Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.cer (raw, json)
Hash identifier: qcWsYmYG6hm8U6hVALuY5EhmmLEOZrX8aYq7DCCyP5w=
Subject key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B2BD854A9FE36ECD1256E07DFCEAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 196880
IP: 91.226.147.0/24
IP: 193.104.223.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:2b:d8:54:a9:fe:36:ec:d1:25:6e:07:df:ce:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:78:ed:a8:2c:39:33:99:3d:ce:e2:df:e7:
67:08:95:81:cb:76:eb:d1:a7:e3:58:97:a7:b2:a8:
2a:2f:7c:f1:e2:2e:b4:0e:08:c8:40:07:45:66:89:
9a:92:18:ef:4f:df:97:f2:ff:0a:54:8f:b0:fe:8d:
08:d1:6c:9a:41:08:27:06:26:3d:37:a8:2a:13:77:
3c:0a:64:61:2a:8e:51:01:a8:c3:4b:1f:dd:d6:d7:
f0:b8:c2:a4:91:8e:e2:a5:70:3f:71:ac:57:fc:08:
75:34:56:e9:7d:c0:ad:bb:28:a9:8e:90:a3:4f:6f:
2d:ad:59:f6:58:4d:36:87:0a:0b:73:57:e9:31:15:
dc:71:c1:86:52:8b:a8:1b:b6:4f:10:8c:d9:bd:70:
c3:8e:c0:95:82:ea:f5:81:11:1f:25:27:f6:27:92:
94:57:4f:e5:a8:10:bd:a7:ae:d4:1b:7e:7e:ac:13:
e5:5e:68:b6:4d:2c:19:08:95:36:4d:4f:f7:d6:70:
c1:fb:7f:14:10:55:2d:69:27:4a:51:0f:fd:18:99:
b3:8d:cd:8a:a5:6c:8f:ab:10:9a:b5:3f:09:b3:9a:
3f:59:06:05:1d:7f:c8:ba:82:8d:31:11:ee:37:a5:
f1:e4:60:72:84:ea:8d:65:14:f9:aa:64:a0:40:ca:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.147.0/24
193.104.223.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196880
Signature Algorithm: sha256WithRSAEncryption
07:62:5d:fe:7e:66:f1:5a:e4:79:86:cf:09:06:e5:6f:a5:0d:
f6:83:f2:67:06:1c:99:65:05:bc:a6:fb:a8:9a:44:b8:7d:50:
8c:f4:de:05:81:59:ec:4b:37:bb:cf:f3:a5:7b:b7:cd:5b:37:
cd:69:e9:a3:33:4b:d4:5a:a8:aa:7d:22:dc:e1:67:bc:07:ac:
18:91:e3:c4:9d:b4:09:35:82:58:b1:4e:63:0c:c4:d9:a2:78:
07:14:35:ae:63:48:fc:1c:be:68:00:28:b2:3d:1b:98:26:cf:
e5:0e:ee:f7:4d:99:67:19:7c:78:ec:4e:a0:38:9a:dd:f2:54:
3b:82:f7:e8:2f:d1:24:2e:9a:dc:f9:2e:96:f0:13:d8:6c:f7:
6a:6d:60:a2:0e:b5:dd:0e:df:ad:c8:2c:9c:4f:55:23:72:a1:
78:da:36:44:dd:ae:bd:55:3b:fa:bb:5d:bd:16:3a:1a:a2:c4:
fd:d3:d6:47:03:11:e8:5c:c7:c8:0c:46:c0:dd:a4:7c:7d:12:
4e:0c:c3:4f:77:e3:4a:a0:46:1d:3d:5a:a8:45:bb:28:b1:d4:
de:5e:fa:82:dc:a9:e2:b7:78:5f:f7:31:44:a9:36:9a:ad:b4:
4b:3e:32:14:ff:24:47:d4:d5:e9:a4:e7:eb:cb:c2:a7:a6:25:
6c:52:2d:2f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZt6WyvYVKn+NuzRJW4H386qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk4MGQ4Y2E0NjRhZTQ0MzMwYzAyZDYwOTdkMWIzZTM0NjdlMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AB47agsOTOZPc7i3+dnCJWBy3br
0afjWJensqgqL3zx4i60DgjIQAdFZomakhjvT9+X8v8KVI+w/o0I0WyaQQgnBiY9
N6gqE3c8CmRhKo5RAajDSx/d1tfwuMKkkY7ipXA/caxX/Ah1NFbpfcCtuyipjpCj
T28trVn2WE02hwoLc1fpMRXcccGGUouoG7ZPEIzZvXDDjsCVgur1gREfJSf2J5KU
V0/lqBC9p67UG35+rBPlXmi2TSwZCJU2TU/31nDB+38UEFUtaSdKUQ/9GJmzjc2K
pWyPqxCatT8Js5o/WQYFHX/IuoKNMRHuN6Xx5GByhOqNZRT5qmSgQMoqfQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFA2YDYykZK5EMwwC1gl9Gz40Z+CFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzYzNTY5
ZS1mNDU4LTQ0NjctYTQxNS1mNmZmMjgxZmJjMzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNjM1Njll
LWY0NTgtNDQ2Ny1hNDE1LWY2ZmYyODFmYmMzMi8xL0RaZ05qS1JrcmtRekRBTFdD
WDBiUGpSbjRJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW+KTAwQAwWjfMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMBEDANBgkqhkiG9w0BAQsFAAOCAQEAB2Jd/n5m8VrkeYbPCQblb6UN
9oPyZwYcmWUFvKb7qJpEuH1QjPTeBYFZ7Es3u8/zpXu3zVs3zWnpozNL1Fqoqn0i
3OFnvAesGJHjxJ20CTWCWLFOYwzE2aJ4BxQ1rmNI/By+aAAosj0bmCbP5Q7u902Z
Zxl8eOxOoDia3fJUO4L36C/RJC6a3PkulvAT2Gz3am1gog613Q7frcgsnE9VI3Kh
eNo2RN2uvVU7+rtdvRY6GqLE/dPWRwMR6FzHyAxGwN2kfH0STgzDT3fjSqBGHT1a
qEW7KLHU3l76gtyp4rd4X/cxRKk2mq20Sz4yFP8kR9TV6aTn68vCp6YlbFItLw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:17 2026 by rpki-client