Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
File: i3-BpueC4hEYnE805Fm0Imx19KY.cer (raw, json)
Hash identifier: UAGl0D/WDb1lHdmYNKC3EKwUBuTtU8kvXYyUuDRpcCc=
Subject key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2456E8ABCDA946FFC7C73900C9CFEE94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 09:32:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43511
AS: 199236
IP: 45.86.116.0/22
IP: 45.87.196.0/22
IP: 45.91.44.0/22
IP: 45.128.164.0/22
IP: 45.128.172.0/22
IP: 83.68.134.0/23
IP: 89.37.88.0/22
IP: 91.194.248.0/23
IP: 91.211.240.0/22
IP: 185.4.120.0/22
IP: 185.90.20.0/22
IP: 193.177.216.0/22
IP: 194.113.24.0/22
IP: 195.54.172.0/23
IP: 217.175.192.0/24
IP: 217.175.194.0/24
IP: 2a02:7040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:56:e8:ab:cd:a9:46:ff:c7:c7:39:00:c9:cf:ee:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 09:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:0e:43:76:c7:cf:22:bd:19:36:05:e7:f9:
d6:5d:f2:b7:a3:f3:06:47:c9:2d:63:15:f8:d8:74:
1d:a2:e3:53:7b:6e:fd:cf:3e:de:3c:08:5a:d2:39:
2e:e1:44:0f:05:44:de:e2:5a:8c:6b:b4:fa:1b:73:
fa:b3:a8:16:95:2e:db:05:59:9d:b9:6b:2d:b5:7d:
d4:bd:e2:26:7e:67:3e:0c:c4:a1:02:60:b9:e8:8a:
e7:59:b0:39:eb:bf:47:63:c9:6f:2a:fa:f8:9a:8c:
a1:11:1a:f6:55:da:19:bd:32:76:4d:2e:a7:14:da:
17:2e:2c:a7:9b:91:ac:62:0c:0e:6c:4f:d4:e6:20:
6d:b4:08:20:43:db:dc:4e:ec:10:3a:d2:8b:20:4b:
c5:32:a0:c5:3c:fa:c5:b4:ff:12:c0:86:db:13:28:
33:11:6f:45:2a:ba:28:49:57:05:0e:28:1b:9f:c3:
57:37:d9:00:b6:1a:d1:e9:00:72:8b:79:82:cc:7c:
20:49:e5:41:7b:3d:1e:9e:3d:e5:b5:be:be:bc:cb:
2b:07:2c:8b:af:20:33:7c:8e:ce:c6:09:89:35:b8:
83:d7:2d:00:13:5f:11:45:91:8a:c7:9d:8b:48:aa:
40:dd:1d:7c:13:34:da:d7:0f:25:0e:cf:83:83:d6:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.116.0/22
45.87.196.0/22
45.91.44.0/22
45.128.164.0/22
45.128.172.0/22
83.68.134.0/23
89.37.88.0/22
91.194.248.0/23
91.211.240.0/22
185.4.120.0/22
185.90.20.0/22
193.177.216.0/22
194.113.24.0/22
195.54.172.0/23
217.175.192.0/24
217.175.194.0/24
IPv6:
2a02:7040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43511
199236
Signature Algorithm: sha256WithRSAEncryption
3d:9b:2e:f6:17:2b:ed:33:84:cd:c6:62:91:87:e6:c5:f0:87:
b7:31:a6:0f:7b:09:a1:1b:06:0c:a5:f9:81:72:25:bc:62:8c:
91:97:d3:32:89:d9:a5:7f:b6:67:66:c2:40:cb:74:97:c9:10:
38:2c:41:2e:34:a6:4f:5f:86:61:84:c8:81:e1:42:fc:ad:35:
58:51:90:9c:53:a8:d7:8f:ae:0e:65:6c:a0:12:f4:a7:c6:bd:
1a:07:fd:b6:8d:dd:f3:0f:a6:7a:42:c8:c8:e0:f8:4a:1e:e1:
8b:c8:ab:9e:e5:3c:a6:c0:9b:e6:12:28:a8:93:49:62:81:e6:
d9:13:e9:09:0e:dd:08:aa:c6:06:93:22:11:88:12:d9:3d:ab:
8d:c1:f3:0c:22:4f:e9:89:74:67:c7:cb:3b:2e:b9:8f:eb:3a:
64:bd:6f:43:cc:50:9f:6b:7a:16:18:ea:4d:43:cf:6c:b2:e5:
4b:6b:91:1b:aa:3c:6a:6e:94:24:85:71:6a:95:c2:e5:30:d4:
db:b0:4e:21:79:44:a4:78:e1:a3:7e:62:ef:78:3b:30:ad:83:
94:73:af:34:0e:12:96:d2:39:2d:51:0e:a9:2f:3c:2c:49:12:
78:8a:d1:18:bb:ad:e5:e3:28:63:b0:1d:02:c5:4e:1e:f7:a3:
b2:35:36:e6
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZ0kVuirzalG/8fHOQDJz+6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI1MDkzMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjdmODFhNmU3ODJlMjExMTg5YzRmMzRlNDU5YjQyMjZjNzVmNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn8OQ3bHzyK9GTYF5/nWXfK3o/MG
R8ktYxX42HQdouNTe279zz7ePAha0jku4UQPBUTe4lqMa7T6G3P6s6gWlS7bBVmd
uWsttX3UveImfmc+DMShAmC56IrnWbA5679HY8lvKvr4moyhERr2VdoZvTJ2TS6n
FNoXLiynm5GsYgwObE/U5iBttAggQ9vcTuwQOtKLIEvFMqDFPPrFtP8SwIbbEygz
EW9FKrooSVcFDigbn8NXN9kAthrR6QByi3mCzHwgSeVBez0enj3ltb6+vMsrByyL
ryAzfI7OxgmJNbiD1y0AE18RRZGKx52LSKpA3R18EzTa1w8lDs+Dg9ZrJQIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFIt/gabnguIRGJxPNORZtCJsdfSmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzliNjBl
NS1mOThmLTRhYzYtOThhNS1mMmY0MjZlZmUwMzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOWI2MGU1
LWY5OGYtNGFjNi05OGE1LWYyZjQyNmVmZTAzOS8xL2kzLUJwdWVDNGhFWW5FODA1
Rm0wSW14MTlLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGIBggrBgEF
BQcBBwEB/wR5MHcwZgQCAAEwYAMEAi1WdAMEAi1XxAMEAi1bLAMEAi2ApAMEAi2A
rAMEAVNEhgMEAlklWAMEAVvC+AMEAlvT8AMEArkEeAMEArlaFAMEAsGx2AMEAsJx
GAMEAcM2rAMEANmvwAMEANmvwjANBAIAAjAHAwUAKgJwQDAfBggrBgEFBQcBCAEB
/wQQMA6gDDAKAgMAqfcCAwMKRDANBgkqhkiG9w0BAQsFAAOCAQEAPZsu9hcr7TOE
zcZikYfmxfCHtzGmD3sJoRsGDKX5gXIlvGKMkZfTMonZpX+2Z2bCQMt0l8kQOCxB
LjSmT1+GYYTIgeFC/K01WFGQnFOo14+uDmVsoBL0p8a9Ggf9to3d8w+mekLIyOD4
Sh7hi8irnuU8psCb5hIoqJNJYoHm2RPpCQ7dCKrGBpMiEYgS2T2rjcHzDCJP6Yl0
Z8fLOy65j+s6ZL1vQ8xQn2t6FhjqTUPPbLLlS2uRG6o8am6UJIVxapXC5TDU27BO
IXlEpHjho35i73g7MK2DlHOvNA4SltI5LVEOqS88LEkSeIrRGLut5eMoY7AdAsVO
HvejsjU25g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:31 2026 by rpki-client