Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
File: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer (raw, json)
Hash identifier: Y/8oTqMZ/N8Ko/eP2Mo38ZdAtULRwqXYBFxrRhIJDa4=
Subject key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9C9C92DD9F40F78B746BB453DDEC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205960
AS: 212921
IP: 2.59.152.0/22
IP: 45.91.224.0/22
IP: 45.142.152.0/22
IP: 91.204.224.0/22
IP: 185.202.100.0/22
IP: 193.239.150.0/23
IP: 193.239.154.0/23
IP: 194.126.202.0/24
IP: 194.126.215.0/24
IP: 194.126.219.0/24
IP: 194.126.227.0/24
IP: 2a0e:1840::/29
IP: 2a0e:a0c0::/29
IP: 2a0f:aec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:c9:c9:2d:d9:f4:0f:78:b7:46:bb:45:3d:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:37:5d:7e:6f:fb:c4:32:99:61:a1:13:8d:
cc:e9:5a:91:bb:e0:b1:57:dd:23:a4:f0:fd:9c:a2:
6c:88:36:ad:46:98:32:fe:fc:9d:eb:8e:80:a9:3b:
dd:f0:dd:9f:04:2a:b1:9c:5e:7c:7a:82:62:19:f8:
4b:bc:83:c6:32:01:81:77:c2:19:6e:93:17:fa:ab:
cb:db:fe:34:75:1c:8c:56:16:d5:c3:be:24:89:20:
eb:1e:93:59:15:c8:21:f6:17:38:74:3a:d5:50:10:
fa:dc:96:e8:5c:bd:7e:d5:78:9a:57:7c:e4:10:08:
a0:f6:93:8a:6d:86:fc:a0:a9:7b:3a:37:8f:7e:17:
45:39:13:63:0d:0b:2d:02:b1:e9:bb:40:3e:5e:9b:
50:07:4c:97:4b:7e:d0:4d:8f:79:ae:a9:6b:54:b3:
6e:de:a9:21:41:1e:71:76:68:e4:19:41:3a:cf:5f:
24:a0:78:31:e8:bd:9b:29:83:7f:cd:bf:69:61:7c:
6b:14:df:21:6f:a7:62:fc:21:da:13:b2:d6:d8:55:
fa:e4:8b:88:1a:2a:3d:d9:41:28:07:61:9f:93:de:
92:43:b8:2f:77:32:7c:d2:87:6c:b4:cd:5a:51:e6:
3d:3b:65:04:6f:7f:ab:47:27:43:16:5c:fd:c7:ad:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
IPv6:
2a0e:1840::/29
2a0e:a0c0::/29
2a0f:aec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205960
212921
Signature Algorithm: sha256WithRSAEncryption
23:fc:90:85:23:8a:30:41:14:31:68:8e:bc:d9:4f:1b:5d:8a:
6e:8d:50:96:4d:a6:5c:08:02:32:88:44:51:50:4d:6b:b8:1f:
9a:a4:13:1a:09:8c:20:6c:65:df:fa:e1:66:49:73:88:77:04:
49:ac:8a:df:e8:05:b4:9e:cf:7b:be:38:e6:87:87:67:f5:a6:
50:9e:9b:44:0c:b3:e6:62:25:55:77:59:fb:af:73:59:86:78:
ac:9b:98:90:fa:1d:a4:c6:bd:ab:f4:50:f1:42:85:f7:0d:f6:
b3:f2:71:09:e9:47:00:d5:10:c4:4c:f3:7d:66:b5:eb:e5:56:
f6:86:f1:0c:94:bb:b6:2f:fe:52:c6:fc:95:23:b5:db:bf:b1:
48:3a:c9:76:78:e7:01:06:79:37:21:5f:c7:34:38:1e:e5:56:
f4:e6:e3:68:be:69:db:e2:91:d8:d3:f2:5e:99:0c:c4:02:77:
2d:10:21:ce:9c:79:e1:7a:b8:a8:5c:e7:a5:d7:15:ba:35:fa:
a2:8f:7c:93:89:87:a8:d4:f2:a5:f2:b2:6a:bf:3a:f1:ba:6f:
e0:8d:e8:b0:f4:0b:3e:e9:6d:8c:a6:4f:c4:0c:30:62:1c:fb:
fe:b6:f2:28:7f:83:78:b9:11:79:ba:1b:17:38:a7:40:93:72:
a1:56:31:7c
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAZ8Y+cnJLdn0D3i3RrtFPd7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQ0NTZlMTFiNzdiZjJlNDgyMGRmYjY5NTQxZDRiZTBlYTk0ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Q3XX5v+8QymWGhE43M6VqRu+Cx
V90jpPD9nKJsiDatRpgy/vyd646AqTvd8N2fBCqxnF58eoJiGfhLvIPGMgGBd8IZ
bpMX+qvL2/40dRyMVhbVw74kiSDrHpNZFcgh9hc4dDrVUBD63JboXL1+1XiaV3zk
EAig9pOKbYb8oKl7OjePfhdFORNjDQstArHpu0A+XptQB0yXS37QTY95rqlrVLNu
3qkhQR5xdmjkGUE6z18koHgx6L2bKYN/zb9pYXxrFN8hb6di/CHaE7LW2FX65IuI
Gio92UEoB2Gfk96SQ7gvdzJ80odstM1aUeY9O2UEb3+rRydDFlz9x62fWQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFNNEVuEbd78uSCDftpVB1L4OqU58MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzM0OGNl
NS1jYTIwLTQ4NDgtODg0NC1hZTUwMjczNjgxYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMzQ4Y2U1
LWNhMjAtNDg0OC04ODQ0LWFlNTAyNzM2ODFhNy8xLzAwUlc0UnQzdnk1SUlOLTJs
VUhVdmc2cFRudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF
BwEHAQH/BGkwZzBIBAIAATBCAwQCAjuYAwQCLVvgAwQCLY6YAwQCW8zgAwQCucpk
AwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQAwn7bAwQAwn7jMBsEAgACMBUDBQMq
DhhAAwUDKg6gwAMFAyoPrsAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAySIAgMD
P7kwDQYJKoZIhvcNAQELBQADggEBACP8kIUjijBBFDFojrzZTxtdim6NUJZNplwI
AjKIRFFQTWu4H5qkExoJjCBsZd/64WZJc4h3BEmsit/oBbSez3u+OOaHh2f1plCe
m0QMs+ZiJVV3Wfuvc1mGeKybmJD6HaTGvav0UPFChfcN9rPycQnpRwDVEMRM831m
tevlVvaG8QyUu7Yv/lLG/JUjtdu/sUg6yXZ45wEGeTchX8c0OB7lVvTm42i+advi
kdjT8l6ZDMQCdy0QIc6ceeF6uKhc56XXFbo1+qKPfJOJh6jU8qXysmq/OvG6b+CN
6LD0Cz7pbYymT8QMMGIc+/628ih/g3i5EXm6Gxc4p0CTcqFWMXw=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:48:28 2026 by rpki-client