Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
File: D7JAVZB3wRHaVfjisw5xF2QNguw.cer (raw, json)
Hash identifier: 4kDk3+tCL/+pKjByDaStieIMyZmiGeNxTIPu5InffjQ=
Subject key identifier: 0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9F8DB624D1C4330AA2898340D7220
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60917
IP: 185.23.36.0/22
IP: 2a00:6860::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:f8:db:62:4d:1c:43:30:aa:28:98:34:0d:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb240559077c111da55f8e2b30e7117640d82ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:72:d1:d4:80:ff:50:99:23:58:9b:3c:d9:
6b:80:d8:8e:c2:e9:4d:3c:9d:aa:1f:43:ab:44:1c:
2e:54:6f:ac:6f:60:24:ed:18:ff:e9:c9:aa:af:f7:
3b:16:e7:a4:84:df:21:5e:30:15:58:25:ca:c6:aa:
8d:2f:54:fc:9e:58:a9:33:f5:85:76:3c:0e:6e:b1:
7e:78:aa:42:df:03:5b:57:fa:b3:9f:e1:8e:30:88:
20:35:cf:4f:d7:c5:61:a1:17:d6:0b:88:50:00:d6:
3a:f2:9d:06:9a:4f:62:9f:2d:f4:89:11:92:37:fe:
e6:37:41:d6:fd:aa:d5:ac:8e:32:c8:a5:dc:c8:51:
05:db:d6:01:91:4b:bd:39:a3:6e:75:f6:3d:77:70:
24:1b:67:c7:e6:6c:8c:f7:cc:be:28:2c:97:1f:fc:
88:a1:e8:4d:7b:5b:c7:dd:86:e9:94:06:a2:32:2a:
30:6b:9b:9a:2c:20:d6:e7:65:34:6c:0e:5c:90:8c:
28:74:02:dc:74:ef:df:cf:28:85:02:dd:5a:40:76:
95:d9:06:f1:43:e9:fd:c0:f7:5f:1b:f8:2e:00:97:
7a:8f:42:bf:82:6b:97:43:d5:2e:65:b6:3b:90:dd:
55:ca:c8:e7:58:2b:20:dd:ea:ca:9b:f9:ef:ee:0c:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.36.0/22
IPv6:
2a00:6860::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60917
Signature Algorithm: sha256WithRSAEncryption
96:84:23:11:ee:24:4e:bc:41:9f:c9:ba:76:aa:49:d4:2d:73:
db:79:8c:2e:bc:a5:a1:ee:f6:df:b9:89:9b:09:56:10:19:c0:
0f:36:60:0e:dd:c6:12:67:b6:87:7f:e6:e6:8f:cc:5d:ee:f5:
a7:9c:b8:6c:71:2b:aa:2b:aa:99:c3:60:24:45:e1:48:a1:6d:
d3:fd:d2:e7:9b:20:5f:32:62:66:27:97:88:8b:93:83:ef:27:
1f:66:45:54:89:d9:ae:cb:2d:09:00:f9:5c:ed:db:76:26:3d:
f8:54:3f:be:5f:78:b2:c1:34:e6:3f:70:2e:7e:11:66:00:43:
eb:b1:b7:81:c8:9d:69:fb:2b:ab:07:80:ab:60:cb:80:4b:54:
1f:7a:f1:52:6a:4f:80:d8:f3:dc:68:d2:9d:56:4a:e5:2c:62:
fb:65:d6:ba:bd:b5:5b:42:b3:f1:97:34:bd:9f:16:c8:28:38:
3a:5d:17:f1:c3:ee:f2:ac:58:9c:34:e2:d9:ca:21:1a:8e:8f:
ce:8e:6f:3e:10:5e:72:7b:d8:9e:56:3a:33:dd:d1:b0:c0:7e:
01:16:65:fc:96:0f:d9:46:1f:c4:7d:bb:62:cf:cb:74:92:25:
5a:cc:5b:77:db:20:23:5b:47:00:e6:15:e6:b7:83:d8:d3:f8:
5a:e4:bb:e0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+fjbYk0cQzCqKJg0DXIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmIyNDA1NTkwNzdjMTExZGE1NWY4ZTJiMzBlNzExNzY0MGQ4MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORy0dSA/1CZI1ibPNlrgNiOwulN
PJ2qH0OrRBwuVG+sb2Ak7Rj/6cmqr/c7FuekhN8hXjAVWCXKxqqNL1T8nlipM/WF
djwObrF+eKpC3wNbV/qzn+GOMIggNc9P18VhoRfWC4hQANY68p0Gmk9iny30iRGS
N/7mN0HW/arVrI4yyKXcyFEF29YBkUu9OaNudfY9d3AkG2fH5myM98y+KCyXH/yI
oehNe1vH3YbplAaiMiowa5uaLCDW52U0bA5ckIwodALcdO/fzyiFAt1aQHaV2Qbx
Q+n9wPdfG/guAJd6j0K/gmuXQ9UuZbY7kN1VysjnWCsg3erKm/nv7gzPhQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFA+yQFWQd8ER2lX44rMOcRdkDYLsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzVlMjli
NS1mMjE3LTRiNmItOGQyZi04OTczYjJkNzA2MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNWUyOWI1
LWYyMTctNGI2Yi04ZDJmLTg5NzNiMmQ3MDYyYy8xL0Q3SkFWWkIzd1JIYVZmamlz
dzV4RjJRTmd1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRckMA0EAgACMAcDBQMqAGhgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDt9TANBgkqhkiG9w0BAQsFAAOCAQEAloQjEe4kTrxB
n8m6dqpJ1C1z23mMLryloe7237mJmwlWEBnADzZgDt3GEme2h3/m5o/MXe71p5y4
bHErqiuqmcNgJEXhSKFt0/3S55sgXzJiZieXiIuTg+8nH2ZFVInZrsstCQD5XO3b
diY9+FQ/vl94ssE05j9wLn4RZgBD67G3gcidafsrqweAq2DLgEtUH3rxUmpPgNjz
3GjSnVZK5Sxi+2XWur21W0Kz8Zc0vZ8WyCg4Ol0X8cPu8qxYnDTi2cohGo6Pzo5v
PhBecnvYnlY6M93RsMB+ARZl/JYP2UYfxH27Ys/LdJIlWsxbd9sgI1tHAOYV5reD
2NP4WuS74A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:25 2026 by rpki-client