Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
File: zdzNhA0BvLL8qSppg49M2mxqdKg.cer (raw, json)
Hash identifier: uyQRiwwY326KkizwB2LJtvuP+hQu1AUYrI1Ly3aRCaA=
Subject key identifier: CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1356D8CF93F6AB41E89A6BA8D4D26E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:20:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208534
IP: 45.95.136.0/22
IP: 2a0e:3740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:56:d8:cf:93:f6:ab:41:e8:9a:6b:a8:d4:d2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:20:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:b0:e4:bb:01:1e:49:19:90:4a:cf:dd:4d:
8e:33:2a:54:6c:b6:e7:ac:b9:2e:99:e9:4c:d8:fd:
37:79:54:f9:31:eb:36:c8:aa:6b:15:c8:39:f5:07:
e6:90:be:d1:16:83:72:de:2a:8d:8e:7e:4f:54:f0:
05:56:f2:30:55:50:8d:a2:f8:fa:1a:5f:2b:b0:91:
d4:00:c8:5e:a6:d6:46:a2:0d:c9:ca:a1:47:64:e7:
fa:40:31:54:77:c6:d4:b8:09:26:0d:d9:2c:ae:42:
d3:19:4d:3e:99:ab:10:1c:24:5b:a1:c7:5e:c1:5d:
86:55:e7:27:cd:52:00:f0:99:59:a8:72:b3:9f:45:
01:07:02:2b:45:a1:6b:62:87:c4:a8:3a:89:85:c6:
8d:54:ef:5b:50:b6:5b:f3:be:e8:cb:71:1e:38:2d:
bd:a9:30:ba:47:4a:17:90:6b:bf:6e:03:85:b9:77:
b3:4e:1b:e1:bd:4e:15:dc:3f:56:72:63:8d:ed:ae:
ec:19:f9:3d:5d:5f:09:d3:3e:55:a2:e0:d6:58:ad:
74:bd:0a:52:61:27:5f:3d:b8:69:a6:ed:6c:d4:a3:
e2:0c:76:42:3f:01:23:a4:38:1b:8a:35:11:d4:cf:
f2:32:c5:d4:61:1b:7c:58:31:23:42:e9:c1:be:7b:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.136.0/22
IPv6:
2a0e:3740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208534
Signature Algorithm: sha256WithRSAEncryption
06:6a:92:0c:bb:1c:40:0a:99:b1:7e:cd:89:5d:42:4b:3c:8d:
9d:26:eb:8f:9c:21:cf:bc:46:37:c3:9d:f3:37:9c:81:dc:b0:
07:32:59:6a:78:22:39:99:18:56:f4:cb:81:11:5c:97:33:d5:
8c:6c:68:a7:50:e9:6c:83:57:fd:17:0f:92:9d:f4:01:e6:57:
fc:1c:6c:90:4e:37:f1:40:2b:be:11:7c:9a:c3:35:80:8d:a2:
c4:fb:16:8b:5b:a4:b1:a6:d5:98:33:f0:fc:e4:df:8e:25:84:
86:ed:22:00:a8:82:ab:5f:fc:98:bc:cb:fb:0a:d0:6b:c6:20:
79:09:7d:e2:13:f4:36:42:1d:d7:1a:11:64:73:8a:65:32:e7:
9f:82:9a:18:74:37:22:07:39:10:89:6a:a6:5d:46:83:da:53:
f3:22:2d:78:51:e4:52:e2:5c:6b:76:ea:28:ad:aa:b3:b8:51:
1c:9f:47:bc:20:ad:59:a8:54:88:75:39:1b:fa:e9:d3:8c:9f:
97:36:f6:f0:6d:b2:96:69:f1:f5:5b:92:06:6c:62:34:7d:1e:
72:03:13:14:31:41:ab:e2:7e:f1:b4:b7:2d:4a:47:c7:8a:3b:
8b:05:3a:39:c5:9a:fb:cb:74:95:8c:89:68:41:49:7e:2c:03:
94:88:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:30 2026 by rpki-client