Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
File: IMotTLPla10plwqX_GResv1odqE.cer (raw, json)
Hash identifier: U41ClVtznPhw6wNRwK7UyhAt4OgBeXsMftrw5bNQlQM=
Subject key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6C5DDCB103C20D4B959EE2EAD8A7DD7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 16:10:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198770
IP: 37.18.74.0 -- 37.18.77.255
IP: 37.230.152.0/22
IP: 37.230.248.0/24
IP: 62.113.58.0 -- 62.113.63.255
IP: 85.92.116.0 -- 85.92.118.255
IP: 111.88.132.0/22
IP: 128.0.66.0/23
IP: 141.101.204.0/24
IP: 141.101.228.0/24
IP: 141.101.231.0/24
IP: 178.170.225.0/24
IP: 2a0d:b1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:5d:dc:b1:03:c2:0d:4b:95:9e:e2:ea:d8:a7:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 16:10:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:89:04:15:60:67:a8:e1:ec:e2:39:8e:6e:
77:d7:d1:db:a1:fd:51:94:f9:30:ed:17:ac:cf:da:
b1:19:2b:e7:af:01:3c:15:70:6e:92:d5:18:3f:19:
a6:26:08:ff:92:e0:8a:dd:3f:53:13:02:a7:2f:7d:
5b:b5:35:b0:f8:5c:8e:ea:06:43:64:3b:2b:dc:71:
20:48:6c:9d:21:98:f7:4b:e8:e2:c0:06:c7:a5:92:
7b:09:ec:e5:4d:13:c2:07:b1:f8:79:47:d9:35:72:
e4:dd:a1:05:99:99:82:75:fd:26:4c:13:24:c3:04:
1b:46:df:6c:ed:4d:9d:b5:d2:72:43:35:6a:35:54:
34:f8:1d:af:b3:c5:ff:88:15:e7:5c:c2:ea:28:46:
a7:32:3a:21:e6:fb:25:38:75:d2:ab:8e:51:dc:aa:
95:fc:82:72:dc:79:b4:7d:39:6f:30:44:25:35:f0:
2e:c3:46:19:e2:6f:fc:24:14:5a:c4:e6:fe:07:77:
8a:40:e4:2c:08:69:2f:e0:b6:1a:cf:b5:c6:81:ec:
34:e5:c4:a8:86:c5:f5:91:35:5d:5a:7f:80:00:ab:
e6:09:33:84:25:95:a7:b8:2b:08:cf:3f:c6:ec:1d:
d7:1b:eb:3d:2b:c7:c1:cd:be:22:7c:06:b4:84:b4:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
62.113.58.0-62.113.63.255
85.92.116.0-85.92.118.255
111.88.132.0/22
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198770
Signature Algorithm: sha256WithRSAEncryption
0d:3e:c0:f0:aa:be:94:4d:f2:49:91:2d:e4:55:2e:39:76:30:
ea:ab:82:69:2f:0b:13:45:a0:08:4c:31:11:4d:bc:c4:c5:7f:
ac:fb:e9:5b:6e:a0:dd:e4:07:65:51:6b:3a:8e:4f:4a:46:90:
8f:aa:c1:c7:3b:9c:fc:10:3c:b7:ae:ac:71:c6:b8:d5:a4:ef:
3c:12:b4:dc:58:e7:6c:c5:0b:9f:b4:08:f0:8f:8d:30:53:ab:
06:63:74:7a:ad:eb:72:e1:00:74:dd:90:44:5c:68:bb:6f:50:
e0:db:58:0b:81:ad:1e:dc:08:2b:4b:33:fc:a9:d9:35:c9:b3:
d4:db:e7:1d:8e:9a:e8:9b:e1:0a:d6:9d:b8:76:d5:6f:73:20:
63:f6:4f:85:d8:10:ed:92:50:95:18:12:d2:02:ba:ba:f3:64:
af:2f:d5:5e:05:28:f2:7b:99:3a:eb:e6:a2:10:0a:72:a3:bf:
33:4b:30:0b:31:64:ed:0b:55:c2:b9:ac:3d:4d:d9:cd:50:64:
ea:1d:4f:db:92:04:67:5e:76:8f:c6:a5:ae:73:a3:4c:b6:04:
a4:61:df:61:d5:19:0a:85:54:d3:b2:d2:d2:5f:fb:aa:ee:d2:
58:33:3b:9a:ed:14:1d:bf:ac:1f:17:22:a5:bd:b7:78:ae:87:
63:b7:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:32:50 2026 by rpki-client