Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
File: N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer (raw, json)
Hash identifier: PX8+omPEtjXSp+lAbYRq6wp3qkzGbS74kcnPrWZYBsA=
Subject key identifier: 37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D90B68956E56634A0A07C1037C99F6C1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Apr 2026 10:36:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.126.208.0/23
IP: 2a06:c140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:b6:89:56:e5:66:34:a0:a0:7c:10:37:c9:9f:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 10:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3740e12e51a1a081c7db20398d008109565213a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:4f:d3:cc:5a:04:18:50:19:22:d8:94:5e:
98:8c:a1:5a:de:94:2e:b8:12:d3:00:88:72:56:f6:
1a:d9:c2:77:76:70:57:0f:23:79:ab:4b:10:cd:11:
a0:5a:da:51:25:ef:e0:89:8e:1b:f9:6a:af:2c:90:
8e:74:98:57:e6:15:5e:44:35:5b:f2:1c:78:11:6f:
d1:20:f0:24:8c:9d:a8:d4:04:ee:9a:b0:ba:cf:86:
51:dd:b3:72:c9:0e:39:4f:2a:57:71:ea:48:bd:bb:
82:4b:09:fe:6c:8e:f9:e1:7c:78:5a:ad:28:ed:c0:
cd:fb:95:0f:3f:25:35:fc:b5:a4:c8:c8:74:5d:cc:
12:14:29:c3:5d:d7:f4:73:df:e2:93:b1:3d:1a:bf:
a6:f3:5c:29:44:ab:ee:a4:d1:4c:bd:e8:48:c6:37:
ae:61:ca:4f:b2:ad:c0:f5:a5:fa:e7:c9:a0:7a:10:
6d:86:c2:50:91:a1:c0:f3:01:84:59:2f:04:3d:22:
77:c0:00:d6:f7:39:c3:7f:74:8e:87:09:d9:d8:64:
e2:1f:a8:db:90:5a:0e:04:97:39:76:90:c2:84:56:
34:5d:ba:46:f2:f8:1f:46:f5:2f:0c:07:20:55:ac:
e6:85:61:80:eb:ce:65:26:99:55:79:70:2a:a6:b5:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.208.0/23
IPv6:
2a06:c140::/29
Signature Algorithm: sha256WithRSAEncryption
94:33:66:43:7b:70:f3:de:a5:56:a6:f4:31:a7:2e:13:11:56:
6c:2d:f6:dd:4a:61:91:bb:62:5a:97:96:4c:8f:9e:4b:81:60:
63:5c:50:b8:80:9e:28:99:5a:10:78:89:a3:cb:5d:c5:8d:c4:
61:6d:06:dd:3d:81:2c:5e:83:c0:08:a0:0f:98:1c:a0:72:11:
d1:0e:ad:ee:81:2a:81:75:35:bd:e6:18:03:18:87:07:ab:0b:
0d:56:36:b8:69:82:54:15:9e:f8:30:60:d2:d9:95:05:57:31:
63:7e:8f:ae:0d:bd:fd:21:fa:f2:f7:33:16:7f:6a:e4:17:e6:
b1:fb:a6:e9:d9:11:ff:2c:22:29:64:4d:22:a8:2a:e9:41:b6:
f8:52:f7:70:de:40:95:97:e8:98:4d:09:5c:b9:57:d2:d7:09:
22:97:c2:65:32:4b:c3:5e:4c:fb:d5:2e:d3:3f:4d:57:e1:a8:
7d:a9:ec:d3:0c:dd:ef:91:da:21:90:aa:e2:00:0f:69:8e:50:
3c:57:93:8d:df:6c:4c:8f:d7:32:55:9b:ea:de:d4:fe:3e:ee:
08:9c:b8:ad:44:36:06:2c:98:85:64:3c:47:bf:ba:b7:7f:18:
2d:02:61:c5:9f:88:e0:65:5f:a3:9f:c0:5d:aa:73:e4:a1:78:
65:a0:cd:f3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ2QtolW5WY0oKB8EDfJn2waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDE1MTAzNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQwZTEyZTUxYTFhMDgxYzdkYjIwMzk4ZDAwODEwOTU2NTIxM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKlP08xaBBhQGSLYlF6YjKFa3pQu
uBLTAIhyVvYa2cJ3dnBXDyN5q0sQzRGgWtpRJe/giY4b+WqvLJCOdJhX5hVeRDVb
8hx4EW/RIPAkjJ2o1ATumrC6z4ZR3bNyyQ45TypXcepIvbuCSwn+bI754Xx4Wq0o
7cDN+5UPPyU1/LWkyMh0XcwSFCnDXdf0c9/ik7E9Gr+m81wpRKvupNFMvehIxjeu
YcpPsq3A9aX658mgehBthsJQkaHA8wGEWS8EPSJ3wADW9znDf3SOhwnZ2GTiH6jb
kFoOBJc5dpDChFY0XbpG8vgfRvUvDAcgVazmhWGA685lJplVeXAqprU2SQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDdA4S5RoaCBx9sgOY0AgQlWUhOmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzExZmE2
OC04ODgwLTQ5YjEtYTEyMi0yMjAzNmUxODdlZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMTFmYTY4
LTg4ODAtNDliMS1hMTIyLTIyMDM2ZTE4N2VlZC8xL04wRGhMbEdob0lISDJ5QTVq
UUNCQ1ZaU0U2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBuX7QMA0EAgACMAcDBQMqBsFAMA0GCSqGSIb3
DQEBCwUAA4IBAQCUM2ZDe3Dz3qVWpvQxpy4TEVZsLfbdSmGRu2Jal5ZMj55LgWBj
XFC4gJ4omVoQeImjy13FjcRhbQbdPYEsXoPACKAPmBygchHRDq3ugSqBdTW95hgD
GIcHqwsNVja4aYJUFZ74MGDS2ZUFVzFjfo+uDb39Ifry9zMWf2rkF+ax+6bp2RH/
LCIpZE0iqCrpQbb4Uvdw3kCVl+iYTQlcuVfS1wkil8JlMkvDXkz71S7TP01X4ah9
qezTDN3vkdohkKriAA9pjlA8V5ON32xMj9cyVZvq3tT+Pu4InLitRDYGLJiFZDxH
v7q3fxgtAmHFn4jgZV+jn8BdqnPkoXhloM3z
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:45 2026 by rpki-client