Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
File: jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer (raw, json)
Hash identifier: SwSuBZ1pOmJI9FCvG/sQW42fEIqHi9IaUf0ECvaJ6NM=
Subject key identifier: 8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A12FF125458543381492030ED4F12917BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 11:48:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218634
IP: 149.245.252.0/24
IP: 2001:678:132c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:f1:25:45:85:43:38:14:92:03:0e:d4:f1:29:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 11:48:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6a7264830c70267a28545609dcca306ca9d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:43:0f:95:10:60:63:57:5a:65:1a:30:c8:
e2:34:26:ce:17:c7:ee:f1:d8:97:f0:79:cc:08:43:
e5:d9:92:62:1b:04:63:4e:5d:34:54:f9:3a:77:58:
1c:5b:bc:b7:3b:b4:a4:86:3e:86:3b:74:7b:c4:9d:
ed:09:9a:77:c0:72:fe:78:d5:d0:af:4d:0c:78:e6:
be:41:ad:99:88:b1:42:73:51:48:18:43:f0:75:81:
b2:a1:3e:02:5c:87:e7:c9:48:12:04:f4:be:8e:17:
8d:bb:7b:88:4c:1d:5a:55:cc:73:25:bd:90:f8:ac:
f0:cb:32:94:b4:21:06:83:97:7e:65:e1:08:fd:cc:
5b:4e:30:1d:76:08:13:07:5c:65:fc:fb:86:be:07:
c9:fc:0e:bf:9a:02:c2:e2:8b:c6:9e:ef:00:f8:d4:
2d:19:ca:d9:7c:fc:cb:dd:9e:2f:5c:56:be:e8:91:
a9:12:89:e2:60:e5:ec:01:f7:6d:64:ec:ce:88:8c:
ad:37:8b:19:ed:26:cc:90:e3:46:03:4f:4b:41:2f:
ca:ab:64:2e:5e:ba:93:d9:3a:2f:68:02:96:60:66:
61:36:7b:12:82:03:7a:f9:8e:41:72:ed:62:33:c9:
4a:c9:72:48:d8:01:b3:1c:f9:6a:bb:86:51:29:ee:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.252.0/24
IPv6:
2001:678:132c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218634
Signature Algorithm: sha256WithRSAEncryption
0f:f2:ad:66:65:39:ce:52:a9:2f:40:b6:06:c5:7d:dc:82:73:
3b:5d:40:a5:8b:25:4d:ac:35:ad:42:1c:12:52:a2:fe:ba:df:
6e:5d:0f:70:30:b1:fd:4a:55:55:ea:5c:65:7f:0b:fc:a7:7c:
ab:b2:71:6b:d1:14:52:f1:9c:05:7d:29:d7:e6:27:24:f5:cc:
26:12:20:b8:3e:58:e7:4d:3f:87:5f:33:ed:99:8f:73:2c:30:
ad:5f:ee:b7:cb:06:f8:10:0a:48:76:91:25:49:41:f4:89:08:
e2:d0:fe:94:f9:af:b4:7c:65:6e:a7:78:76:47:8d:e1:30:ba:
02:d5:7c:35:8e:26:1e:d5:91:20:ac:0e:5a:9f:e5:28:31:dd:
55:b4:e6:79:8c:4c:12:8b:22:2b:73:71:5d:b8:48:96:a0:4b:
1e:e0:e5:4e:87:59:95:95:3e:e0:ac:8c:0f:66:39:74:7a:7e:
14:9a:46:94:2c:36:16:e1:56:6f:1e:10:56:fb:48:a3:ba:dc:
a4:14:19:3e:4b:4a:ce:bc:67:cb:2d:a8:09:f2:5e:ea:13:3a:
5b:f9:54:29:02:fd:74:3e:00:aa:20:78:45:77:a8:62:29:c4:
0d:ca:d1:bc:90:39:84:88:33:30:06:89:f5:7f:aa:0c:f8:a6:
87:e8:b7:84
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAaEv8SVFhUM4FJIDDtTxKRe9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDEyMTE0ODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZhNzI2NDgzMGM3MDI2N2EyODU0NTYwOWRjY2EzMDZjYTlkODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfBDD5UQYGNXWmUaMMjiNCbOF8fu
8diX8HnMCEPl2ZJiGwRjTl00VPk6d1gcW7y3O7Skhj6GO3R7xJ3tCZp3wHL+eNXQ
r00MeOa+Qa2ZiLFCc1FIGEPwdYGyoT4CXIfnyUgSBPS+jheNu3uITB1aVcxzJb2Q
+KzwyzKUtCEGg5d+ZeEI/cxbTjAddggTB1xl/PuGvgfJ/A6/mgLC4ovGnu8A+NQt
GcrZfPzL3Z4vXFa+6JGpEoniYOXsAfdtZOzOiIytN4sZ7SbMkONGA09LQS/Kq2Qu
XrqT2TovaAKWYGZhNnsSggN6+Y5Bcu1iM8lKyXJI2AGzHPlqu4ZRKe6h+QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFIxqcmSDDHAmeihUVgncyjBsqdh0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzBiYzdi
Yi0wNTdlLTQ1M2MtOWNhNC1lZTlkMjA0ODhhMzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGJjN2Ji
LTA1N2UtNDUzYy05Y2E0LWVlOWQyMDQ4OGEzMC8xL2pHcHlaSU1NY0NaNktGUldD
ZHpLTUd5cDJIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAlfX8MA8EAgACMAkDBwAgAQZ4EywwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDA1YKMA0GCSqGSIb3DQEBCwUAA4IBAQAP8q1mZTnO
UqkvQLYGxX3cgnM7XUCliyVNrDWtQhwSUqL+ut9uXQ9wMLH9SlVV6lxlfwv8p3yr
snFr0RRS8ZwFfSnX5ick9cwmEiC4PljnTT+HXzPtmY9zLDCtX+63ywb4EApIdpEl
SUH0iQji0P6U+a+0fGVup3h2R43hMLoC1Xw1jiYe1ZEgrA5an+UoMd1VtOZ5jEwS
iyIrc3FduEiWoEse4OVOh1mVlT7grIwPZjl0en4UmkaULDYW4VZvHhBW+0ijutyk
FBk+S0rOvGfLLagJ8l7qEzpb+VQpAv10PgCqIHhFd6hiKcQNytG8kDmEiDMwBon1
f6oM+KaH6LeE
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:59:16 2026 by rpki-client