Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
File: IzlKEl-jrODEem_jT0CGtNO6VYg.cer (raw, json)
Hash identifier: m5CdagnIlT2nibzHWHDDr07slU/cW10HNcGLhcxanGo=
Subject key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED81F4485DA127A838E5E3D34839AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21229
AS: 197248
IP: 62.112.192.0/21
IP: 62.112.208.0/21
IP: 77.111.88.0/21
IP: 93.88.192.0/21
IP: 109.61.0.0/22
IP: 109.61.8.0/21
IP: 109.61.20.0 -- 109.61.31.255
IP: 109.61.48.0 -- 109.61.79.255
IP: 109.61.96.0/21
IP: 109.61.112.0/21
IP: 185.229.249.0/24
IP: 2a01:be00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:81:f4:48:5d:a1:27:a8:38:e5:e3:d3:48:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:5f:0d:17:43:5d:95:87:86:d1:7c:92:7e:
00:05:26:d0:68:9d:68:2a:f4:e2:54:4f:a7:0a:79:
3d:d1:5c:52:1a:be:5d:78:5e:63:19:95:9b:7b:53:
75:fd:5f:dd:8c:f9:e0:d5:5b:d1:e9:24:d7:67:a5:
a0:cb:1e:e9:cf:91:01:e0:9f:13:d8:41:b5:ba:34:
7d:e2:5d:a0:52:06:aa:1a:d6:b8:20:d5:38:ea:a5:
83:46:06:55:b1:de:d0:75:cc:4a:e0:ed:a9:07:b3:
33:08:8b:c6:af:b1:a1:9c:7d:bf:30:46:34:e8:64:
8c:2f:3b:1d:74:bc:27:7f:26:db:84:5f:43:42:89:
4e:af:b2:2a:21:36:7f:cf:40:48:96:d2:43:42:f9:
79:25:12:a4:61:57:60:61:26:f2:f2:26:ae:db:3d:
94:ca:6b:0b:8b:97:55:de:1d:dd:34:08:b4:e4:13:
56:6d:50:a0:d3:85:32:db:fe:44:2d:91:6d:9f:13:
95:dc:5b:98:ea:0a:d3:85:0b:b5:fc:64:b6:12:fc:
02:9a:82:a2:6e:af:a4:96:02:a5:27:09:b7:18:2d:
5c:b4:b8:6f:1e:ad:da:3e:45:0f:f3:58:78:91:c6:
f7:30:2f:27:d5:6c:0c:e5:97:75:da:c5:ec:61:4a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
185.229.249.0/24
IPv6:
2a01:be00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21229
197248
Signature Algorithm: sha256WithRSAEncryption
81:fb:9b:02:dd:84:cf:09:8f:89:29:78:0e:02:44:b3:25:92:
d1:cf:97:44:3e:ca:f8:69:af:d4:cf:16:5d:0f:93:5f:cb:d5:
b9:85:43:3d:fd:e8:52:fe:63:bb:44:6b:cb:f5:99:73:bc:59:
5a:7e:47:2c:15:ec:18:3a:9f:b7:68:40:2d:3c:6b:e4:40:52:
b4:70:60:db:07:cb:29:4a:c4:93:e8:fd:b5:2b:dc:61:f1:75:
a1:dd:b0:37:40:13:68:c3:70:f3:2d:f7:c9:b5:cf:ac:f4:92:
5c:d9:63:e4:a9:f4:54:84:ff:8e:3d:92:b8:a1:bf:f6:b5:29:
e5:83:e1:a3:98:f9:4f:ee:f0:a7:5d:d1:79:e3:9d:8e:41:6e:
bb:d0:6e:b9:2b:09:dd:9f:0f:be:58:40:81:9c:93:59:87:07:
ac:94:ad:7e:46:18:2c:ab:ff:c2:22:f6:da:c0:57:19:30:41:
ca:cd:1b:ff:b6:6d:4b:fd:25:4b:56:62:c0:f1:0d:f8:73:db:
dc:62:cc:26:69:cb:a3:8d:4f:8f:63:ae:16:73:d1:7c:7c:26:
a0:a6:86:3b:78:78:64:84:b4:42:6e:f6:d5:0d:87:de:f9:dd:
9b:38:ff:bb:fd:af:7e:70:5a:86:86:99:67:de:21:09:86:3e:
d5:2d:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:08 2026 by rpki-client