Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
File: R34OvwADKaAhrl6PHYHEBfuNCzw.cer (raw, json)
Hash identifier: slBePqKky+LTdLOT+Nc/8txcdfH4x+MllxZ7hnqFHW0=
Subject key identifier: 47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758B144A273DD44CA4A620A098936D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212032
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:b1:44:a2:73:dd:44:ca:4a:62:0a:09:89:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:52:d8:70:4d:7c:57:9c:4d:77:d0:d2:27:
8a:6e:2b:51:f2:73:ea:91:f3:34:74:24:0a:05:db:
36:63:49:08:c4:97:c3:5b:30:03:64:ad:57:6b:64:
12:74:de:a8:b1:38:96:c5:78:4a:3a:e8:1c:68:0a:
14:d8:d8:d9:45:ee:8b:4c:18:1c:c2:81:e9:e4:99:
a1:b4:d2:0a:4d:1d:b6:12:65:bf:07:af:11:aa:35:
0b:fb:30:78:76:25:63:83:26:13:ae:e2:13:5a:0f:
a1:b1:b9:70:70:b7:27:d0:60:a0:38:51:c5:fb:c6:
c8:a9:ed:78:c6:56:51:bc:6a:9e:15:9c:39:97:7e:
7a:db:8e:f2:a0:06:4a:e8:c7:16:3c:ac:6d:d8:c3:
67:33:c3:0d:e9:19:ca:e1:0e:d9:19:58:24:79:7b:
2f:ab:66:a8:52:b9:e9:a4:c5:ef:c1:5c:6f:8e:70:
d2:13:c1:6b:33:3f:07:8d:0c:c9:83:d7:ac:ca:6b:
f7:c2:37:5c:35:24:76:47:d3:82:52:3e:3b:93:1c:
63:66:3b:d3:ce:97:a9:ab:8a:12:2f:68:25:e4:33:
8c:72:16:4f:18:d7:ce:c8:9e:51:da:e6:cf:11:0d:
52:2a:c1:44:99:3e:36:28:12:a1:a1:5d:26:4d:14:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212032
Signature Algorithm: sha256WithRSAEncryption
65:77:80:88:f4:bc:dc:dd:d2:55:7f:96:78:b9:04:98:2c:b7:
44:98:e1:09:47:8f:35:db:4d:38:25:9c:4c:d8:63:0d:50:d9:
6a:2b:84:c2:79:33:02:74:5d:47:d3:75:e3:d2:81:31:b8:fb:
2f:dc:e5:ca:27:0c:84:ea:72:dd:46:ce:9e:ba:42:7c:4b:84:
ff:d0:06:8a:a2:90:dd:d0:99:45:fa:ae:cd:9f:a8:b4:b8:97:
b0:22:b2:80:c6:10:f2:e8:02:7c:d5:84:53:89:65:19:d7:7f:
1e:f8:d7:fe:6e:fd:6b:d6:47:0c:c1:a5:08:35:12:48:8a:d1:
90:0e:f7:66:b7:28:38:79:89:15:c3:d2:f5:84:f8:7a:08:77:
90:ef:49:26:0e:de:0d:63:69:f3:2e:3a:0c:86:bd:ea:88:d7:
ac:0a:81:71:e3:50:a9:b5:fc:bc:64:0e:cc:2e:9f:dd:0d:6f:
dc:07:fa:fa:80:67:87:7d:87:d3:e4:a2:06:ff:59:78:ef:c3:
ef:06:a7:be:a7:9d:3a:4c:09:b6:c9:67:55:dd:e4:99:08:f3:
97:80:d1:29:f0:79:14:42:93:df:e0:7f:78:c5:30:a9:dd:0d:
72:4f:ad:a0:31:63:e4:f6:a2:fd:86:dc:d7:93:13:ee:f9:1f:
af:2f:3b:76
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt3WLFEonPdRMpKYgoJiTbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzdlMGViZjAwMDMyOWEwMjFhZTVlOGYxZDgxYzQwNWZiOGQwYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA039S2HBNfFecTXfQ0ieKbitR8nPq
kfM0dCQKBds2Y0kIxJfDWzADZK1Xa2QSdN6osTiWxXhKOugcaAoU2NjZRe6LTBgc
woHp5JmhtNIKTR22EmW/B68RqjUL+zB4diVjgyYTruITWg+hsblwcLcn0GCgOFHF
+8bIqe14xlZRvGqeFZw5l356247yoAZK6McWPKxt2MNnM8MN6RnK4Q7ZGVgkeXsv
q2aoUrnppMXvwVxvjnDSE8FrMz8HjQzJg9esymv3wjdcNSR2R9OCUj47kxxjZjvT
zpepq4oSL2gl5DOMchZPGNfOyJ5R2ubPEQ1SKsFEmT42KBKhoV0mTRSp+wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEd+Dr8AAymgIa5ejx2BxAX7jQs8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2E0NDBi
Yy0zOWYyLTQ1Y2EtYmRkYS05NjNhZDMwMjc4ODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYTQ0MGJj
LTM5ZjItNDVjYS1iZGRhLTk2M2FkMzAyNzg4Mi8xL1IzNE92d0FES2FBaHJsNlBI
WUhFQmZ1TkN6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8QDANBgkqhkiG9w0BAQsFAAOCAQEAZXeAiPS83N3S
VX+WeLkEmCy3RJjhCUePNdtNOCWcTNhjDVDZaiuEwnkzAnRdR9N149KBMbj7L9zl
yicMhOpy3UbOnrpCfEuE/9AGiqKQ3dCZRfquzZ+otLiXsCKygMYQ8ugCfNWEU4ll
Gdd/HvjX/m79a9ZHDMGlCDUSSIrRkA73ZrcoOHmJFcPS9YT4egh3kO9JJg7eDWNp
8y46DIa96ojXrAqBceNQqbX8vGQOzC6f3Q1v3Af6+oBnh32H0+SiBv9ZeO/D7wan
vqedOkwJtslnVd3kmQjzl4DRKfB5FEKT3+B/eMUwqd0Nck+toDFj5Pai/Ybc15MT
7vkfry87dg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:59 2026 by rpki-client