Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
File: L8tesBINBwkLEmJWxFo1KC1awKw.cer (raw, json)
Hash identifier: qcPj7N1VS+d9FmxpCZvHyalCaZxgZXwG7PupEJSrLyo=
Subject key identifier: 2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B117F32A09C837AB45F1D8C1F413D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212305
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:11:7f:32:a0:9c:83:7a:b4:5f:1d:8c:1f:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:53:90:8c:87:df:a0:d7:46:f4:0c:fc:83:
99:07:2e:73:76:fa:76:0b:18:a6:d9:5c:9c:c0:43:
8c:e7:f7:67:83:91:12:73:22:1c:08:b7:d5:ba:54:
b8:d8:83:66:7a:80:49:4a:22:a1:d2:19:dd:1f:e9:
4e:b3:0a:a5:e4:4d:92:c9:ec:30:85:eb:04:68:c0:
e0:dc:47:db:b8:40:5c:f8:bd:3c:ad:8b:60:6b:f0:
76:59:c5:c8:20:a8:62:ba:28:5d:b3:9c:48:a4:92:
a2:a1:bb:bc:c6:ba:22:df:2b:2f:ec:f9:96:6d:15:
eb:28:09:98:13:0f:71:99:45:c1:d4:9a:2f:7c:36:
43:79:e6:28:37:81:5c:29:f1:ea:32:d6:3f:c9:a3:
46:f1:e5:34:48:26:1b:1a:8c:45:f2:cb:30:d5:a6:
d2:1e:70:71:cc:f2:a0:14:c1:4f:ac:46:3a:26:c3:
e9:14:06:66:5c:49:f0:ef:44:60:7c:57:9e:6d:53:
c6:90:97:d0:39:52:e1:8e:27:6f:2f:87:e0:ea:ea:
15:df:26:1c:b8:8e:c3:e8:80:ce:26:46:44:22:be:
07:99:68:84:0a:01:36:71:6b:a9:49:31:3b:02:62:
52:46:3a:c0:af:cb:e3:79:e3:3f:90:a7:0e:95:11:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212305
Signature Algorithm: sha256WithRSAEncryption
5a:86:56:97:d8:7b:ec:98:07:b2:b9:93:a4:3a:88:bd:e0:f4:
21:9b:e8:c4:bf:40:68:56:e8:55:5c:b5:7a:ef:a7:81:3e:6e:
7d:19:95:ed:a6:06:aa:98:87:b7:c3:71:8e:cb:6e:fa:95:81:
dd:8c:ab:51:62:96:d1:7c:63:3b:22:5e:84:b4:34:44:04:dd:
fd:7c:e7:8b:b3:c6:dd:66:6f:4e:9c:5e:d8:ee:a4:95:81:ed:
b7:a1:2e:00:6f:da:77:f8:9b:38:31:14:47:3e:57:0c:60:d9:
8e:1e:1e:dc:2a:8d:56:66:35:6f:5f:35:93:d7:d5:db:8e:42:
55:ec:0c:c0:bd:fe:e8:c0:42:af:2e:fd:48:a0:0a:28:15:99:
ac:fd:25:b4:c9:dc:b7:c5:0f:7a:93:94:52:31:a3:91:9f:be:
37:a1:22:97:db:01:d9:0e:d9:9b:e5:e7:48:49:49:37:59:08:
a8:99:e7:ca:c5:86:59:33:d3:55:bf:17:31:18:4b:4d:2d:34:
7f:76:5e:fa:14:97:02:e7:55:15:1a:e0:76:76:04:ff:78:0d:
3f:b5:a3:44:2f:e8:ac:24:c1:68:d7:36:4a:3c:51:53:21:ea:
c9:f0:08:6a:0f:67:ed:19:d1:06:9b:ef:70:e2:57:57:59:4d:
ff:f2:45:f1
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt6WxF/MqCcg3q0Xx2MH0E9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmNiNWViMDEyMGQwNzA5MGIxMjYyNTZjNDVhMzUyODJkNWFjMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycVTkIyH36DXRvQM/IOZBy5zdvp2
Cxim2VycwEOM5/dng5EScyIcCLfVulS42INmeoBJSiKh0hndH+lOswql5E2Syeww
hesEaMDg3EfbuEBc+L08rYtga/B2WcXIIKhiuihds5xIpJKiobu8xroi3ysv7PmW
bRXrKAmYEw9xmUXB1JovfDZDeeYoN4FcKfHqMtY/yaNG8eU0SCYbGoxF8ssw1abS
HnBxzPKgFMFPrEY6JsPpFAZmXEnw70RgfFeebVPGkJfQOVLhjidvL4fg6uoV3yYc
uI7D6IDOJkZEIr4HmWiECgE2cWupSTE7AmJSRjrAr8vjeeM/kKcOlRGtlQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFC/LXrASDQcJCxJiVsRaNSgtWsCsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2JiNTkx
Mi0xN2M3LTQ2MDctOTQ3Mi1lMjE1MmVkZjlmOWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvYmI1OTEy
LTE3YzctNDYwNy05NDcyLWUyMTUyZWRmOWY5Yy8xL0w4dGVzQklOQndrTEVtSld4
Rm8xS0MxYXdLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM9UTANBgkqhkiG9w0BAQsFAAOCAQEAWoZWl9h77JgH
srmTpDqIveD0IZvoxL9AaFboVVy1eu+ngT5ufRmV7aYGqpiHt8Nxjstu+pWB3Yyr
UWKW0XxjOyJehLQ0RATd/Xzni7PG3WZvTpxe2O6klYHtt6EuAG/ad/ibODEURz5X
DGDZjh4e3CqNVmY1b181k9fV245CVewMwL3+6MBCry79SKAKKBWZrP0ltMnct8UP
epOUUjGjkZ++N6Eil9sB2Q7Zm+XnSElJN1kIqJnnysWGWTPTVb8XMRhLTS00f3Ze
+hSXAudVFRrgdnYE/3gNP7WjRC/orCTBaNc2SjxRUyHqyfAIag9n7RnRBpvvcOJX
V1lN//JF8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:33 2026 by rpki-client