Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
File: K-U9NAqL9Hwb800yVeEC77GBrRk.cer (raw, json)
Hash identifier: WcSGwI1JEgUWO4ZDUQC1iyaODR/GUQxRqhuqDhS1TeE=
Subject key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A03767ED270DE8740BFB9E0AF6D516C7F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Aug 2026 05:32:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218886
IP: 46.236.0.0/18
IP: 81.29.64.0/19
IP: 89.151.64.0/18
IP: 178.236.144.0/20
IP: 185.68.112.0/22
IP: 194.164.114.0/24
IP: 2a02:16f8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:67:ed:27:0d:e8:74:0b:fb:9e:0a:f6:d5:16:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 05:32:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:c0:93:7f:c2:76:3e:4a:ad:f6:a4:22:52:
a8:44:d6:6d:45:62:2b:03:7a:11:d8:3a:50:3b:65:
01:7e:b7:0e:ef:11:5a:c4:86:df:07:4c:99:64:d1:
50:5d:29:ea:38:94:40:d1:70:81:c3:e5:11:bb:1c:
b8:a9:8e:b8:e7:32:98:12:dc:43:a1:6a:ba:31:48:
fd:28:53:f0:95:63:bf:97:4b:41:3a:e6:a3:a2:90:
8c:3c:d7:0b:cf:5e:4f:90:dd:f9:2c:bf:29:7b:c1:
b3:38:40:c1:15:81:f3:e8:13:69:e0:bc:71:3c:6a:
4b:9a:1f:66:16:a7:c4:b6:c2:88:f1:2c:d7:ad:a4:
a6:19:1c:a5:21:fd:75:55:6b:5e:77:aa:09:37:69:
5d:7b:2d:4b:cd:0d:e5:3b:b3:a2:17:00:06:bc:fd:
75:11:d0:03:17:a3:df:46:a1:d2:ee:b6:95:31:0d:
99:de:d8:6d:77:d7:6c:96:ec:97:d7:e3:50:3b:88:
2c:c7:7d:73:61:44:92:61:c9:45:c6:0c:01:bb:71:
c7:88:01:37:4a:9f:89:30:61:98:4a:a8:9c:31:55:
c1:6f:cf:e0:7c:31:e6:65:7e:bc:9d:8f:a1:89:73:
70:d2:f8:a0:e9:bb:96:c2:77:34:09:da:98:70:7b:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.0.0/18
81.29.64.0/19
89.151.64.0/18
178.236.144.0/20
185.68.112.0/22
194.164.114.0/24
IPv6:
2a02:16f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218886
Signature Algorithm: sha256WithRSAEncryption
5d:4b:30:06:5a:73:75:b0:52:a4:ea:ca:92:65:ef:50:1c:bf:
4f:2a:e6:16:ee:f3:cc:49:6b:b8:5d:e1:0c:ff:3d:30:98:c3:
85:d3:15:7f:6b:84:19:5b:78:40:e3:6d:c0:f2:00:01:bf:41:
28:f5:93:ed:ce:b3:9e:ac:26:19:35:7d:06:45:a2:4e:b9:bf:
96:69:cc:bc:6f:9b:d9:6d:22:52:12:ee:b7:0d:79:42:3d:24:
5d:96:fc:68:fc:4f:5e:a4:58:fd:10:38:3c:b3:f0:3b:77:0a:
b3:f2:5d:92:55:75:4e:34:88:61:de:f4:80:a5:cc:4e:8e:65:
68:59:1c:9d:50:4f:a0:23:94:f8:a7:27:97:50:0f:21:0d:d5:
66:08:36:eb:3f:72:3c:ff:e4:c3:b4:0b:b7:85:6e:c1:06:d4:
24:f7:1f:7b:c1:24:f1:1e:bb:c8:e7:bc:bb:3e:4e:eb:e2:79:
09:eb:21:b4:fc:4e:70:21:54:78:51:08:58:ab:78:31:44:09:
04:0a:fa:27:6e:23:4f:09:bd:4d:ea:91:71:39:78:ed:f6:7c:
66:50:76:2b:1d:89:12:f8:ea:57:29:fb:4d:2d:a0:a6:8d:3d:
0d:00:0b:59:b3:91:64:91:7b:02:f9:40:94:00:73:09:06:9b:
b2:d4:df:21
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAaA3Z+0nDeh0C/ueCvbVFsf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODI1MDUzMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmU1M2QzNDBhOGJmNDdjMWJmMzRkMzI1NWUxMDJlZmIxODFhZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fAk3/Cdj5KrfakIlKoRNZtRWIr
A3oR2DpQO2UBfrcO7xFaxIbfB0yZZNFQXSnqOJRA0XCBw+URuxy4qY645zKYEtxD
oWq6MUj9KFPwlWO/l0tBOuajopCMPNcLz15PkN35LL8pe8GzOEDBFYHz6BNp4Lxx
PGpLmh9mFqfEtsKI8SzXraSmGRylIf11VWted6oJN2ldey1LzQ3lO7OiFwAGvP11
EdADF6PfRqHS7raVMQ2Z3thtd9dsluyX1+NQO4gsx31zYUSSYclFxgwBu3HHiAE3
Sp+JMGGYSqicMVXBb8/gfDHmZX68nY+hiXNw0vig6buWwnc0CdqYcHtinQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFCvlPTQKi/R8G/NNMlXhAu+xga0ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2Y3MjU2
Mi00NWY1LTQwMTktODNhMS03NGYwYzNlNjYzY2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZjcyNTYy
LTQ1ZjUtNDAxOS04M2ExLTc0ZjBjM2U2NjNjYi8xL0stVTlOQXFMOUh3YjgwMHlW
ZUVDNzdHQnJSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQGLuwAAwQFUR1AAwQGWZdAAwQEsuyQAwQCuURw
AwQAwqRyMA0EAgACMAcDBQAqAhb4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNX
BjANBgkqhkiG9w0BAQsFAAOCAQEAXUswBlpzdbBSpOrKkmXvUBy/TyrmFu7zzElr
uF3hDP89MJjDhdMVf2uEGVt4QONtwPIAAb9BKPWT7c6znqwmGTV9BkWiTrm/lmnM
vG+b2W0iUhLutw15Qj0kXZb8aPxPXqRY/RA4PLPwO3cKs/JdklV1TjSIYd70gKXM
To5laFkcnVBPoCOU+Kcnl1APIQ3VZgg26z9yPP/kw7QLt4VuwQbUJPcfe8Ek8R67
yOe8uz5O6+J5CeshtPxOcCFUeFEIWKt4MUQJBAr6J24jTwm9TeqRcTl47fZ8ZlB2
Kx2JEvjqVyn7TS2gpo09DQALWbORZJF7AvlAlABzCQabstTfIQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:28 2026 by rpki-client