Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HTW39TIK48j2oVbFWxn0mGAX23M.cer
File: HTW39TIK48j2oVbFWxn0mGAX23M.cer (raw, json)
Hash identifier: 0O81SGJpaH6I/+nrJxpgGf8kmaiDiCz7j7pMFilhfW4=
Subject key identifier: 1D:35:B7:F5:32:0A:E3:C8:F6:A1:56:C5:5B:19:F4:98:60:17:DB:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00F6E012BAAB81F82DC5B99C1E8DACE76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/HTW39TIK48j2oVbFWxn0mGAX23M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 11:14:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200875
IP: 46.28.238.0/24
IP: 2a11:3640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:6e:01:2b:aa:b8:1f:82:dc:5b:99:c1:e8:da:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 11:14:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d35b7f5320ae3c8f6a156c55b19f4986017db73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:12:2a:da:ee:22:12:2c:80:f4:45:2e:27:
83:80:e7:c4:95:83:32:c9:a8:81:fc:21:31:a5:fe:
f8:82:d7:3d:62:ea:87:6f:3b:1f:d3:77:17:f7:05:
06:2a:ae:74:e9:69:2c:96:e9:47:d5:db:f2:2f:4d:
0e:79:3b:79:5b:8e:7f:c2:a5:52:4c:8c:59:f4:39:
08:b9:7f:71:19:b7:6d:5b:e0:db:7a:50:58:83:2c:
72:37:73:3a:51:f7:66:0d:3f:2d:5d:df:02:b1:d6:
82:85:72:73:37:a0:26:51:cb:bb:39:bf:8c:6f:ba:
18:a1:0a:6b:ac:1e:9d:e5:3b:97:d7:20:8d:2b:74:
82:a8:63:07:86:87:14:c0:99:c6:1c:4d:67:55:b0:
05:65:de:cf:ef:82:a0:96:6a:1a:04:0c:01:04:1c:
21:c8:d3:43:d5:42:d5:84:34:da:c6:7b:10:19:2e:
56:fa:f7:d9:e5:64:6c:9e:78:7b:11:9a:36:64:c4:
3c:54:52:e7:60:ef:e6:75:8e:ad:91:60:af:6b:e9:
dd:32:d6:21:a5:24:e4:b7:65:80:0f:dd:35:c5:6e:
1d:71:bc:ed:41:83:6c:cc:7e:ae:3c:73:9f:24:c5:
af:29:13:34:55:6b:22:88:d4:ad:cf:a7:23:2f:d3:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:35:B7:F5:32:0A:E3:C8:F6:A1:56:C5:5B:19:F4:98:60:17:DB:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/HTW39TIK48j2oVbFWxn0mGAX23M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.238.0/24
IPv6:
2a11:3640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200875
Signature Algorithm: sha256WithRSAEncryption
21:6f:7d:c7:bc:8f:1a:f4:fa:4c:71:cb:21:93:85:af:89:82:
bb:fb:53:b4:d2:2f:77:9f:b4:c5:f9:2d:1c:05:13:ee:9f:09:
6f:42:bf:2c:f9:96:d2:a4:10:f0:8d:f8:93:ab:79:d4:7f:42:
3c:ec:75:4d:6c:5e:e1:62:a4:0e:02:df:69:db:56:cc:52:b9:
69:7e:67:bd:0a:d4:61:4e:07:b5:2f:6f:26:96:8c:6e:d1:43:
02:c7:db:de:c3:60:6f:f4:43:ec:2b:9e:bc:f1:20:6b:e9:f9:
44:a7:a2:fa:4a:7d:5d:37:0c:02:f8:62:ef:6d:b1:c3:1e:07:
86:e3:39:86:0e:ce:de:c1:7e:a8:56:2a:7d:22:42:51:10:ad:
ae:4a:57:09:32:bb:83:84:55:3b:61:aa:e1:5f:7b:68:e2:68:
05:58:9c:0c:c3:ac:f6:89:a9:d8:6a:4d:6c:01:4c:30:e1:d9:
94:e8:b6:f7:e4:73:06:89:bb:68:02:b2:92:3b:b9:10:38:96:
3a:75:fd:50:01:56:f7:cd:00:31:b2:ff:21:32:a4:4a:fd:94:
62:b9:d6:3a:d9:48:1f:8b:77:48:da:f5:e8:a4:42:43:51:02:
be:ca:9e:fa:f2:78:38:ef:df:c1:a3:d5:ee:f2:5e:d6:b2:32:
39:61:cf:24
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAaAPbgErqrgfgtxbmcHo2s52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE3MTExNDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDM1YjdmNTMyMGFlM2M4ZjZhMTU2YzU1YjE5ZjQ5ODYwMTdkYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg0SKtruIhIsgPRFLieDgOfElYMy
yaiB/CExpf74gtc9YuqHbzsf03cX9wUGKq506WkslulH1dvyL00OeTt5W45/wqVS
TIxZ9DkIuX9xGbdtW+DbelBYgyxyN3M6UfdmDT8tXd8CsdaChXJzN6AmUcu7Ob+M
b7oYoQprrB6d5TuX1yCNK3SCqGMHhocUwJnGHE1nVbAFZd7P74KglmoaBAwBBBwh
yNND1ULVhDTaxnsQGS5W+vfZ5WRsnnh7EZo2ZMQ8VFLnYO/mdY6tkWCva+ndMtYh
pSTkt2WAD901xW4dcbztQYNszH6uPHOfJMWvKRM0VWsiiNStz6cjL9NWQQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB01t/UyCuPI9qFWxVsZ9JhgF9tzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2I4NjY4
NS1mM2Q1LTRiZDMtODVjZi1hMzUxZGZjNGM4YWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYjg2Njg1
LWYzZDUtNGJkMy04NWNmLWEzNTFkZmM0YzhhZS8xL0hUVzM5VElLNDhqMm9WYkZX
eG4wbUdBWDIzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALhzuMA0EAgACMAcDBQMqETZAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQqzANBgkqhkiG9w0BAQsFAAOCAQEAIW99x7yPGvT6
THHLIZOFr4mCu/tTtNIvd5+0xfktHAUT7p8Jb0K/LPmW0qQQ8I34k6t51H9CPOx1
TWxe4WKkDgLfadtWzFK5aX5nvQrUYU4HtS9vJpaMbtFDAsfb3sNgb/RD7CuevPEg
a+n5RKei+kp9XTcMAvhi722xwx4HhuM5hg7O3sF+qFYqfSJCURCtrkpXCTK7g4RV
O2Gq4V97aOJoBVicDMOs9omp2GpNbAFMMOHZlOi29+RzBom7aAKykju5EDiWOnX9
UAFW980AMbL/ITKkSv2UYrnWOtlIH4t3SNr16KRCQ1ECvsqe+vJ4OO/fwaPV7vJe
1rIyOWHPJA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:02 2026 by rpki-client