Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer (raw, json)
Hash identifier: 1mV7nMO1W0+UbxGm94JmrhCHr7NB7EnY5Odkqx1W9Go=
Subject key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA42C9A5EC9B6C5AEE969722C0A673A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216195
IP: 194.180.250.0/24
IP: 2a13:fc40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:2c:9a:5e:c9:b6:c5:ae:e9:69:72:2c:0a:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:e7:ce:25:3e:b6:58:6b:c9:e0:30:67:13:
bf:13:8f:dd:f0:62:14:a8:8e:f0:11:23:ec:bc:3e:
1e:50:38:87:ab:33:a8:4e:02:49:6d:14:da:99:03:
76:9e:08:a6:fb:e4:27:0c:b5:7e:d3:6c:75:d8:ef:
f5:97:b5:01:30:5e:8e:ee:c3:a5:19:d0:bb:2c:e1:
ac:53:07:b9:c2:de:e4:07:f3:f8:c2:48:e0:c1:a8:
84:17:cb:f4:2f:78:a7:41:01:bf:9e:20:a6:97:9a:
d1:91:82:d1:09:0f:15:68:2a:b1:e5:ee:44:87:21:
31:c9:f9:61:54:11:b5:02:df:9a:90:42:aa:1b:53:
02:7b:a8:1a:0b:94:f8:2c:78:41:2c:38:81:02:a0:
2a:36:b2:ff:7e:e9:67:63:15:e4:fc:7d:3e:d5:8a:
ac:f8:cc:78:5f:c3:75:e0:db:b6:5f:ef:8f:5b:97:
64:83:b6:6c:35:30:01:ac:63:21:71:62:75:de:74:
69:31:bc:11:26:a0:5f:b8:1e:37:07:32:75:43:a3:
65:61:ed:da:b9:4f:47:7f:20:47:1e:18:67:8b:6b:
ea:74:18:54:c1:cd:55:5d:ad:f9:84:f4:c8:65:8f:
61:ec:d7:c2:b9:3d:13:8b:75:46:e3:21:09:32:0a:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.250.0/24
IPv6:
2a13:fc40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216195
Signature Algorithm: sha256WithRSAEncryption
7b:6f:1e:63:cd:4e:b0:65:a2:ab:bc:3c:81:f9:62:97:9a:db:
d5:5c:f0:32:0d:4b:13:54:2d:81:3f:1e:5e:35:4e:d7:e6:05:
be:90:9d:d0:17:37:e2:64:4e:07:f1:9f:fd:1e:47:38:69:9f:
76:8f:45:96:e6:65:fa:59:f5:41:e4:1c:b9:a5:e8:9e:b8:0e:
d7:99:02:e5:89:f2:59:d5:13:c3:f6:3c:28:30:01:2f:e3:39:
1f:ac:4e:1d:51:64:be:75:06:fb:d7:94:d9:eb:3a:cc:72:f8:
1d:cc:af:9c:6d:67:61:8c:c6:2a:f0:47:6f:a7:00:00:7e:56:
13:ec:79:4d:d4:4a:53:40:c1:f6:f7:94:ce:27:8c:05:1e:90:
39:6c:9e:c4:16:c2:ac:ce:12:78:8d:a5:c9:25:a7:ea:34:45:
71:81:25:30:98:27:72:b6:8a:72:85:7c:10:a8:0e:f4:6b:b0:
43:65:e2:17:7a:ba:c5:c7:15:38:84:c7:a8:8e:c7:6d:30:6a:
e1:ba:d7:bd:71:ae:1d:53:bd:be:64:42:61:09:ba:6a:de:38:
4c:db:7a:4e:ec:1c:60:52:30:4d:94:6a:c6:db:f5:65:6b:2d:
18:2d:70:72:56:6b:f2:1e:47:01:d1:fd:98:62:37:e3:25:ec:
9f:45:5f:26
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt+pCyaXsm2xa7paXIsCmc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y5YzNlYzQ3ZmNjZjAxZDkzMDVmZTBkN2Q0ODFiMzA2YjBkNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51LnziU+tlhryeAwZxO/E4/d8GIU
qI7wESPsvD4eUDiHqzOoTgJJbRTamQN2ngim++QnDLV+02x12O/1l7UBMF6O7sOl
GdC7LOGsUwe5wt7kB/P4wkjgwaiEF8v0L3inQQG/niCml5rRkYLRCQ8VaCqx5e5E
hyExyflhVBG1At+akEKqG1MCe6gaC5T4LHhBLDiBAqAqNrL/fulnYxXk/H0+1Yqs
+Mx4X8N14Nu2X++PW5dkg7ZsNTABrGMhcWJ13nRpMbwRJqBfuB43BzJ1Q6NlYe3a
uU9HfyBHHhhni2vqdBhUwc1VXa35hPTIZY9h7NfCuT0Ti3VG4yEJMgoXIQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEz5w+xH/M8B2TBf4NfUgbMGsNSMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2IzZmE2
NC1mOGIxLTQ0ZTgtYWJhNi04NjAxNjYzMzk1ZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYjNmYTY0
LWY4YjEtNDRlOC1hYmE2LTg2MDE2NjMzOTVlYi8xL1RQbkQ3RWY4endIWk1GX2cx
OVNCc3dhdzFJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwrT6MA0EAgACMAcDBQMqE/xAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMgzANBgkqhkiG9w0BAQsFAAOCAQEAe28eY81OsGWi
q7w8gflil5rb1VzwMg1LE1QtgT8eXjVO1+YFvpCd0Bc34mROB/Gf/R5HOGmfdo9F
luZl+ln1QeQcuaXonrgO15kC5YnyWdUTw/Y8KDABL+M5H6xOHVFkvnUG+9eU2es6
zHL4HcyvnG1nYYzGKvBHb6cAAH5WE+x5TdRKU0DB9veUzieMBR6QOWyexBbCrM4S
eI2lySWn6jRFcYElMJgncraKcoV8EKgO9GuwQ2XiF3q6xccVOITHqI7HbTBq4brX
vXGuHVO9vmRCYQm6at44TNt6TuwcYFIwTZRqxtv1ZWstGC1wclZr8h5HAdH9mGI3
4yXsn0VfJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:10 2026 by rpki-client