Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
File: I--d4hUq7xsqYqMfsvNehZCzrYQ.cer (raw, json)
Hash identifier: I/2S3TlvSS+OdYDOVqx3gD9qfVa/yiyzhaIeUvdAaC8=
Subject key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CECF6BA75A472B0EF71428E013BB6A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208244
IP: 5.180.115.0/24
IP: 83.171.196.0/22
IP: 146.19.219.0/24
IP: 2a0f:2b00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:f6:ba:75:a4:72:b0:ef:71:42:8e:01:3b:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:ae:46:95:7c:e8:d3:d6:b7:9e:36:90:38:
9d:4f:b3:8b:0d:48:aa:1b:e1:81:bb:65:2f:06:99:
10:a5:c1:94:1e:3c:15:03:07:92:3c:c2:4f:14:9d:
35:2d:da:18:6b:b2:f2:ac:03:1b:43:dd:af:83:a9:
20:2c:3c:99:a0:ac:bb:02:0a:70:7f:0a:a5:e1:1a:
ae:27:d8:4f:d1:2d:95:59:b4:25:e5:5a:4a:72:2e:
fa:5a:1b:98:35:62:74:29:8b:98:e5:53:f3:43:ef:
84:3b:0c:d8:8a:dd:67:e9:1f:68:33:fd:06:f0:9b:
50:44:03:60:02:ae:2f:7e:f2:fd:46:a7:9b:82:3a:
a2:f2:ef:27:f2:25:e8:67:ae:ca:d8:2b:8c:71:02:
f6:8b:59:63:9a:4f:18:4e:ab:53:21:28:b4:60:c5:
42:61:42:af:24:b3:9c:5d:09:76:b9:e0:1a:03:47:
96:67:8e:f3:e1:83:95:41:bc:57:8e:1c:42:e2:d9:
33:b1:22:26:e4:82:40:34:45:02:0c:f4:08:41:d4:
c0:d9:3c:6a:ec:51:af:0e:70:a2:fd:09:18:28:80:
91:2e:d5:7f:22:1d:7b:de:80:63:22:e8:ca:66:26:
3d:46:2a:20:ef:2a:25:2b:91:85:d1:e8:fb:4b:fb:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.115.0/24
83.171.196.0/22
146.19.219.0/24
IPv6:
2a0f:2b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208244
Signature Algorithm: sha256WithRSAEncryption
1e:ad:7c:ae:7e:55:42:23:8d:22:37:53:7c:74:cf:79:76:97:
3d:4f:8f:4f:67:ce:52:22:ab:a0:e7:49:01:fa:67:90:65:ed:
61:71:06:ba:bc:8f:57:3d:93:ef:6a:9c:b1:2c:66:46:41:d5:
d8:9a:a5:06:d0:91:e8:d2:fb:c4:12:dc:74:af:5e:a1:32:4a:
d9:12:36:23:d4:45:1d:15:f0:aa:8b:c9:5b:28:f7:dd:14:8c:
a1:ce:7d:c7:ce:6d:f3:aa:ee:08:84:1e:62:4b:5f:9e:b4:57:
68:45:2a:d1:0b:c7:07:4a:b6:b3:b1:1a:51:45:58:49:b9:64:
f8:31:eb:e6:10:c3:ed:ab:0e:a4:d4:ac:cf:83:de:09:b6:37:
74:56:fb:4d:9d:01:78:b6:a7:b1:74:42:1a:66:1d:b1:c7:8d:
8c:0c:85:ac:0a:0e:b5:71:ae:f3:5a:3f:77:d8:a2:c9:9d:21:
97:dd:77:10:62:8e:81:b3:f4:c5:86:19:3a:4f:d1:3a:65:8f:
4e:07:c2:ff:b6:73:13:8f:9e:74:6e:ea:23:06:75:d8:a3:ff:
16:4a:ed:e1:eb:7c:8f:bb:55:df:da:93:fb:65:1f:aa:11:67:
31:81:89:8f:20:a1:f0:ae:77:82:8c:cd:96:b7:bd:fa:37:67:
fa:98:01:38
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZt87Pa6daRysO9xQo4BO7ajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2VmOWRlMjE1MmFlZjFiMmE2MmEzMWZiMmYzNWU4NTkwYjNhZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAmuRpV86NPWt542kDidT7OLDUiq
G+GBu2UvBpkQpcGUHjwVAweSPMJPFJ01LdoYa7LyrAMbQ92vg6kgLDyZoKy7Agpw
fwql4RquJ9hP0S2VWbQl5VpKci76WhuYNWJ0KYuY5VPzQ++EOwzYit1n6R9oM/0G
8JtQRANgAq4vfvL9Rqebgjqi8u8n8iXoZ67K2CuMcQL2i1ljmk8YTqtTISi0YMVC
YUKvJLOcXQl2ueAaA0eWZ47z4YOVQbxXjhxC4tkzsSIm5IJANEUCDPQIQdTA2Txq
7FGvDnCi/QkYKICRLtV/Ih173oBjIujKZiY9Riog7yolK5GF0ej7S/sMOwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFCPvneIVKu8bKmKjH7LzXoWQs62EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2MzZjNj
Yy1jNTZiLTRkMzUtYjc3Zi0zYmM2ZWIwYTM0N2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYzNmM2Nj
LWM1NmItNGQzNS1iNzdmLTNiYzZlYjBhMzQ3Zi8xL0ktLWQ0aFVxN3hzcVlxTWZz
dk5laFpDenJZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQABbRzAwQCU6vEAwQAkhPbMA0EAgACMAcDBQAq
DysAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtdDANBgkqhkiG9w0BAQsFAAOC
AQEAHq18rn5VQiONIjdTfHTPeXaXPU+PT2fOUiKroOdJAfpnkGXtYXEGuryPVz2T
72qcsSxmRkHV2JqlBtCR6NL7xBLcdK9eoTJK2RI2I9RFHRXwqovJWyj33RSMoc59
x85t86ruCIQeYktfnrRXaEUq0QvHB0q2s7EaUUVYSblk+DHr5hDD7asOpNSsz4Pe
CbY3dFb7TZ0BeLansXRCGmYdsceNjAyFrAoOtXGu81o/d9iiyZ0hl913EGKOgbP0
xYYZOk/ROmWPTgfC/7ZzE4+edG7qIwZ12KP/Fkrt4et8j7tV39qT+2UfqhFnMYGJ
jyCh8K53gozNlre9+jdn+pgBOA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:31 2026 by rpki-client