Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
File: EsEUQhohU4u2vwJkmH56REyA6j4.cer (raw, json)
Hash identifier: abrKVZlSjeKdJ93ITTMeBR2Hyp1KC0Luzs8p1QsfgmA=
Subject key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E73BF57DD576D807FED8F427BC872EFD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 29 May 2026 12:39:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214802
IP: 2001:678:1298::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:bf:57:dd:57:6d:80:7f:ed:8f:42:7b:c8:72:ef:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 12:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:a7:80:f1:dc:41:25:0e:02:00:62:3c:8d:
72:13:87:43:d0:88:8f:b4:9f:d1:fb:03:af:66:a1:
41:da:42:7c:20:2d:5c:69:b9:af:d0:0c:bc:67:63:
a2:e1:e2:85:05:b5:81:cc:1c:0b:52:c9:a7:c9:85:
e8:2a:d0:48:db:6d:00:e2:6f:57:4c:00:0c:5e:6b:
1a:18:69:fe:78:b3:0b:9c:b0:01:aa:0b:9d:e4:f8:
f6:06:91:54:6f:e2:d9:e5:4a:c9:67:20:c4:59:fb:
18:16:e9:de:30:e2:33:97:53:df:f2:4b:6a:41:c2:
9a:42:14:35:2c:eb:cf:dc:db:da:8c:32:8b:74:0c:
40:96:16:5a:2e:74:bd:d5:27:b5:38:04:72:ca:ae:
0c:93:b3:01:0a:41:0d:fa:e2:41:13:67:43:7e:ba:
d0:57:d1:ed:23:93:33:40:95:53:34:78:32:13:16:
07:2c:be:e6:3b:75:5f:e6:6d:07:a6:cf:0d:a2:b4:
68:47:69:21:d8:84:ac:8b:e5:55:60:77:db:2e:e4:
4d:d7:0d:05:03:f7:7c:e9:3c:34:27:92:25:ae:3d:
92:87:5e:c6:58:28:20:f6:83:5b:76:74:5b:a2:7e:
20:0e:21:98:6e:82:ee:70:4c:d7:77:9b:45:2b:8f:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1298::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214802
Signature Algorithm: sha256WithRSAEncryption
85:91:8d:2f:ea:a4:cf:7c:6e:4e:98:1f:de:a0:19:1e:ce:16:
0b:cb:ef:95:a1:c6:7e:95:25:5f:01:33:b8:6c:56:66:20:29:
01:84:2a:02:e6:f4:6b:30:d6:82:20:4b:d1:ef:7d:af:d6:93:
a8:57:82:17:eb:d3:b5:60:1a:2a:1f:2e:30:22:15:38:c0:22:
8e:c5:7c:eb:2a:08:0b:cf:80:4e:8a:2e:2b:d6:1b:a3:a6:b1:
b1:49:3c:01:7a:b2:41:23:87:33:02:cc:4f:d1:92:d5:7f:14:
8e:26:ea:be:b0:a6:f5:60:73:47:05:d5:44:49:2a:b0:33:b3:
37:f1:29:aa:ac:af:56:ad:41:0a:04:53:70:27:7f:4e:18:0b:
05:c3:8c:09:3a:01:7b:c8:26:54:71:0e:ef:f1:64:ed:ea:a6:
c2:bf:0b:be:f0:eb:ed:67:cb:c4:ab:4b:bc:de:43:e7:9e:ad:
24:91:ba:89:0f:be:3c:cb:d2:c5:f1:58:0c:14:87:86:bb:fb:
3a:3b:dc:76:f2:92:b7:51:c5:56:c9:46:9e:14:4c:79:99:66:
43:67:55:2e:2a:a1:d2:cb:82:6f:82:5d:af:01:41:50:dd:f1:
41:f7:43:c6:5e:db:37:49:2f:96:c8:90:42:6d:87:24:e4:53:
9b:fe:39:18
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ5zv1fdV22Af+2PQnvIcu/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTI5MTIzOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmMxMTQ0MjFhMjE1MzhiYjZiZjAyNjQ5ODdlN2E0NDRjODBlYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBqngPHcQSUOAgBiPI1yE4dD0IiP
tJ/R+wOvZqFB2kJ8IC1cabmv0Ay8Z2Oi4eKFBbWBzBwLUsmnyYXoKtBI220A4m9X
TAAMXmsaGGn+eLMLnLABqgud5Pj2BpFUb+LZ5UrJZyDEWfsYFuneMOIzl1Pf8ktq
QcKaQhQ1LOvP3NvajDKLdAxAlhZaLnS91Se1OARyyq4Mk7MBCkEN+uJBE2dDfrrQ
V9HtI5MzQJVTNHgyExYHLL7mO3Vf5m0Hps8NorRoR2kh2ISsi+VVYHfbLuRN1w0F
A/d86Tw0J5Ilrj2Sh17GWCgg9oNbdnRbon4gDiGYboLucEzXd5tFK492sQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFBLBFEIaIVOLtr8CZJh+ekRMgOo+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzM3ZjY4
Ni0xOGEzLTQ0NTItOTI4Yy03NzdhOTk0YzhkNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMzdmNjg2
LTE4YTMtNDQ1Mi05MjhjLTc3N2E5OTRjOGQ2OS8xL0VzRVVRaG9oVTR1MnZ3Smtt
SDU2UkV5QTZqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBKYMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNHEjANBgkqhkiG9w0BAQsFAAOCAQEAhZGNL+qkz3xuTpgf3qAZHs4WC8vv
laHGfpUlXwEzuGxWZiApAYQqAub0azDWgiBL0e99r9aTqFeCF+vTtWAaKh8uMCIV
OMAijsV86yoIC8+AToouK9Ybo6axsUk8AXqyQSOHMwLMT9GS1X8UjibqvrCm9WBz
RwXVREkqsDOzN/EpqqyvVq1BCgRTcCd/ThgLBcOMCToBe8gmVHEO7/Fk7eqmwr8L
vvDr7WfLxKtLvN5D556tJJG6iQ++PMvSxfFYDBSHhrv7OjvcdvKSt1HFVslGnhRM
eZlmQ2dVLiqh0suCb4JdrwFBUN3xQfdDxl7bN0kvlsiQQm2HJORTm/45GA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:38 2026 by rpki-client