Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
File: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer (raw, json)
Hash identifier: L6uc+S8IAofsQojWAURKeBuSyJmn7xKJJGPxYNRKFNg=
Subject key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB480A07D9CEBF1C980B69E00153DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198717
IP: 37.233.96.0/20
IP: 2a00:f2c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:48:0a:07:d9:ce:bf:1c:98:0b:69:e0:01:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02d4f3397e7266fbfa820290b97509d4df907852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:75:11:0c:c5:68:08:04:bb:96:ea:9c:2b:
2d:cf:4d:88:4a:cd:d8:a5:67:8c:93:59:22:b2:5f:
bc:9f:f6:1d:31:dd:d4:66:4a:f0:0b:9f:d4:1d:eb:
ad:6d:a0:de:5c:6e:20:1b:0c:98:1d:04:bf:d3:4c:
f1:99:56:c5:68:ca:ec:67:d5:c7:a5:f3:50:ae:40:
80:ab:5b:f2:5d:51:c0:01:3c:e6:cb:dd:f5:9c:5b:
7e:ed:c1:8d:90:d3:3e:05:55:b9:0d:31:e0:f6:59:
ca:18:6a:86:96:be:55:28:bd:92:9c:51:89:af:b0:
d4:bd:ce:59:ed:79:cf:da:9b:99:84:5f:21:1f:8d:
8f:0c:19:dd:7c:72:d9:b4:2c:75:0f:8a:4a:44:16:
59:b4:b9:1b:77:00:8e:44:59:1e:74:cf:aa:e5:85:
43:8f:2d:47:57:97:e4:13:92:41:d6:48:e0:10:3f:
df:99:d1:35:1a:0a:07:5b:e7:6e:d2:5b:36:bc:3d:
7e:a0:67:18:97:bc:30:42:d2:c8:c0:d9:c9:7a:a9:
39:aa:a5:bd:b8:75:ae:e9:82:a9:82:5e:49:cb:82:
aa:38:af:3b:a2:92:18:40:de:bf:a0:e7:25:56:bf:
a1:b4:2f:d0:88:28:7a:ab:e3:e8:e0:aa:53:f7:f0:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.96.0/20
IPv6:
2a00:f2c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198717
Signature Algorithm: sha256WithRSAEncryption
73:86:11:18:30:00:89:ef:75:f3:fb:ff:37:a1:18:8d:ac:04:
bb:c8:6a:29:c1:79:d4:9c:cd:f0:ca:c4:64:f4:99:41:3b:a7:
32:f1:a1:b8:c5:81:2a:0c:c3:3e:fa:7b:4f:92:48:b2:1f:77:
41:59:3c:56:ac:e4:46:71:06:53:da:ac:39:1c:89:9e:f8:98:
bd:0f:24:ab:92:42:aa:ad:79:0b:7e:06:92:62:b8:0a:a8:8b:
81:8e:8a:3a:26:51:c9:fc:ee:06:2d:56:51:30:65:d3:8f:94:
6b:8d:99:ec:a8:29:f9:12:9c:b5:0b:e6:7e:42:d5:b6:b1:08:
37:e8:d0:b7:e9:ca:82:fb:86:6e:1b:f9:1f:fa:59:c4:0b:9f:
35:6d:c0:bb:94:de:5c:93:83:60:a6:7d:06:04:53:63:f5:48:
e7:fd:c7:a4:dc:c6:6a:f1:5f:63:9e:aa:b6:66:10:e8:24:a8:
e4:07:85:65:f4:88:84:04:f9:f0:73:63:26:24:f5:4b:10:40:
15:da:26:e2:f8:8a:3e:e8:87:1b:5b:4c:16:1a:2e:90:3f:bd:
5f:9c:1c:56:36:c2:68:d3:cb:01:3c:8d:d9:d0:bf:6e:24:c4:
02:e5:47:74:e7:55:50:ba:bd:cd:3b:04:6e:97:25:63:a8:5e:
eb:3e:2e:ee
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+0gKB9nOvxyYC2ngAVPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQ0ZjMzOTdlNzI2NmZiZmE4MjAyOTBiOTc1MDlkNGRmOTA3ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTt1EQzFaAgEu5bqnCstz02ISs3Y
pWeMk1kisl+8n/YdMd3UZkrwC5/UHeutbaDeXG4gGwyYHQS/00zxmVbFaMrsZ9XH
pfNQrkCAq1vyXVHAATzmy931nFt+7cGNkNM+BVW5DTHg9lnKGGqGlr5VKL2SnFGJ
r7DUvc5Z7XnP2puZhF8hH42PDBndfHLZtCx1D4pKRBZZtLkbdwCORFkedM+q5YVD
jy1HV5fkE5JB1kjgED/fmdE1GgoHW+du0ls2vD1+oGcYl7wwQtLIwNnJeqk5qqW9
uHWu6YKpgl5Jy4KqOK87opIYQN6/oOclVr+htC/QiCh6q+Po4KpT9/D9sQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFALU8zl+cmb7+oICkLl1CdTfkHhSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1Lzk4OTMz
YS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2M2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNh
LTc1ODEtNDk3OS05MTIxLTBlMWE2OGM3NTYzYi8xL0F0VHpPWDV5WnZ2NmdnS1F1
WFVKMU4tUWVGSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEJelgMA0EAgACMAcDBQAqAPLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMIPTANBgkqhkiG9w0BAQsFAAOCAQEAc4YRGDAAie91
8/v/N6EYjawEu8hqKcF51JzN8MrEZPSZQTunMvGhuMWBKgzDPvp7T5JIsh93QVk8
VqzkRnEGU9qsORyJnviYvQ8kq5JCqq15C34GkmK4CqiLgY6KOiZRyfzuBi1WUTBl
04+Ua42Z7Kgp+RKctQvmfkLVtrEIN+jQt+nKgvuGbhv5H/pZxAufNW3Au5TeXJOD
YKZ9BgRTY/VI5/3HpNzGavFfY56qtmYQ6CSo5AeFZfSIhAT58HNjJiT1SxBAFdom
4viKPuiHG1tMFhoukD+9X5wcVjbCaNPLATyN2dC/biTEAuVHdOdVULq9zTsEbpcl
Y6he6z4u7g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:15 2026 by rpki-client