Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
File: sZPxphH_PZUKvZZlLNqgVaNR20U.cer (raw, json)
Hash identifier: e25WxvHqtOP/dM7aYu3I6WZ7LL5ImuWOwcOFgby1hUk=
Subject key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9D57AC7AD9CEE0564E7690F4BDFB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.101.36.0/24
IP: 2a0e:96c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:d5:7a:c7:ad:9c:ee:05:64:e7:69:0f:4b:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:37:c7:e7:e5:f9:00:04:d3:a9:1b:80:0c:
43:7d:06:48:63:2e:09:f2:8a:fc:7c:ba:1b:de:44:
db:8a:89:5a:69:a9:92:3a:f5:9b:a7:9c:67:66:55:
ac:90:8c:91:b5:2f:b7:c9:91:9f:57:34:1e:4a:8f:
34:61:f8:9b:2d:54:89:83:f2:b8:36:c6:db:e6:13:
75:ae:d7:18:e5:9e:64:60:2c:87:18:e3:cc:23:f1:
e1:e0:2f:e0:d2:51:93:22:e1:d3:d5:a6:e0:11:79:
8e:0c:a7:92:45:ef:ac:d3:b6:29:42:35:f7:a8:e3:
11:14:1c:66:8f:dd:e2:5d:12:39:35:d3:0e:1d:49:
ab:97:db:31:69:12:0f:6b:6c:7a:b4:e2:62:25:83:
52:5c:84:83:f9:7e:4c:69:56:35:25:4a:e0:74:12:
6e:ef:3d:9a:bc:8e:04:a5:98:2d:4e:03:af:5c:50:
e1:06:70:35:ae:81:38:16:6d:50:51:df:b0:7d:f2:
8d:af:58:43:0d:2b:34:b4:3f:80:10:90:05:f9:5e:
ae:3a:b9:76:dc:29:f4:b3:6d:6f:7d:3f:3e:bd:87:
7d:88:db:a8:cb:cd:1e:4e:c2:0b:88:ce:f4:d2:cb:
ca:96:7f:1c:37:a4:f1:96:96:29:14:da:65:ab:96:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.36.0/24
IPv6:
2a0e:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:9f:7f:2e:53:e5:31:8e:32:50:bc:8c:67:86:a9:ed:70:1b:
e6:53:c1:79:9e:d6:bd:b8:f8:cd:15:8e:ad:f2:fc:1b:15:06:
dc:40:81:00:3a:84:e0:c3:e0:4e:a5:a7:54:68:eb:7a:b3:a2:
47:5a:b4:43:e1:19:cb:1a:3e:14:d4:ba:72:48:b3:67:79:d5:
dd:1f:d9:48:b3:ab:19:de:77:3c:59:5b:89:93:77:5b:8d:3a:
af:ac:39:9a:98:02:51:69:03:29:1b:fb:66:78:bf:90:b5:df:
3c:df:5b:77:be:d5:e8:67:f3:18:d6:f8:6d:a8:5e:77:a3:d7:
65:93:05:87:57:0b:47:46:fc:cc:2d:4e:8b:b7:27:34:14:24:
2b:3f:a1:67:1b:88:5f:8b:db:f8:13:f2:83:d8:fb:99:0f:8f:
cc:50:94:c4:92:74:87:a9:1a:bd:2b:31:82:2e:e3:6f:a5:dc:
99:46:e0:3c:ae:a6:80:3c:92:5e:6d:02:dd:98:01:ec:be:3a:
26:d1:29:d6:d5:7c:d6:65:af:13:cc:df:e0:e6:4a:1f:d5:f7:
c4:7e:fb:d9:e6:b8:ab:2e:6e:ba:5b:a0:32:5d:f0:34:20:1f:
eb:4b:17:a7:de:63:f5:08:b5:6b:12:d9:f7:7d:74:17:0e:79:
8a:6a:9f:75
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ8Y+dV6x62c7gVk52kPS9+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTkzZjFhNjExZmYzZDk1MGFiZDk2NjUyY2RhYTA1NWEzNTFkYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IE3x+fl+QAE06kbgAxDfQZIYy4J
8or8fLob3kTbiolaaamSOvWbp5xnZlWskIyRtS+3yZGfVzQeSo80YfibLVSJg/K4
Nsbb5hN1rtcY5Z5kYCyHGOPMI/Hh4C/g0lGTIuHT1abgEXmODKeSRe+s07YpQjX3
qOMRFBxmj93iXRI5NdMOHUmrl9sxaRIPa2x6tOJiJYNSXISD+X5MaVY1JUrgdBJu
7z2avI4EpZgtTgOvXFDhBnA1roE4Fm1QUd+wffKNr1hDDSs0tD+AEJAF+V6uOrl2
3Cn0s21vfT8+vYd9iNuoy80eTsILiM700svKln8cN6TxlpYpFNplq5aMMwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLGT8aYR/z2VCr2WZSzaoFWjUdtFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzE1MTcw
NS0wYjBjLTQ4YmYtYTQwZS1iN2NhMWZlNmMxODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMTUxNzA1
LTBiMGMtNDhiZi1hNDBlLWI3Y2ExZmU2YzE4NC8xL3NaUHhwaEhfUFpVS3ZaWmxM
TnFnVmFOUjIwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuWUkMA0EAgACMAcDBQMqDpbAMA0GCSqGSIb3
DQEBCwUAA4IBAQBBn38uU+UxjjJQvIxnhqntcBvmU8F5nta9uPjNFY6t8vwbFQbc
QIEAOoTgw+BOpadUaOt6s6JHWrRD4RnLGj4U1LpySLNnedXdH9lIs6sZ3nc8WVuJ
k3dbjTqvrDmamAJRaQMpG/tmeL+Qtd8831t3vtXoZ/MY1vhtqF53o9dlkwWHVwtH
RvzMLU6Ltyc0FCQrP6FnG4hfi9v4E/KD2PuZD4/MUJTEknSHqRq9KzGCLuNvpdyZ
RuA8rqaAPJJebQLdmAHsvjom0SnW1XzWZa8TzN/g5kof1ffEfvvZ5rirLm66W6Ay
XfA0IB/rSxen3mP1CLVrEtn3fXQXDnmKap91
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:14 2026 by rpki-client