Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
File: Hzspn37Z9UTXv5ALWcz4iadk30g.cer (raw, json)
Hash identifier: 5S+fP+q2IyydM8QBBcNh2DRCoYnm3SbeFgZ7NktbO9o=
Subject key identifier: 1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E37C89587C4A5F7FAFF9F211CAC1430
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201524
IP: 185.71.180.0/22
IP: 2a03:3aa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:c8:95:87:c4:a5:f7:fa:ff:9f:21:1c:ac:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:46:d7:7b:5d:0d:ef:48:24:97:5f:62:58:
c7:2f:ec:1c:71:b0:85:a4:14:01:9e:a0:9d:f1:49:
d3:e2:1a:f7:d4:a2:ab:50:ec:29:70:ed:18:27:10:
34:9e:a6:cf:c2:d8:59:93:a9:ed:67:44:9d:0b:88:
db:f7:f8:c9:50:f5:c6:e1:92:03:06:0d:c3:9c:3d:
48:5e:df:0b:94:f1:0f:32:9a:5f:db:b8:11:91:3d:
74:24:11:97:17:66:0a:e1:a8:64:ff:cf:e4:cc:93:
a8:fd:fd:8c:9a:df:de:d2:fb:15:88:06:ef:a5:0c:
a5:79:98:2c:d4:42:4b:c4:04:2e:51:59:83:31:16:
0b:7a:26:31:87:aa:c3:cf:6b:f3:2a:0f:0a:61:23:
d3:e8:e4:60:81:17:72:3a:7f:34:92:74:a6:e5:d0:
55:6e:11:1f:9e:a1:08:a6:b8:79:fe:6d:39:4a:b2:
4c:30:90:14:60:8c:3b:99:b8:0e:d0:ee:92:d6:a9:
cd:1d:4a:1d:db:21:10:19:c0:5f:f1:fa:90:77:0a:
54:82:cd:3b:68:c6:6d:77:12:d1:1a:0a:4a:a6:c6:
82:74:66:35:53:61:82:5f:42:92:a6:41:4f:24:51:
cb:3b:8c:eb:6a:7f:a4:56:00:07:ef:73:b7:3c:92:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.180.0/22
IPv6:
2a03:3aa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201524
Signature Algorithm: sha256WithRSAEncryption
0d:14:f0:09:f8:7a:67:1f:78:bf:4f:1e:9b:8f:f5:86:37:f8:
1e:dc:04:86:04:3f:5b:ea:dc:68:ed:30:7c:82:f8:9f:1e:c5:
e5:4d:b5:e3:e3:7a:1b:0d:e9:50:a0:f3:39:fd:4a:5f:52:89:
af:a5:a0:e2:df:84:a5:1c:3c:34:29:87:8a:ee:05:b3:36:ad:
88:37:de:36:20:c8:f6:36:7b:32:e4:f2:a7:90:37:64:0a:55:
4b:9f:64:5d:45:50:82:39:5e:8c:ca:8a:70:73:9a:df:84:ec:
fb:b7:e6:e0:3e:17:f4:58:d4:56:60:7c:e4:09:96:ad:80:3c:
2b:d4:19:24:a4:71:18:9b:f7:4b:d5:64:94:28:20:27:93:34:
26:4a:31:2f:13:6c:b3:f2:7b:c0:a0:f8:fb:a0:c5:15:53:90:
e8:58:c9:fc:bd:5a:8b:82:09:2a:b7:3b:c6:96:b0:db:a0:b2:
5b:f9:36:08:94:76:6e:d4:8f:dd:52:3c:fb:5e:c9:d7:af:9a:
2c:14:24:80:32:51:bb:f9:30:31:03:b9:13:cf:ba:9a:7e:8c:
70:9a:b6:2f:28:82:5f:dd:3b:24:52:25:49:4d:a0:7c:91:3a:
6c:99:cb:8a:3f:94:49:1a:a7:4c:cf:a9:3a:90:71:3e:2e:d5:
d2:80:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:32 2026 by rpki-client