Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.cer
File: HWyvjQ6UBR5lpESZZ9PuaZKPaV0.cer (raw, json)
Hash identifier: PEsSnWhpDIWtJ8O/ytp9IGgid3bxAQ9E+trcv0Acmis=
Subject key identifier: 1D:6C:AF:8D:0E:94:05:1E:65:A4:44:99:67:D3:EE:69:92:8F:69:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC489E69326CE24F1BDCBEA622E872
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205160
IP: 185.237.167.0/24
IP: 2a11:9940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:48:9e:69:32:6c:e2:4f:1b:dc:be:a6:22:e8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d6caf8d0e94051e65a4449967d3ee69928f695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:27:69:b4:7b:a0:b9:9b:77:01:98:78:9a:
8b:fa:57:a9:35:02:d0:a5:ac:c6:23:9a:e1:72:e0:
82:4a:16:fa:7f:fd:9b:ec:fb:66:b7:dd:c3:e8:e7:
16:cf:fa:c7:95:c3:85:20:ae:43:5c:47:f4:cb:03:
8d:56:a0:71:1e:3a:2d:0a:25:0f:34:0d:19:16:cb:
4b:4c:e0:48:d8:b8:f8:ea:2e:d6:1c:f6:38:aa:0e:
76:d6:49:ed:80:7e:54:16:c0:b8:ef:ee:b0:79:e6:
e0:9b:4f:6d:86:c2:ee:36:b9:c0:05:81:82:06:3e:
92:b8:3e:ff:bf:86:b0:09:8c:76:a8:03:f4:a4:4d:
2f:e6:19:7e:86:39:d5:6b:94:89:77:3e:59:0c:91:
cf:24:0b:a3:0e:5e:30:3e:96:60:52:5a:a2:67:1f:
c2:c1:8d:8a:1a:35:1c:1a:25:ce:68:fd:c3:6a:35:
66:e9:56:71:19:8a:07:5b:2f:05:a9:e1:e7:88:c3:
f5:a6:dd:e4:b6:3b:62:48:1b:77:34:73:64:d4:88:
74:04:d4:07:17:29:57:99:19:c0:1a:96:ea:cb:c5:
03:32:80:8f:0e:bf:cc:38:5b:73:b7:f4:cf:73:2d:
96:50:de:36:78:24:b6:ca:04:5b:03:1a:ed:21:ff:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:AF:8D:0E:94:05:1E:65:A4:44:99:67:D3:EE:69:92:8F:69:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.167.0/24
IPv6:
2a11:9940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205160
Signature Algorithm: sha256WithRSAEncryption
a2:0c:f9:76:27:06:36:3a:fc:c0:6a:5c:c4:e4:b9:58:49:d6:
f2:45:0b:ff:61:5e:3b:8f:6e:2d:43:90:6d:93:36:d8:79:ae:
e2:4e:cb:f8:d3:00:9c:d1:f1:13:24:af:3a:da:ca:03:9f:6a:
6a:fb:d0:c4:d7:61:03:3d:1e:63:dd:0f:22:ba:92:1f:8f:42:
5f:41:1d:04:df:d9:3f:e5:ab:fd:48:21:e0:79:99:d2:3c:5c:
3a:75:8c:16:83:08:e6:02:d3:ea:53:53:86:08:d2:26:ab:e3:
d6:95:68:28:37:fb:51:f8:dc:c1:74:45:bb:0d:37:a1:c3:3c:
42:96:f8:d8:d1:a4:19:6b:94:57:4e:82:6c:3f:90:b4:91:0e:
4e:97:10:0d:f1:11:d0:0d:2c:bf:77:81:7a:a8:82:30:84:b2:
d2:08:28:81:10:f9:0f:12:ba:29:5c:a0:08:95:2f:c2:93:e9:
72:a0:1a:49:b4:05:b5:fa:14:02:13:2c:d2:ce:4c:95:16:cd:
fc:05:ca:f7:32:39:e7:a1:a7:c1:d3:f4:50:2e:e2:59:b0:42:
9d:08:4c:ab:b6:ab:b4:cc:56:1d:3e:90:0a:eb:24:bc:e1:8d:
e7:fe:b4:56:44:90:9f:f0:aa:ae:c4:c4:71:47:09:73:17:79:
fe:3f:f4:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y/EieaTJs4k8b3L6mIuhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDZjYWY4ZDBlOTQwNTFlNjVhNDQ0OTk2N2QzZWU2OTkyOGY2OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BknabR7oLmbdwGYeJqL+lepNQLQ
pazGI5rhcuCCShb6f/2b7Ptmt93D6OcWz/rHlcOFIK5DXEf0ywONVqBxHjotCiUP
NA0ZFstLTOBI2Lj46i7WHPY4qg521kntgH5UFsC47+6weebgm09thsLuNrnABYGC
Bj6SuD7/v4awCYx2qAP0pE0v5hl+hjnVa5SJdz5ZDJHPJAujDl4wPpZgUlqiZx/C
wY2KGjUcGiXOaP3DajVm6VZxGYoHWy8FqeHniMP1pt3ktjtiSBt3NHNk1Ih0BNQH
FylXmRnAGpbqy8UDMoCPDr/MOFtzt/TPcy2WUN42eCS2ygRbAxrtIf/qEwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB1sr40OlAUeZaREmWfT7mmSj2ldMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzI5Y2Iy
ZS00NjgwLTRhMzYtYjBhNS05ODUxODIwMDFlOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMjljYjJl
LTQ2ODAtNGEzNi1iMGE1LTk4NTE4MjAwMWU5Mi8xL0hXeXZqUTZVQlI1bHBFU1pa
OVB1YVpLUGFWMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAue2nMA0EAgACMAcDBQAqEZlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhaDANBgkqhkiG9w0BAQsFAAOCAQEAogz5dicGNjr8
wGpcxOS5WEnW8kUL/2FeO49uLUOQbZM22Hmu4k7L+NMAnNHxEySvOtrKA59qavvQ
xNdhAz0eY90PIrqSH49CX0EdBN/ZP+Wr/Ugh4HmZ0jxcOnWMFoMI5gLT6lNThgjS
Jqvj1pVoKDf7UfjcwXRFuw03ocM8Qpb42NGkGWuUV06CbD+QtJEOTpcQDfER0A0s
v3eBeqiCMISy0ggogRD5DxK6KVygCJUvwpPpcqAaSbQFtfoUAhMs0s5MlRbN/AXK
9zI556GnwdP0UC7iWbBCnQhMq7artMxWHT6QCuskvOGN5/60VkSQn/CqrsTEcUcJ
cxd5/j/0YA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:08:44 2026 by rpki-client