Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer (raw, json)
Hash identifier: WW0mVDTMcSxQA47SdchyofPdlQ6IG4KSxcaC7e6VLAc=
Subject key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCAC7222F3D5FBEF2ED861E560AB0E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200930
IP: 193.58.180.0/22
IP: 2a0d:6ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c7:22:2f:3d:5f:be:f2:ed:86:1e:56:0a:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:fe:7a:4d:d1:0a:33:4c:e2:a0:9c:ed:5d:
d6:8e:1d:56:9a:53:e3:91:c5:e5:b8:aa:89:8b:fa:
4b:4d:14:fc:8b:d3:fa:87:9c:5b:fb:62:35:67:fd:
5b:1e:09:cf:75:da:6e:0a:b9:b1:56:39:24:25:c2:
0d:62:ea:ca:96:8e:18:b9:a6:05:98:bc:fc:34:c7:
77:12:fb:d9:f8:b7:94:b6:d8:e0:9a:47:ba:7d:10:
4e:2f:fb:6e:3a:f2:52:20:85:25:c9:e9:5a:c7:1d:
ba:30:ba:af:b9:91:c7:6f:99:1d:3e:78:8e:47:0d:
51:88:4f:1b:08:e9:3c:fa:45:90:be:78:86:a9:cc:
67:c3:b3:83:c4:f4:3f:b0:d0:50:e7:89:6c:f1:98:
0d:58:39:e3:df:2d:59:30:c3:be:e3:3c:b1:14:ed:
ac:a5:e3:10:35:f5:d3:d4:12:38:49:13:05:c1:92:
a1:12:8d:0a:1d:a9:55:55:9e:36:60:b4:60:10:c2:
57:bd:11:d6:d4:f1:a5:31:2c:e8:d5:9d:f9:e3:c5:
ef:d7:4f:15:64:81:10:36:48:47:62:0a:45:af:8a:
78:3f:39:a6:de:e4:fc:86:ba:4c:70:54:53:85:65:
ad:bc:41:36:df:27:f4:b4:08:2d:14:74:f2:a9:c5:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.180.0/22
IPv6:
2a0d:6ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200930
Signature Algorithm: sha256WithRSAEncryption
00:89:94:6f:41:17:83:df:d0:16:5b:71:e5:bf:9d:6e:92:9d:
56:11:39:33:36:08:9d:7d:41:21:c7:98:1f:66:cf:7b:60:69:
21:9b:b2:29:11:77:c2:eb:a0:14:c3:3a:fd:6d:9d:5d:a5:ad:
dc:f3:c8:c6:fe:17:9d:14:de:96:86:38:c8:61:58:82:d5:a5:
f1:ad:27:de:01:06:79:35:d6:f0:be:5d:47:e8:36:3e:5d:c3:
ec:66:cc:31:fc:b1:28:1c:c5:95:6e:e0:ed:c3:40:2a:04:ea:
6d:8f:c5:9f:aa:93:66:25:a2:22:c2:ac:d8:e2:15:16:f6:9d:
07:fc:43:30:7e:88:95:1d:c6:f7:19:e5:a7:75:69:76:41:77:
a3:03:db:04:e7:77:74:d1:60:e8:04:41:3f:95:97:6c:e4:8a:
76:06:83:e7:97:a3:65:b4:7a:eb:91:bc:d9:82:d4:bd:56:1a:
c5:73:aa:fd:40:2d:dc:08:12:b2:0c:72:20:c2:66:4e:67:c9:
58:b1:a4:c2:95:48:5a:e6:56:73:02:5b:fc:c8:c8:12:67:20:
0c:3e:3c:62:17:80:a9:29:98:75:e5:be:ff:e5:6f:c4:14:d2:
28:2d:88:51:05:84:ec:26:84:f4:33:0d:34:62:28:4a:a4:8a:
50:6c:3b:95
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt9ysciLz1fvvLthh5WCrDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YxMzBiNmY0NWYwMGY3YzFkMTM1YjZjOTNiMjBlNjkwNDEyY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLz+ek3RCjNM4qCc7V3Wjh1WmlPj
kcXluKqJi/pLTRT8i9P6h5xb+2I1Z/1bHgnPddpuCrmxVjkkJcINYurKlo4YuaYF
mLz8NMd3EvvZ+LeUttjgmke6fRBOL/tuOvJSIIUlyelaxx26MLqvuZHHb5kdPniO
Rw1RiE8bCOk8+kWQvniGqcxnw7ODxPQ/sNBQ54ls8ZgNWDnj3y1ZMMO+4zyxFO2s
peMQNfXT1BI4SRMFwZKhEo0KHalVVZ42YLRgEMJXvRHW1PGlMSzo1Z3548Xv108V
ZIEQNkhHYgpFr4p4Pzmm3uT8hrpMcFRThWWtvEE23yf0tAgtFHTyqcW/hQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCfxMLb0XwD3wdE1tsk7IOaQQSz8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2VhZDRh
MC0yNTIxLTRhYmItYWMyZC0wN2RiZDkwMGM0YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZWFkNGEw
LTI1MjEtNGFiYi1hYzJkLTA3ZGJkOTAwYzRhZC8xL0pfRXd0dlJmQVBmQjBUVzJ5
VHNnNXBCQkxQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwTq0MA0EAgACMAcDBQMqDWrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ4jANBgkqhkiG9w0BAQsFAAOCAQEAAImUb0EXg9/Q
Fltx5b+dbpKdVhE5MzYInX1BIceYH2bPe2BpIZuyKRF3wuugFMM6/W2dXaWt3PPI
xv4XnRTeloY4yGFYgtWl8a0n3gEGeTXW8L5dR+g2Pl3D7GbMMfyxKBzFlW7g7cNA
KgTqbY/Fn6qTZiWiIsKs2OIVFvadB/xDMH6IlR3G9xnlp3VpdkF3owPbBOd3dNFg
6ARBP5WXbOSKdgaD55ejZbR665G82YLUvVYaxXOq/UAt3AgSsgxyIMJmTmfJWLGk
wpVIWuZWcwJb/MjIEmcgDD48YheAqSmYdeW+/+VvxBTSKC2IUQWE7CaE9DMNNGIo
SqSKUGw7lQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:57 2026 by rpki-client