3:b7:78:cc:68:a2:3f:38:57:f7:26:ba:3e:
76:92:10:bc:3a:73:17:bb:a1:05:8d:da:e8:76:dd:
1e:9d:4a:3b:9f:22:ac:19:ae:eb:3c:c8:7f:79:f6:
e6:fa:6f:42:66:5f:2e:36:d7:a1:66:71:2f:70:16:
4e:8b:73:bd:b4:4b:0f:c1:2e:e5:b7:cb:32:73:44:
01:39:dd:c0:f5:4d:30:12:e0:87:37:eb:8b:24:82:
11:71:b3:f1:3c:f8:9f:1c:c1:6d:6e:e1:0f:02:f7:
0f:78:bf:06:0b:d3:71:08:f6:b6:9b:37:41:40:cd:
89:48:e8:6a:20:de:94:51:9e:61:67:ba:10:01:4b:
ee:45:9b:f0:c9:e0:5b:e1:fc:4a:73:fe:49:81:2e:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.44.0/22
82.151.32.0/19
185.77.24.0/22
IPv6:
2a02:e040::/29
2a0f:7180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43995
Signature Algorithm: sha256WithRSAEncryption
75:bd:da:05:06:60:79:26:89:6b:ce:4e:e2:e2:43:61:f8:8f:
a0:e1:a0:f2:19:4a:29:36:d1:1d:7a:04:0e:de:85:37:6a:23:
d1:7e:3b:3a:bf:9f:ca:e2:ea:29:32:28:41:77:4c:c2:40:c5:
6f:3f:f7:1b:6e:d4:72:4d:8e:fb:c0:2e:35:72:58:4c:9e:51:
ac:ed:d6:49:8a:bd:a6:33:f6:69:f7:1d:fd:4b:e9:83:28:34:
bf:79:6e:ca:ad:ef:87:74:5b:8b:a9:e8:42:9f:cc:cb:05:0c:
0b:c7:82:0e:2e:fb:56:55:05:4c:6a:16:2a:7a:26:6b:41:cf:
c9:c4:fa:6e:55:97:d0:36:9b:b0:99:58:97:a9:a2:33:18:82:
14:69:45:d2:1a:f9:e9:d4:5f:4b:a0:c3:4a:76:cf:06:26:f7:
20:94:1a:d4:84:d8:07:67:a3:8a:0c:50:33:b9:57:ac:69:ad:
35:2f:86:dc:a3:dd:81:45:fc:97:44:2e:37:44:34:61:eb:9f:
62:7d:2c:4e:38:8f:47:15:c7:25:31:5c:75:24:92:b6:bd:90:
ea:4f:5a:8d:a8:ac:84:4a:70:b4:72:a0:c2:50:20:06:c6:ba:
61:58:75:85:f1:5a:de:bf:c7:b4:f1:f1:14:3a:ef:6c:c0:72:
66:21:09:91
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZt7NUO833uwmnuFxYcyaG9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhiMmY0ZTY2OGVmMGExNzZhOGJkMDAwNGUyNzc3NjcwODMzMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxemDYv/iYLMdZ73nrkOYva3AwLw6
WF243yt1WzZTy0sgm8Af+ExFEWnB3enDH3h7ZtN/xClszAaK/UEu78Tf0BVDIoiL
GBm4BJatGW6wSO5XubPd+d5hy0wJi0nnI3ufsPLgAYXV6ZkxRcO3eMxooj84V/cm
uj52khC8OnMXu6EFjdrodt0enUo7nyKsGa7rPMh/efbm+m9CZl8uNtehZnEvcBZO
i3O9tEsPwS7lt8syc0QBOd3A9U0wEuCHN+uLJIIRcbPxPPifHMFtbuEPAvcPeL8G
C9NxCPa2mzdBQM2JSOhqIN6UUZ5hZ7oQAUvuRZvwyeBb4fxKc/5JgS5aWwIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFPaLL05mjvChdqi9AATid3ZwgzI4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjL2ZkYzU5
OS03ODBiLTQ0MTQtOWUyYS01MmIwNzc1YzdjYjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvZmRjNTk5
LTc4MGItNDQxNC05ZTJhLTUyYjA3NzVjN2NiNC8xLzlvc3ZUbWFPOEtGMnFMMEFC
T0ozZG5DRE1qZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDAYBAIAATASAwQCLZ8sAwQFUpcgAwQCuU0YMBQEAgACMA4DBQMq
AuBAAwUDKg9xgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAq9swDQYJKoZIhvcN
AQELBQADggEBAHW92gUGYHkmiWvOTuLiQ2H4j6DhoPIZSik20R16BA7ehTdqI9F+
Ozq/n8ri6ikyKEF3TMJAxW8/9xtu1HJNjvvALjVyWEyeUazt1kmKvaYz9mn3Hf1L
6YMoNL95bsqt74d0W4up6EKfzMsFDAvHgg4u+1ZVBUxqFip6JmtBz8nE+m5Vl9A2
m7CZWJepojMYghRpRdIa+enUX0ugw0p2zwYm9yCUGtSE2Adno4oMUDO5V6xprTUv
htyj3YFF/JdELjdENGHrn2J9LE44j0cVxyUxXHUkkra9kOpPWo2orIRKcLRyoMJQ
IAbGumFYdYXxWt6/x7Tx8RQ672zAcmYhCZE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:21 2026 by rpki-client