Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
File: ty37EnJ-RgDKLwGRt9GgI1MucsA.cer (raw, json)
Hash identifier: 3ZBoyi3KPJbTc8H/nlNUKhOKjwhqtEEQVzuuk8XCbhY=
Subject key identifier: B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE5FCCF190D9D448CA51E85BFB1519DFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 06:57:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.182.148.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fc:cf:19:0d:9d:44:8c:a5:1e:85:bf:b1:51:9d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 06:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b72dfb12727e4600ca2f0191b7d1a023532e72c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:07:cd:56:7d:37:39:78:4b:df:20:b7:86:
7b:e2:d6:b1:c6:3c:d4:d8:fe:63:27:3c:25:db:65:
6f:5e:b4:ad:d4:2c:da:70:71:a9:63:83:95:a0:49:
bc:8a:68:78:89:7c:21:9d:0e:b2:da:e8:41:76:06:
43:98:6c:7c:30:21:36:cb:7b:ec:ee:37:20:df:bb:
b2:5e:52:2b:6a:58:f9:6a:49:b1:bf:5e:bf:24:e3:
cc:b5:ea:96:c0:1b:73:5e:58:7d:41:84:82:da:be:
df:58:83:ee:6b:35:58:e4:f6:44:db:cf:0b:a2:b6:
f3:50:69:d9:f3:1d:ea:0c:0c:b2:22:ed:a9:63:7c:
67:02:eb:d4:e8:bb:a5:d0:7d:40:c8:1d:b0:0f:c4:
aa:43:a9:c5:eb:e8:68:f0:62:69:8a:49:7a:91:4a:
b5:d8:14:ec:7c:f5:a9:4a:a3:20:20:1b:9e:e3:dc:
21:13:18:14:81:ce:c3:13:15:94:ba:ef:0e:9e:df:
08:72:f9:02:6f:d1:06:4b:f0:43:32:5c:af:ac:92:
55:ad:0c:0d:68:3b:54:02:ce:a3:8b:6f:ed:25:42:
df:1c:58:63:d3:9c:d3:61:e6:0e:7c:09:21:a0:56:
29:4e:0e:a6:0b:32:31:63:67:4a:54:c5:bf:df:90:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c0:fa:26:e7:7d:47:e3:4c:8f:10:a7:35:37:59:9c:f2:6b:
32:d8:0b:4a:6b:d2:cb:ab:9a:9e:e0:fc:08:e6:3f:a1:87:4b:
3a:07:de:be:21:7d:87:93:d8:1f:90:c9:be:a1:93:ec:22:a9:
fb:3e:8c:a7:0c:8b:88:55:b1:e3:31:9d:c9:9d:27:84:28:66:
3c:52:66:b0:07:41:ca:9d:1e:87:8c:d9:a6:da:be:38:59:a8:
63:0e:f4:25:dc:4c:75:1b:38:ef:04:16:f4:fc:07:7e:31:5b:
2d:39:94:40:fc:e9:82:fb:dd:c4:20:d9:38:54:e4:1e:a7:0e:
a2:21:b7:5d:3a:c4:6d:64:a3:1a:80:2a:3e:1f:86:be:da:fd:
e1:96:96:3a:a7:1b:16:95:1b:60:7e:f8:9b:71:e6:55:44:91:
65:b6:de:b9:5a:ff:70:70:e0:8e:71:90:30:b0:f0:af:98:23:
c3:95:4b:27:ba:90:11:6e:8a:ff:e0:aa:3a:36:64:7a:04:2c:
fb:fe:6e:a9:87:8b:74:66:48:af:fc:f0:e7:10:bd:5e:b7:94:
49:6e:8b:fc:21:c4:73:24:00:1c:db:d3:17:fd:d5:79:54:54:
7d:c3:cd:5a:13:83:f5:b3:9a:fd:d3:de:58:50:27:8b:c3:b6:
75:3e:48:4b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZzl/M8ZDZ1EjKUehb+xUZ37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzEzMDY1NzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzJkZmIxMjcyN2U0NjAwY2EyZjAxOTFiN2QxYTAyMzUzMmU3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt8HzVZ9Nzl4S98gt4Z74taxxjzU
2P5jJzwl22VvXrSt1CzacHGpY4OVoEm8imh4iXwhnQ6y2uhBdgZDmGx8MCE2y3vs
7jcg37uyXlIralj5akmxv16/JOPMteqWwBtzXlh9QYSC2r7fWIPuazVY5PZE288L
orbzUGnZ8x3qDAyyIu2pY3xnAuvU6Lul0H1AyB2wD8SqQ6nF6+ho8GJpikl6kUq1
2BTsfPWpSqMgIBue49whExgUgc7DExWUuu8Ont8IcvkCb9EGS/BDMlyvrJJVrQwN
aDtUAs6ji2/tJULfHFhj05zTYeYOfAkhoFYpTg6mCzIxY2dKVMW/35AMdwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLct+xJyfkYAyi8BkbfRoCNTLnLAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzIwOTU0
NC03YmYyLTRlMTMtODdlNi1iZTAyNmJmNjcxNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMjA5NTQ0
LTdiZjItNGUxMy04N2U2LWJlMDI2YmY2NzE2My8xL3R5MzdFbkotUmdES0x3R1J0
OUdnSTFNdWNzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCBbaUMA0GCSqGSIb3DQEBCwUAA4IBAQAQwPom
531H40yPEKc1N1mc8msy2AtKa9LLq5qe4PwI5j+hh0s6B96+IX2Hk9gfkMm+oZPs
Iqn7PoynDIuIVbHjMZ3JnSeEKGY8UmawB0HKnR6HjNmm2r44WahjDvQl3Ex1Gzjv
BBb0/Ad+MVstOZRA/OmC+93EINk4VOQepw6iIbddOsRtZKMagCo+H4a+2v3hlpY6
pxsWlRtgfvibceZVRJFltt65Wv9wcOCOcZAwsPCvmCPDlUsnupARbor/4Ko6NmR6
BCz7/m6ph4t0Zkiv/PDnEL1et5RJbov8IcRzJAAc29MX/dV5VFR9w81aE4P1s5r9
095YUCeLw7Z1PkhL
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:18 2026 by rpki-client