Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
File: DL6R62OkTx6fGoPt0hih7HXCXpE.cer (raw, json)
Hash identifier: ffmWEB7oHHuOsyrQwYSYGupVRqFdIyTYNJAbRzppGvc=
Subject key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E63AFC161E5CB35A53E9D4DCCE274383F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 May 2026 09:48:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.235.199.0/24
IP: 193.201.196.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:af:c1:61:e5:cb:35:a5:3e:9d:4d:cc:e2:74:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 09:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:e2:74:5c:27:03:df:62:ca:3b:b1:be:de:
47:4c:63:de:5f:bc:cc:14:98:69:76:43:26:d3:d4:
3f:95:8c:1b:6e:65:02:cf:e2:e4:f1:ab:45:c1:97:
52:69:8d:bc:b5:b1:a0:f4:79:df:c9:64:e0:81:fe:
ce:89:55:81:79:66:86:5a:66:96:01:5f:3a:43:33:
b1:50:32:bb:9b:60:14:49:c1:90:35:2c:ee:6f:db:
f8:da:cc:95:39:a5:15:8a:a1:68:fd:33:66:2f:59:
57:9e:9d:25:78:b4:70:26:60:1d:be:f2:39:bc:00:
21:90:95:f2:52:0f:ee:e9:e9:0d:b2:17:dc:5a:84:
5f:a3:f1:48:75:a4:92:28:77:36:e7:46:93:85:f7:
21:4e:b0:5b:d8:f5:20:9e:52:09:4b:4c:d7:54:aa:
b7:38:ee:d5:e7:be:99:81:44:4c:ca:11:c4:4a:e7:
7d:e7:fe:5a:75:a2:31:b5:0d:5a:f4:3a:0c:44:b1:
92:65:4b:89:57:04:51:e5:4d:37:53:3c:ce:25:be:
bb:1c:82:94:61:7b:d8:02:eb:6b:33:c8:79:f9:ad:
10:c9:28:e9:ec:b4:27:65:12:d4:2c:5c:22:ae:1c:
70:2c:b0:b8:e2:cd:dc:3e:06:c0:b0:45:55:2b:55:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.199.0/24
193.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ac:f6:cf:53:5c:d1:80:ee:22:83:de:20:ed:b1:04:5b:c4:
da:0c:34:fb:a1:96:b6:82:f4:31:5f:b0:3a:17:f7:e1:66:d1:
df:bf:47:0a:c6:c0:8b:4d:64:2e:dc:e1:52:3b:43:5f:24:23:
60:3f:4c:54:0a:ed:4c:69:1d:09:a3:97:cf:20:f5:63:54:7e:
4a:13:7a:6d:68:97:84:19:46:cd:4d:bf:ee:e8:fc:de:91:54:
af:ea:8a:19:3b:f0:dc:78:05:3b:09:9e:fb:bf:2e:0f:49:a6:
57:b4:e6:7d:16:77:6d:12:cd:57:1a:b9:61:88:76:43:32:72:
b2:d4:7c:39:cd:74:ca:a6:f0:75:69:62:21:98:3c:7c:a4:3c:
2e:6e:c9:8b:7f:bd:fa:bb:6b:b0:a0:f7:e7:17:16:94:13:b2:
4b:9b:fb:b5:9e:fd:60:c7:70:e9:7c:bc:63:fb:d1:64:1d:82:
da:de:a3:e4:8c:01:d4:95:d7:54:15:19:bf:a3:f1:c4:30:38:
6d:85:00:28:62:33:46:e9:20:a9:10:27:e8:19:6d:8a:1b:87:
c7:7a:57:dc:0f:cb:eb:b9:a7:32:93:66:72:44:6a:60:e0:85:
1d:0a:68:bc:e8:7e:e3:ca:58:d4:93:48:a3:6f:ee:7b:1e:6d:
1d:c7:8b:3d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZ5jr8Fh5cs1pT6dTczidDg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTI2MDk0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JlOTFlYjYzYTQ0ZjFlOWYxYTgzZWRkMjE4YTFlYzc1YzI1ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogbidFwnA99iyjuxvt5HTGPeX7zM
FJhpdkMm09Q/lYwbbmUCz+Lk8atFwZdSaY28tbGg9HnfyWTggf7OiVWBeWaGWmaW
AV86QzOxUDK7m2AUScGQNSzub9v42syVOaUViqFo/TNmL1lXnp0leLRwJmAdvvI5
vAAhkJXyUg/u6ekNshfcWoRfo/FIdaSSKHc250aThfchTrBb2PUgnlIJS0zXVKq3
OO7V576ZgURMyhHESud95/5adaIxtQ1a9DoMRLGSZUuJVwRR5U03UzzOJb67HIKU
YXvYAutrM8h5+a0QySjp7LQnZRLULFwirhxwLLC44s3cPgbAsEVVK1XTqwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFAy+ketjpE8enxqD7dIYoex1wl6RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzdlNTFi
NC0wYWI0LTQ3MTktYjMzMC1iZGM1YWU4YWJkYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvN2U1MWI0
LTBhYjQtNDcxOS1iMzMwLWJkYzVhZThhYmRiMS8xL0RMNlI2Mk9rVHg2ZkdvUHQw
aGloN0hYQ1hwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAuevHAwQAwcnEMA0GCSqGSIb3DQEBCwUAA4IB
AQA7rPbPU1zRgO4ig94g7bEEW8TaDDT7oZa2gvQxX7A6F/fhZtHfv0cKxsCLTWQu
3OFSO0NfJCNgP0xUCu1MaR0Jo5fPIPVjVH5KE3ptaJeEGUbNTb/u6PzekVSv6ooZ
O/DceAU7CZ77vy4PSaZXtOZ9FndtEs1XGrlhiHZDMnKy1Hw5zXTKpvB1aWIhmDx8
pDwubsmLf736u2uwoPfnFxaUE7JLm/u1nv1gx3DpfLxj+9FkHYLa3qPkjAHUlddU
FRm/o/HEMDhthQAoYjNG6SCpECfoGW2KG4fHelfcD8vruacyk2ZyRGpg4IUdCmi8
6H7jyljUk0ijb+57Hm0dx4s9
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:48 2026 by rpki-client