Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.cer (raw, json)
Hash identifier: Tm2oCPu2juZzoG2/U0afiMvX4WfcDuHKDid5xRp1mn8=
Subject key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA749880779CA45BA01169A9DBBB947
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.29.192.0/22
IP: 2a04:4700::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:49:88:07:79:ca:45:ba:01:16:9a:9d:bb:b9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8095927ee57ccee256aa439f163686b58c570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:2f:b2:62:ab:41:7b:ea:cb:84:27:ab:40:
86:00:1a:f3:bc:6e:ad:b1:4c:70:f5:7f:f4:68:19:
59:e1:ff:54:cb:f4:1c:89:08:95:2e:5a:03:8f:27:
49:67:f2:74:44:e1:db:78:45:0f:9b:04:89:6d:84:
62:4e:99:fe:f4:68:41:e9:a7:18:fe:7a:fa:e7:57:
48:5a:0a:45:f3:11:be:a8:24:6b:bc:28:4b:8d:2b:
9a:92:96:48:4b:28:dd:69:8e:9a:c0:a2:a0:66:ea:
d0:e9:89:6e:c2:ca:68:e6:42:1e:07:27:9f:85:fc:
10:d7:da:1d:27:cb:26:18:b9:4b:d9:dd:8d:32:2b:
f0:4e:f3:57:99:73:dd:5a:0c:4c:92:5e:89:2f:b6:
e9:32:a0:be:0f:57:9a:e3:2a:03:93:a8:45:c7:79:
19:88:4d:2c:03:32:cc:aa:ea:bd:ad:8e:c7:dd:1c:
d5:9a:f2:e5:2a:cc:35:18:a1:d3:03:35:3c:d1:99:
95:77:c0:41:38:4a:d5:83:f5:4e:c5:c1:88:2b:57:
09:82:86:99:94:bc:20:45:5f:8b:1e:86:90:71:86:
12:a0:48:f7:f4:7b:9d:6a:ae:cc:84:0a:18:15:a9:
ab:bd:ee:cd:88:54:c1:66:6e:e3:31:9e:6b:52:10:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
IPv6:
2a04:4700::/30
Signature Algorithm: sha256WithRSAEncryption
2c:da:fd:5a:00:86:ca:e1:71:95:e9:4e:7b:0e:64:01:00:df:
af:5c:69:5b:f6:26:8b:42:1d:4d:21:f2:88:0a:c0:14:54:93:
e4:53:dd:0e:83:d7:e6:c5:fa:a3:a4:a4:15:77:46:31:64:cc:
e3:14:ec:6a:ac:b5:69:8d:79:92:de:f0:3d:90:fc:76:a9:53:
7a:95:a8:a0:68:1f:4a:c5:d6:0e:b4:56:90:6a:3d:1e:c1:ed:
9b:25:7b:43:d0:2b:5c:b4:dd:bd:55:11:9e:0e:4d:a7:50:88:
05:0c:50:80:74:2c:99:28:a9:1e:35:bc:4e:d0:31:bc:8b:c6:
87:86:b0:25:53:13:7f:a7:ed:64:6d:e5:a2:1e:9f:6c:23:10:
e4:72:fb:19:03:10:e6:6e:b2:21:01:5e:ed:cc:23:20:db:2b:
6f:49:f0:b1:6e:1b:b3:05:92:4a:a5:91:dd:70:4c:d8:75:50:
66:7a:ee:ec:df:d1:a9:5e:39:49:57:9a:b4:fe:b7:aa:7d:d4:
67:4c:6d:5c:38:1a:75:eb:50:18:8b:8e:42:9f:7a:53:23:ed:
4b:ce:08:d4:25:93:e1:5c:ff:18:39:e8:8c:92:51:fc:50:8d:
ec:80:5b:5b:2a:17:97:80:2e:23:bf:0a:5d:f2:99:f9:37:bf:
c0:84:43:2b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt+p0mIB3nKRboBFpqdu7lHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTgwOTU5MjdlZTU3Y2NlZTI1NmFhNDM5ZjE2MzY4NmI1OGM1NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkvsmKrQXvqy4Qnq0CGABrzvG6t
sUxw9X/0aBlZ4f9Uy/QciQiVLloDjydJZ/J0ROHbeEUPmwSJbYRiTpn+9GhB6acY
/nr651dIWgpF8xG+qCRrvChLjSuakpZISyjdaY6awKKgZurQ6Yluwspo5kIeByef
hfwQ19odJ8smGLlL2d2NMivwTvNXmXPdWgxMkl6JL7bpMqC+D1ea4yoDk6hFx3kZ
iE0sAzLMquq9rY7H3RzVmvLlKsw1GKHTAzU80ZmVd8BBOErVg/VOxcGIK1cJgoaZ
lLwgRV+LHoaQcYYSoEj39Hudaq7MhAoYFamrve7NiFTBZm7jMZ5rUhDdiQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEqAlZJ+5XzO4laqQ58WNoa1jFcMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2MxZTNi
NC0yZDYxLTQ0Y2MtOTA4MS0wZjlkNDNkODY0YmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvYzFlM2I0
LTJkNjEtNDRjYy05MDgxLTBmOWQ0M2Q4NjRiYi8xL1NvQ1ZrbjdsZk03aVZxcERu
eFkyaHJXTVZ3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuR3AMA0EAgACMAcDBQIqBEcAMA0GCSqGSIb3
DQEBCwUAA4IBAQAs2v1aAIbK4XGV6U57DmQBAN+vXGlb9iaLQh1NIfKICsAUVJPk
U90Og9fmxfqjpKQVd0YxZMzjFOxqrLVpjXmS3vA9kPx2qVN6laigaB9KxdYOtFaQ
aj0ewe2bJXtD0CtctN29VRGeDk2nUIgFDFCAdCyZKKkeNbxO0DG8i8aHhrAlUxN/
p+1kbeWiHp9sIxDkcvsZAxDmbrIhAV7tzCMg2ytvSfCxbhuzBZJKpZHdcEzYdVBm
eu7s39GpXjlJV5q0/reqfdRnTG1cOBp161AYi45Cn3pTI+1LzgjUJZPhXP8YOeiM
klH8UI3sgFtbKheXgC4jvwpd8pn5N7/AhEMr
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:15 2026 by rpki-client