Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
File: d-L_RonUITUPdqNzvBGT5FG4HvU.cer (raw, json)
Hash identifier: uD9OT7tGE1Li+CIkM5isUkyM8P7nB6yHikrcSNdw4Lo=
Subject key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FE25D81C8BCACA63773E48EEE100A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216237
IP: 185.208.203.0/24
IP: 2a13:f2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:e2:5d:81:c8:bc:ac:a6:37:73:e4:8e:ee:10:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:f2:0b:90:0a:42:86:8a:54:dd:a5:9f:ab:
33:c8:2c:2e:d0:e3:f7:8e:a3:9b:78:a4:52:ab:87:
62:1b:ed:e5:e5:0f:31:0d:cc:75:28:e6:b6:fb:1c:
5e:1e:c6:9b:07:e8:90:e0:f4:de:a6:3f:da:86:ca:
4b:f0:bc:4b:5f:54:26:29:24:e9:2d:1d:6f:6e:4f:
fb:4f:33:b7:76:c6:cc:bf:2c:32:6c:e6:7b:77:c4:
52:42:33:be:b6:a4:04:65:0f:9d:2e:c7:30:8f:48:
8a:c6:4d:78:74:ec:9b:73:b0:2e:3d:09:5c:7b:b3:
de:86:dd:04:c2:ae:54:4a:04:ab:d8:23:b1:75:63:
eb:2a:58:15:b4:d9:62:40:59:47:53:ee:de:8c:ea:
4d:f3:94:5b:25:ad:d3:e7:09:5d:76:d5:de:22:2d:
ff:cf:a5:83:86:d7:e7:99:1c:6f:82:97:44:39:ee:
6b:0a:a6:28:e2:77:10:9a:44:7b:b6:35:0b:22:79:
0f:b9:26:4f:aa:ca:2c:73:69:53:e7:c9:d8:d4:df:
a6:a4:c4:27:41:81:67:ab:5a:bf:6f:b3:31:3b:ad:
e0:ac:e3:10:73:60:21:fb:82:1a:0a:2e:e1:e6:62:
dd:7a:d8:87:c9:aa:70:99:da:4f:1f:e7:b1:be:d0:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.203.0/24
IPv6:
2a13:f2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216237
Signature Algorithm: sha256WithRSAEncryption
5e:47:d2:71:23:3f:32:7b:24:0a:b5:34:ee:46:73:26:cd:42:
0a:73:a7:24:77:82:11:f0:85:44:39:3a:ba:ed:67:ee:2e:ac:
b4:e7:c0:88:53:c6:93:f0:87:f6:ed:96:ca:d9:d9:dd:de:48:
de:48:5f:6a:3f:0f:fc:2e:fb:e2:5e:2b:06:dd:84:32:f0:5b:
2f:4d:af:84:b8:27:37:53:3d:27:1b:96:9b:42:6e:42:7b:9f:
f7:d6:c0:28:08:78:27:36:57:7d:3b:30:c2:b3:09:0e:fd:58:
1d:2d:35:88:f9:0b:b7:33:8d:0c:11:14:8b:61:ff:bf:e9:19:
d2:3e:ea:2d:ff:28:b8:3a:97:9c:ff:96:e8:c0:18:d8:22:7e:
6f:b8:64:ca:e8:9c:b3:e7:ac:d7:19:85:3f:21:00:d6:3b:cd:
65:84:62:76:f3:fe:77:c3:f2:2b:8b:27:ca:d8:c3:c5:ed:cd:
43:c1:ac:b0:33:10:16:2d:d6:22:14:74:83:0d:67:d7:45:79:
57:76:a4:cd:e8:3e:1c:62:87:99:59:60:6d:3b:62:9a:83:2e:
bd:d9:2a:75:19:0e:79:b5:dc:bb:5f:65:b0:4f:14:b8:46:61:
42:37:3d:ab:15:92:c7:fe:78:9d:98:75:9e:17:90:45:4a:b4:
da:2f:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:37 2026 by rpki-client