Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
File: zBlkheZzlI1VUF23UQ87lXfNOts.cer (raw, json)
Hash identifier: njSQSeM2zrUCrC4OfKKxOSmndXIOkZo0CzH0T0YeKJo=
Subject key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2511AD77CC7F1A1C5207864BF46E31C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 12:56:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202973
IP: 193.30.113.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:11:ad:77:cc:7f:1a:1c:52:07:86:4b:f4:6e:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 12:56:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc196485e673948d55505db7510f3b9577cd3adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:91:7a:96:fe:e7:59:70:51:86:a4:7e:db:
a6:e8:3f:05:55:76:14:a6:fe:0d:23:59:22:b4:dc:
23:a3:ab:59:4e:9f:05:0f:77:8a:16:98:06:7f:f3:
53:ee:ef:e3:c6:70:51:a1:6f:37:66:bb:7c:38:02:
6a:c2:59:ca:1d:67:fa:54:a0:34:5a:65:f9:0e:6d:
67:a2:dd:f3:53:75:5a:0e:ea:6b:2f:3b:d5:af:09:
e0:13:d2:db:b7:b5:99:51:06:97:4e:84:d4:f7:38:
92:96:9e:a1:81:d4:41:c3:d4:8b:70:62:a7:ba:04:
67:8b:c3:85:bf:b8:72:99:9e:c2:a1:1c:ac:b6:b6:
fe:2d:cc:cf:5a:05:92:52:69:02:ac:b5:06:5e:9e:
51:c4:a5:64:9e:48:36:85:56:cf:bd:aa:58:0b:be:
c2:92:f3:52:fa:fc:7e:93:bf:ff:d4:90:34:b3:47:
65:29:31:e7:2f:d2:a2:ba:d3:3a:19:ca:6c:09:43:
69:50:8d:35:2a:a1:f2:38:9f:8f:a5:77:6b:e8:5c:
2d:c5:b4:7d:17:3f:82:76:b6:37:00:1d:92:c6:f5:
fb:b6:d5:95:99:f1:cd:28:6f:a5:99:f4:fe:e2:d2:
26:a3:65:9b:f7:b3:70:80:26:b4:f4:ea:2f:b1:b3:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.113.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202973
Signature Algorithm: sha256WithRSAEncryption
65:52:9f:fd:3e:8e:77:19:93:8f:c7:32:ba:f0:57:bf:70:05:
a8:60:54:76:56:ab:f8:5a:2b:18:45:26:73:77:4b:56:16:30:
c7:80:25:c5:71:54:98:a7:b9:41:a6:db:66:8e:aa:90:8e:c3:
11:65:d3:74:18:9d:64:9e:9a:de:e7:27:2f:f5:4d:ee:1d:9e:
f8:ba:9f:90:13:f0:98:a7:f0:dc:c1:48:ff:92:f3:5f:60:8d:
60:c9:b6:c2:61:ca:43:81:59:1a:75:27:88:da:36:e9:f4:c3:
97:5b:0e:bb:89:aa:c4:8c:d8:53:c7:b2:de:54:6a:c5:84:e2:
e5:14:75:fd:e8:8e:79:a9:ce:e5:00:02:33:6a:03:34:cc:dd:
e6:47:0b:d0:1c:1d:86:b8:40:65:b5:bc:d6:5e:ba:af:cb:54:
de:58:87:2d:60:39:7e:76:2e:f0:91:0a:15:08:4d:7e:48:33:
30:b2:6a:89:d4:31:22:19:db:e3:20:50:35:95:43:3f:4d:c6:
3e:6a:d5:c1:dc:6d:4e:83:42:1d:cf:f5:dc:34:43:85:0e:58:
98:0f:1b:0e:c7:56:df:da:d7:61:01:e6:42:2d:c6:79:a4:20:
5c:19:de:6f:04:d6:97:84:bb:24:e3:80:0e:37:f1:2d:e4:4c:
a5:7c:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:25 2026 by rpki-client