Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer (raw, json)
Hash identifier: gG2jXXm36JgGJ6mvB5PeuxNY2E0AL2Yi9R+osV1pE8I=
Subject key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF0BBF57A59ACEECC3B3F04935EF58C50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 15 Mar 2026 09:02:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202655
IP: 185.255.204.0/22
IP: 2a0c:6640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:bb:f5:7a:59:ac:ee:cc:3b:3f:04:93:5e:f5:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 15 09:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:de:cc:78:c0:ce:6e:7a:c1:48:05:7d:45:
32:5c:70:7b:e7:a5:e3:ac:21:e7:3e:cb:5a:f3:df:
f2:87:d6:70:e7:bb:18:bb:e7:89:8d:29:0f:6d:6b:
bf:c2:b0:2b:4b:7e:dc:08:d1:0d:a1:81:4c:61:c4:
b3:bb:ce:e3:00:cb:cd:fa:19:eb:68:cc:0e:d7:2b:
61:68:91:d3:10:a1:59:8b:15:95:90:ab:bb:15:74:
5d:f6:40:d1:09:cb:be:e2:a0:d8:8c:7c:80:02:11:
48:7e:ca:64:dd:89:17:26:d7:df:5f:61:f5:0c:ed:
47:66:3e:ea:46:d7:25:3f:23:a1:f9:d5:82:8a:f6:
eb:ae:12:67:6b:04:23:ef:a8:f4:f5:2b:72:67:af:
d8:d9:87:03:9c:bf:6e:f3:b7:5b:ea:bd:3a:67:3a:
8b:d8:f9:51:b8:a5:65:eb:5d:5c:3a:c7:2b:98:36:
52:a2:9b:0d:b4:52:79:d3:99:ae:36:68:72:09:0e:
5a:b3:7b:39:12:57:4e:49:ff:66:6c:d0:0e:67:e3:
c2:2e:fa:81:66:e7:22:b7:cc:4b:ff:a7:81:3f:36:
6f:a7:fd:65:54:66:ec:f7:25:a3:c5:2b:28:50:9f:
fb:32:17:b8:f5:cc:48:2e:17:0a:f8:fb:1a:df:15:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.204.0/22
IPv6:
2a0c:6640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202655
Signature Algorithm: sha256WithRSAEncryption
80:cc:8b:53:cf:83:a2:00:67:60:b9:01:ac:8d:5c:71:ec:2b:
28:2f:88:c9:1c:25:72:64:d6:4b:54:a0:3f:ec:71:a4:cd:28:
20:86:87:b2:d8:3c:12:73:58:0b:a3:42:ae:96:25:2e:7b:15:
15:cd:a9:70:63:0b:4e:5c:4e:15:e1:05:9e:12:18:14:82:4e:
0b:32:9d:9d:75:39:f6:86:b8:94:fd:1a:53:b1:b7:71:88:e5:
ea:50:71:cd:dc:9a:32:e8:50:52:d1:7a:db:3b:fe:2b:71:80:
31:1c:e8:6c:2b:c6:5c:02:e6:6c:0b:fb:64:b2:99:20:ff:2c:
e8:f5:80:3b:df:44:64:11:4c:00:69:66:9e:72:a3:67:c6:a9:
f7:47:0c:b3:2a:e8:22:4d:b7:0a:c8:f9:44:df:a8:65:5a:23:
6a:86:ff:91:47:96:2d:1b:ab:2b:e5:99:6b:ee:32:98:56:f8:
cb:25:0b:26:24:d9:37:92:d2:39:90:bd:f5:d3:a9:57:7e:d7:
8d:16:42:95:b4:fd:fa:db:5e:79:d3:8c:a2:07:61:12:17:20:
1a:b4:a8:51:52:d4:95:6d:c1:6a:51:74:6b:e6:7b:f9:35:eb:
fd:7e:24:ae:1b:20:33:1a:79:02:15:a3:d5:2c:64:60:3d:a6:
1a:0a:12:23
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZzwu/V6WazuzDs/BJNe9YxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzE1MDkwMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjVkMDg1MTkxMWJjOTQ5ZDBmNDdjNWQzM2QwYTYwN2IzNzhjZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWXezHjAzm56wUgFfUUyXHB756Xj
rCHnPsta89/yh9Zw57sYu+eJjSkPbWu/wrArS37cCNENoYFMYcSzu87jAMvN+hnr
aMwO1ythaJHTEKFZixWVkKu7FXRd9kDRCcu+4qDYjHyAAhFIfspk3YkXJtffX2H1
DO1HZj7qRtclPyOh+dWCivbrrhJnawQj76j09StyZ6/Y2YcDnL9u87db6r06ZzqL
2PlRuKVl611cOscrmDZSopsNtFJ505muNmhyCQ5as3s5EldOSf9mbNAOZ+PCLvqB
Zucit8xL/6eBPzZvp/1lVGbs9yWjxSsoUJ/7Mhe49cxILhcK+Psa3xVgPwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCtdCFGRG8lJ0PR8XTPQpgezeM3xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzdiYTJk
MC03YTI4LTRiOGUtYTY3ZC00MzIxOTY2OWEzMGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvN2JhMmQw
LTdhMjgtNGI4ZS1hNjdkLTQzMjE5NjY5YTMwYi8xL0sxMElVWkVieVVuUTlIeGRN
OUNtQjdONHpmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuf/MMA0EAgACMAcDBQMqDGZAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMXnzANBgkqhkiG9w0BAQsFAAOCAQEAgMyLU8+DogBn
YLkBrI1ccewrKC+IyRwlcmTWS1SgP+xxpM0oIIaHstg8EnNYC6NCrpYlLnsVFc2p
cGMLTlxOFeEFnhIYFIJOCzKdnXU59oa4lP0aU7G3cYjl6lBxzdyaMuhQUtF62zv+
K3GAMRzobCvGXALmbAv7ZLKZIP8s6PWAO99EZBFMAGlmnnKjZ8ap90cMsyroIk23
Csj5RN+oZVojaob/kUeWLRurK+WZa+4ymFb4yyULJiTZN5LSOZC99dOpV37XjRZC
lbT9+tteedOMogdhEhcgGrSoUVLUlW3BalF0a+Z7+TXr/X4krhsgMxp5AhWj1Sxk
YD2mGgoSIw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:25 2026 by rpki-client