Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.cer (raw, json)
Hash identifier: RHqzu22bzIrKyXm7X6E74PGGMdQ6BJqn5eXxhdTqnOA=
Subject key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D209610CE9721EE6BA29130B4B36E094D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Mar 2026 16:03:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59455
IP: 46.17.208.0/21
IP: 185.23.52.0/22
IP: 185.33.192.0/22
IP: 185.98.108.0/22
IP: 185.148.88.0/22
IP: 2a04:2340::/29
IP: 2a05:7940::/29
IP: 2a07:5e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:96:10:ce:97:21:ee:6b:a2:91:30:b4:b3:6e:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 24 16:03:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:23:48:89:ea:bb:46:26:23:5c:08:b0:a3:
ee:f5:81:da:aa:11:21:4c:81:06:d5:cd:8f:86:54:
9f:7f:8d:f7:fc:a5:85:ec:08:27:85:40:02:a0:3c:
ef:dc:78:18:2f:ff:d4:e7:16:4a:11:7d:45:a3:70:
85:be:1f:23:52:ef:07:c6:ff:b3:5b:15:de:07:42:
9a:fb:9a:28:a8:f8:ad:ad:2c:2f:58:31:84:dc:42:
ee:ff:3e:4d:31:99:c6:bc:71:74:8d:00:64:dd:32:
4e:81:8d:bc:61:6d:2f:85:08:d1:18:66:9a:18:bb:
94:48:c4:5b:85:cb:7a:a8:97:99:84:87:84:6f:09:
87:52:df:72:8e:81:a2:0b:52:a4:07:39:71:59:41:
9c:91:9b:3c:2f:94:a5:41:18:9d:c2:2e:57:eb:cc:
94:99:8f:6b:de:8c:37:fb:09:cc:2f:c8:8b:7f:ac:
34:3a:df:af:ea:f9:41:3b:ac:46:df:cf:0e:e6:0d:
ad:30:2e:4e:65:75:ab:b6:63:4d:09:ad:f9:59:a5:
c7:55:9d:34:d2:39:70:b1:4c:a3:ad:25:34:f6:21:
9f:4b:86:f6:a4:95:e1:e1:11:00:a0:3b:ea:75:6a:
d9:ed:5e:13:e6:5e:b2:90:3a:b7:7d:c4:b6:78:70:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.98.108.0/22
185.148.88.0/22
IPv6:
2a04:2340::/29
2a05:7940::/29
2a07:5e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59455
Signature Algorithm: sha256WithRSAEncryption
77:f4:c2:98:1b:88:83:b5:f2:ba:9c:9e:fa:a0:3d:15:8a:27:
86:2c:63:84:7a:16:7d:b3:b4:47:52:3c:e1:3b:8d:9f:88:01:
62:75:f1:56:9c:86:ba:ec:53:82:0e:02:d6:ed:2a:54:4c:30:
30:85:ab:e4:b2:80:24:f6:d1:7a:0c:d6:53:fb:8c:b8:1c:5d:
71:a3:ce:a9:a2:3c:08:11:a2:a8:c7:c8:25:40:ea:f6:e3:36:
fa:e0:47:81:bf:7f:26:14:0d:65:3b:2c:cb:28:27:71:0e:db:
da:fd:07:e4:93:81:1d:72:85:ef:33:85:50:d1:13:68:72:bd:
09:22:8e:eb:fb:a5:c9:00:44:a1:e4:6c:91:8f:01:57:cd:d5:
2f:ea:1d:c1:16:60:1c:5f:64:86:47:98:c4:34:14:3e:1b:1c:
b7:19:83:1e:82:bd:75:ef:ee:20:c5:ce:d4:8e:e6:92:be:75:
e9:6a:b5:a9:ec:e6:d0:41:7e:14:24:56:45:0e:cc:aa:cb:47:
6c:19:cc:c8:43:54:4b:ea:14:10:98:5e:2e:51:05:12:d5:5e:
74:eb:df:99:e8:80:c0:4a:af:ed:6b:92:ee:b5:7e:20:6a:fa:
8e:40:a8:de:4c:d6:42:71:96:b2:03:d4:ee:bc:e2:d5:39:7e:
8e:82:32:d4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgISAZ0glhDOlyHua6KRMLSzbglNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI0MTYwMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJmMDBkZmY4MDYzMjMxYmQ5OTY3Njg5OWVhYmVhYmEzM2JjNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50jSInqu0YmI1wIsKPu9YHaqhEh
TIEG1c2PhlSff433/KWF7AgnhUACoDzv3HgYL//U5xZKEX1Fo3CFvh8jUu8Hxv+z
WxXeB0Ka+5ooqPitrSwvWDGE3ELu/z5NMZnGvHF0jQBk3TJOgY28YW0vhQjRGGaa
GLuUSMRbhct6qJeZhIeEbwmHUt9yjoGiC1KkBzlxWUGckZs8L5SlQRidwi5X68yU
mY9r3ow3+wnML8iLf6w0Ot+v6vlBO6xG388O5g2tMC5OZXWrtmNNCa35WaXHVZ00
0jlwsUyjrSU09iGfS4b2pJXh4REAoDvqdWrZ7V4T5l6ykDq3fcS2eHD8fQIDAQAB
o4IC1TCCAtEwHQYDVR0OBBYEFBS/AN/4BjIxvZlnaJnqvqujO8XZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzk5NmM3
Mi1iNGE5LTQwNTgtYmRmOC1iZDJlNzdjZDQ3OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTk2Yzcy
LWI0YTktNDA1OC1iZGY4LWJkMmU3N2NkNDc5My8xL0ZMOEEzX2dHTWpHOW1XZG9t
ZXEtcTZNN3hkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF
BwEHAQH/BEUwQzAkBAIAATAeAwQDLhHQAwQCuRc0AwQCuSHAAwQCuWJsAwQCuZRY
MBsEAgACMBUDBQMqBCNAAwUDKgV5QAMFAyoHXgAwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOg/MA0GCSqGSIb3DQEBCwUAA4IBAQB39MKYG4iDtfK6nJ76oD0ViieG
LGOEehZ9s7RHUjzhO42fiAFidfFWnIa67FOCDgLW7SpUTDAwhavksoAk9tF6DNZT
+4y4HF1xo86pojwIEaKox8glQOr24zb64EeBv38mFA1lOyzLKCdxDtva/Qfkk4Ed
coXvM4VQ0RNocr0JIo7r+6XJAESh5GyRjwFXzdUv6h3BFmAcX2SGR5jENBQ+Gxy3
GYMegr117+4gxc7UjuaSvnXparWp7ObQQX4UJFZFDsyqy0dsGczIQ1RL6hQQmF4u
UQUS1V5069+Z6IDASq/ta5LutX4gavqOQKjeTNZCcZayA9TuvOLVOX6OgjLU
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:50:52 2026 by rpki-client