Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
File: tRHa8IloP-FhzqiMVw_HPLnkGXA.cer (raw, json)
Hash identifier: JG5lZgK5S7TszMFBvsiHc7wq/dwyQ327/tyr4yfcalY=
Subject key identifier: B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD30BB9D60C0468B94D3BC97FC647BB3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Mar 2026 14:41:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207887
IP: 185.54.0.0/23
IP: 2a06:4d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:0b:b9:d6:0c:04:68:b9:4d:3b:c9:7f:c6:47:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 14:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b511daf089683fe161cea88c570fc73cb9e41970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d4:db:4d:55:88:68:b4:7f:5a:16:e5:a5:5e:
dc:4c:15:80:a1:02:2a:2c:0a:8c:30:a5:6a:08:5a:
52:d3:f4:3c:fc:fb:51:a2:eb:99:8e:0c:29:07:1a:
b4:13:ce:d6:66:e0:7e:90:13:c8:42:aa:b6:9d:b1:
c6:3b:37:b8:63:6d:35:14:f2:93:68:c7:67:dd:5d:
de:54:bd:8c:7e:de:63:61:5b:cc:5b:21:a5:7c:f1:
93:73:99:26:2f:c6:28:85:c6:fa:73:4f:32:91:20:
c6:87:7c:9d:7c:8a:99:94:11:bf:a5:ac:ed:40:7d:
45:7f:8c:d6:92:f1:a5:f4:2d:0a:c5:c6:49:27:57:
79:04:b0:03:e2:5c:bd:0a:11:ff:d8:05:d7:ee:03:
7d:24:d4:06:63:f7:32:91:09:11:17:dc:67:39:9a:
4c:20:a7:ef:ac:b2:d5:a2:68:d6:7f:94:38:86:f7:
1e:4c:2b:cd:fb:51:95:ec:d5:6a:dc:f9:4e:50:0c:
a6:51:31:7e:52:40:2f:8e:20:e1:3e:c8:40:88:69:
df:8a:0e:48:6e:3b:62:1c:7b:15:c3:76:cc:2c:b6:
45:48:dd:84:44:ae:46:42:c5:9d:f5:a8:c2:47:1a:
b9:a7:2a:b8:f8:b7:4b:73:00:2a:53:04:a6:ad:81:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.0.0/23
IPv6:
2a06:4d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207887
Signature Algorithm: sha256WithRSAEncryption
ab:52:c9:bd:df:94:b5:1d:70:c5:3a:2c:50:1b:f5:74:5c:28:
82:02:00:ae:d0:94:7a:fd:03:e0:ed:8e:33:f6:3e:3d:24:c0:
27:8b:23:aa:dd:c6:4a:66:57:5a:75:e0:02:62:8d:c4:69:4e:
23:a9:50:34:38:07:0e:d3:d3:7c:a8:2f:5c:1c:89:02:d0:b5:
ee:0d:31:f8:b6:31:99:11:7f:cd:67:56:57:9a:63:9f:7d:60:
97:45:c3:c7:33:0d:ff:df:86:8d:0c:56:26:12:a4:f7:aa:1b:
08:7e:28:4f:17:9b:88:7a:25:98:9a:68:4a:ec:2e:78:62:ae:
7e:6f:f1:be:3b:4e:a2:3c:3f:29:99:74:ee:ac:ab:48:79:23:
51:43:7c:91:61:b3:d4:ff:c4:67:52:d0:e3:ca:a9:ea:b8:16:
74:f2:39:5e:14:7c:57:1c:46:da:c0:41:ee:66:04:f5:5c:9b:
c2:bc:07:61:a4:0d:d2:74:89:a3:e8:75:d0:4a:1c:17:fa:04:
95:ab:1c:12:62:8b:dc:37:88:7f:2a:2e:c7:4b:7e:b6:d5:3d:
07:38:9b:45:75:57:66:ea:d3:33:ce:1a:af:ab:2d:f7:69:a0:
bd:29:38:38:34:08:8d:7f:72:1d:a1:5e:cf:6c:d0:3e:03:07:
9d:dd:9c:f1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZzTC7nWDARouU07yX/GR7s8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzA5MTQ0MTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTExZGFmMDg5NjgzZmUxNjFjZWE4OGM1NzBmYzczY2I5ZTQxOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tTbTVWIaLR/WhblpV7cTBWAoQIq
LAqMMKVqCFpS0/Q8/PtRouuZjgwpBxq0E87WZuB+kBPIQqq2nbHGOze4Y201FPKT
aMdn3V3eVL2Mft5jYVvMWyGlfPGTc5kmL8Yohcb6c08ykSDGh3ydfIqZlBG/pazt
QH1Ff4zWkvGl9C0KxcZJJ1d5BLAD4ly9ChH/2AXX7gN9JNQGY/cykQkRF9xnOZpM
IKfvrLLVomjWf5Q4hvceTCvN+1GV7NVq3PlOUAymUTF+UkAvjiDhPshAiGnfig5I
bjtiHHsVw3bMLLZFSN2ERK5GQsWd9ajCRxq5pyq4+LdLcwAqUwSmrYHCgQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLUR2vCJaD/hYc6ojFcPxzy55BlwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3Lzk4ZGJi
MC02YTFlLTQ5MjktYWQzMC1kMjk0Y2JmZTJkOWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvOThkYmIw
LTZhMWUtNDkyOS1hZDMwLWQyOTRjYmZlMmQ5Zi8xL3RSSGE4SWxvUC1GaHpxaU1W
d19IUExua0dYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBuTYAMA0EAgACMAcDBQAqBk0AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMsDzANBgkqhkiG9w0BAQsFAAOCAQEAq1LJvd+UtR1w
xTosUBv1dFwoggIArtCUev0D4O2OM/Y+PSTAJ4sjqt3GSmZXWnXgAmKNxGlOI6lQ
NDgHDtPTfKgvXByJAtC17g0x+LYxmRF/zWdWV5pjn31gl0XDxzMN/9+GjQxWJhKk
96obCH4oTxebiHolmJpoSuwueGKufm/xvjtOojw/KZl07qyrSHkjUUN8kWGz1P/E
Z1LQ48qp6rgWdPI5XhR8VxxG2sBB7mYE9VybwrwHYaQN0nSJo+h10EocF/oElasc
EmKL3DeIfyoux0t+ttU9BzibRXVXZurTM84ar6st92mgvSk4ODQIjX9yHaFez2zQ
PgMHnd2c8Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:28 2026 by rpki-client