Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/huiaCsl4FooymjAWTZy47EOQEfE.cer
File: huiaCsl4FooymjAWTZy47EOQEfE.cer (raw, json)
Hash identifier: 2o1o1j9P0eKAh4uwrdW//sb/VV0swNgCdxe2BHRpIVM=
Subject key identifier: 86:E8:9A:0A:C9:78:16:8A:32:9A:30:16:4D:9C:B8:EC:43:90:11:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CAF26CE06B948286DDDC2701B39471E07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 15:24:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215704
IP: 85.132.180.0 -- 85.132.191.255
IP: 152.114.200.0/23
IP: 195.190.147.0/24
IP: 2a02:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:26:ce:06:b9:48:28:6d:dd:c2:70:1b:39:47:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 15:24:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e89a0ac978168a329a30164d9cb8ec439011f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:74:52:d3:c9:da:10:d7:45:7e:31:79:ce:
71:b6:d6:39:7c:a4:45:62:42:ac:92:c5:ab:14:d6:
f5:03:2b:0d:82:a8:a7:1c:ee:68:96:50:a4:a9:8d:
0f:46:f1:74:b3:6a:f8:8f:52:0e:a5:b5:a8:60:e0:
a0:39:bd:05:41:0d:aa:96:82:7c:67:7e:3c:b1:9e:
df:dd:19:42:be:aa:b8:bd:f1:4d:4b:40:34:61:a6:
69:3d:10:15:54:a3:a1:4f:65:81:7e:43:09:db:94:
ca:e8:0e:f0:4d:6d:c8:73:4b:d7:30:56:00:9f:43:
36:6b:2e:d1:8f:bc:5d:2a:aa:8e:30:b1:5f:a6:36:
29:b9:e2:06:01:95:07:80:ca:1b:4f:86:57:1a:80:
47:5a:83:3c:41:9f:d1:6c:7e:b6:6d:ce:c2:4b:a1:
81:2e:a8:fd:dc:f4:1b:45:3e:82:45:52:5a:d3:83:
cc:ad:c0:60:b9:90:ad:67:3d:83:8a:e1:97:9d:19:
cf:df:c7:54:11:75:de:14:d7:06:09:86:0a:d9:03:
e8:d3:90:12:49:89:32:48:31:9f:6e:f6:8e:46:5d:
c6:2f:78:29:21:50:da:83:34:b6:ff:e2:cf:52:12:
92:06:bb:ea:8a:63:d1:b8:43:48:67:6c:a5:43:b1:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:9A:0A:C9:78:16:8A:32:9A:30:16:4D:9C:B8:EC:43:90:11:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/541bf1-5f14-4a1a-829b-f152b0023ec6/1/huiaCsl4FooymjAWTZy47EOQEfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.180.0-85.132.191.255
152.114.200.0/23
195.190.147.0/24
IPv6:
2a02:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215704
Signature Algorithm: sha256WithRSAEncryption
0a:58:5a:5f:a2:31:44:c1:42:9e:a6:f1:8b:40:a2:98:9e:6c:
1f:5e:d3:9e:f6:67:db:32:e8:57:dd:82:68:87:4f:b6:4b:82:
bb:38:41:f7:3e:66:81:29:b2:41:c9:e7:23:a5:88:f4:79:a5:
f7:cc:0c:b3:5c:fe:de:4a:fe:99:42:a8:0d:e1:8c:17:1e:be:
a3:e3:c8:9f:07:ee:43:2c:25:98:de:84:ae:03:f4:a4:f9:fc:
76:85:90:ef:f2:2c:d2:88:bf:b3:e0:a6:42:aa:0c:c7:0e:9c:
75:14:3b:fa:a7:f1:7f:34:10:57:4d:14:a6:3b:31:1d:1b:02:
61:be:a6:c7:21:76:44:1e:25:64:5b:56:e4:2d:09:fd:ae:65:
f4:f0:ff:21:e4:2d:3c:c0:4f:79:58:b5:80:af:dd:b2:98:a1:
3b:4d:7b:e4:bf:19:8e:e5:3c:68:c0:29:d6:05:86:fc:72:a0:
d6:41:8e:c8:d9:eb:5b:91:fd:16:1c:8e:3f:ba:78:0b:fa:78:
b3:ec:cd:65:57:b5:32:73:4e:c4:f3:a2:a2:fb:96:0d:f7:d6:
7b:c3:b8:21:ea:ba:81:00:5e:f9:00:6b:5e:2a:c5:a8:0a:f3:
17:79:d2:c1:8c:37:ed:c3:12:ea:37:30:fa:9f:78:70:ae:9b:
75:98:a2:c9
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZyvJs4GuUgobd3CcBs5Rx4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzAyMTUyNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmU4OWEwYWM5NzgxNjhhMzI5YTMwMTY0ZDljYjhlYzQzOTAxMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtx0UtPJ2hDXRX4xec5xttY5fKRF
YkKsksWrFNb1AysNgqinHO5ollCkqY0PRvF0s2r4j1IOpbWoYOCgOb0FQQ2qloJ8
Z348sZ7f3RlCvqq4vfFNS0A0YaZpPRAVVKOhT2WBfkMJ25TK6A7wTW3Ic0vXMFYA
n0M2ay7Rj7xdKqqOMLFfpjYpueIGAZUHgMobT4ZXGoBHWoM8QZ/RbH62bc7CS6GB
Lqj93PQbRT6CRVJa04PMrcBguZCtZz2DiuGXnRnP38dUEXXeFNcGCYYK2QPo05AS
SYkySDGfbvaORl3GL3gpIVDagzS2/+LPUhKSBrvqimPRuENIZ2ylQ7H1/wIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFIbomgrJeBaKMpowFk2cuOxDkBHxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzU0MWJm
MS01ZjE0LTRhMWEtODI5Yi1mMTUyYjAwMjNlYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNTQxYmYx
LTVmMTQtNGExYS04MjliLWYxNTJiMDAyM2VjNi8xL2h1aWFDc2w0Rm9veW1qQVdU
Wnk0N0VPUUVmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaMAwDBAJVhLQDBAZVhIADBAGYcsgDBADDvpMwDQQC
AAIwBwMFAyoC1cAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0qYMA0GCSqGSIb3
DQEBCwUAA4IBAQAKWFpfojFEwUKepvGLQKKYnmwfXtOe9mfbMuhX3YJoh0+2S4K7
OEH3PmaBKbJByecjpYj0eaX3zAyzXP7eSv6ZQqgN4YwXHr6j48ifB+5DLCWY3oSu
A/Sk+fx2hZDv8izSiL+z4KZCqgzHDpx1FDv6p/F/NBBXTRSmOzEdGwJhvqbHIXZE
HiVkW1bkLQn9rmX08P8h5C08wE95WLWAr92ymKE7TXvkvxmO5TxowCnWBYb8cqDW
QY7I2etbkf0WHI4/ungL+niz7M1lV7Uyc07E86Ki+5YN99Z7w7gh6rqBAF75AGte
KsWoCvMXedLBjDftwxLqNzD6n3hwrpt1mKLJ
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:45 2026 by rpki-client