Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
File: CZ05RkE90RFhtGx99q02Kpk41dQ.cer (raw, json)
Hash identifier: RSb7ulLENXAQzm5097VyTIArdo4hPK4ornCF9EyTvJE=
Subject key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DAB0DAC02247F5429943102B6B82851A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Apr 2026 13:21:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208777
IP: 45.84.84.0/22
IP: 157.22.158.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:0d:ac:02:24:7f:54:29:94:31:02:b6:b8:28:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 13:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:a6:2b:b4:1e:3c:83:af:e4:90:7b:0a:da:
5b:f3:26:64:c1:24:f6:be:c2:32:84:d0:40:ed:56:
95:b6:d3:da:53:3d:60:f1:08:90:69:7a:68:7c:5d:
7b:73:d4:07:2e:fb:98:b6:00:f1:d0:12:99:29:98:
cb:26:fa:cc:85:0b:09:33:a0:b1:07:6d:b9:b8:31:
25:29:6c:b2:57:71:3c:84:8f:4d:01:a6:04:6f:fd:
ed:39:3a:8b:9c:c4:ca:ce:46:52:bd:86:17:26:a2:
1b:26:2e:cd:9a:16:c8:66:b8:d6:ef:2f:dd:fc:34:
b7:78:67:4b:f9:8d:ea:ed:9c:55:c3:57:05:d7:46:
9e:7d:67:bd:0e:8b:09:ed:15:69:cf:44:3b:de:b9:
d4:a5:87:d5:28:5b:f8:23:45:13:ba:0f:e9:30:32:
74:5a:6a:ec:12:89:82:12:17:dc:48:28:6e:2c:d3:
90:3b:f5:6d:e6:b2:6e:26:62:bc:98:08:bb:10:a1:
b6:72:18:58:41:af:be:52:33:e2:a9:98:9c:00:63:
7b:0b:16:cf:58:35:81:6b:3f:9a:a0:b0:ce:ae:55:
da:76:94:1f:7f:b2:6a:a3:48:cc:16:9a:b3:69:6c:
60:1b:09:96:31:ca:15:34:c0:f4:e4:9d:29:70:f6:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.84.0/22
157.22.158.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208777
Signature Algorithm: sha256WithRSAEncryption
2b:98:4c:ad:89:8e:4e:9c:27:15:9b:75:0d:5b:30:9f:8a:31:
69:3d:bc:86:86:77:d4:b9:52:72:38:31:e5:f4:c3:91:75:33:
08:dd:aa:e4:db:88:1b:b0:14:32:d8:ab:f2:21:94:20:7a:8b:
45:eb:4a:a4:d0:21:05:4f:5c:c5:3d:d6:3e:0b:c2:b6:97:02:
0c:6a:8d:24:f6:7e:2f:f4:18:6c:f3:1b:83:a1:16:e6:fd:53:
04:14:88:b0:ed:46:9f:32:0d:ed:f8:45:c4:a4:a3:e0:d6:55:
34:5f:7a:ed:31:34:66:12:5a:02:a7:e9:ee:7c:46:5a:ca:67:
b6:ec:69:95:74:0f:b3:4f:33:e9:d7:50:d4:49:69:af:e6:25:
4e:e3:22:9a:61:4b:39:85:ba:d9:26:fb:44:82:da:68:03:38:
32:b8:61:94:48:ac:fa:7e:a9:83:57:ec:5c:ca:d3:5f:27:86:
51:fe:94:16:5f:bc:07:dc:40:5e:1a:b8:d6:c2:9f:73:17:7e:
78:aa:73:6d:d4:7a:32:a8:cd:99:f0:57:fe:c9:ee:5c:d6:50:
ea:b9:96:9e:3a:fc:8c:88:a2:67:09:5e:5a:80:5c:65:36:d9:
c6:e2:8b:0b:5b:b0:c2:0d:79:e0:5b:25:c2:36:b6:7b:d4:b2:
12:88:2e:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 21:11:31 2026 by rpki-client