Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
File: HluDDH425082Xhmo3ifRDMxJTkc.cer (raw, json)
Hash identifier: 1BU75jjObi+w9FC+nTBS8U/YeVAERwLBiP+6Hi22w1E=
Subject key identifier: 1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBA042E1A64922B7A97979234C35F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211651
IP: 185.251.69.0/24
IP: 2a13:1700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:a0:42:e1:a6:49:22:b7:a9:79:79:23:4c:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:58:43:eb:ce:bd:27:60:df:30:ce:80:7c:
f4:66:a1:97:cd:c5:a7:4c:2f:c0:1a:bb:76:14:62:
b3:05:28:71:a7:26:f6:e4:84:9c:c5:5f:58:2b:5c:
92:1b:3b:2c:a6:97:e9:56:6f:f0:22:65:14:25:88:
23:4b:a2:b0:b3:1c:de:83:e8:96:19:27:8a:e9:c5:
25:db:21:94:22:40:43:0b:a5:94:d9:23:87:1f:ca:
08:36:b2:6c:d9:e1:f4:8e:e6:95:d0:bd:92:2e:14:
67:e1:0e:39:a8:90:1d:00:32:d7:0e:bd:b3:1a:42:
23:ad:38:6e:83:e8:9f:ab:36:93:ee:8e:2c:04:10:
ee:02:04:f8:8d:3b:1a:6f:d8:9d:48:c6:e5:11:2e:
11:d2:3c:35:22:75:e7:34:b9:af:6c:61:3c:5e:eb:
78:9b:74:03:b2:f6:8c:b0:99:a4:97:a6:13:78:eb:
e6:25:2c:d2:2c:82:81:dd:7c:15:9f:bb:d1:c6:d8:
20:fa:45:6b:14:87:3d:b2:2f:08:18:fd:55:ea:d1:
a6:08:d4:38:e3:ca:bd:86:fc:21:4e:55:29:85:8a:
5d:ee:03:e4:97:78:c3:5e:42:20:f3:e8:ad:bc:90:
f9:9c:d2:5b:0a:89:42:2b:da:4f:1d:27:20:9a:86:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.69.0/24
IPv6:
2a13:1700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211651
Signature Algorithm: sha256WithRSAEncryption
4c:05:b8:f6:d7:a5:0e:fe:59:23:ca:ec:b5:d4:24:14:39:8e:
77:96:ef:9f:74:68:53:c8:ac:3f:8e:35:78:a9:e3:6a:dd:0d:
b0:cc:4a:3e:5b:ad:6b:a8:ef:d5:3a:4e:4d:ae:af:7d:dd:e7:
00:4c:f0:cf:bf:4b:ea:42:aa:b3:63:3d:4c:e3:85:a1:f9:43:
13:24:89:05:47:4d:c6:29:14:72:a4:6c:35:b6:1c:47:c1:1c:
33:25:95:2e:86:d9:d7:1b:6e:b4:fe:7c:d7:21:a9:db:b9:8d:
b0:6c:e4:1f:fe:39:11:2b:a2:86:98:6c:e0:cb:b8:4e:1f:2f:
81:27:cf:a0:7a:18:38:dd:3d:c1:00:c2:d3:0a:54:13:ed:a2:
8c:f1:11:d9:9d:48:18:59:01:79:a6:f6:d7:b7:8e:77:72:a8:
e7:87:2b:03:f0:f4:f4:73:a2:c5:4e:09:30:51:ba:1c:49:90:
91:9d:d3:23:02:55:23:5b:f4:eb:b6:5e:6f:bb:e3:ff:3b:3a:
4c:d7:b2:cf:74:44:7c:21:54:f7:7c:ec:d1:51:7e:c1:52:f1:
aa:d8:4b:36:39:6b:36:52:ce:59:6f:53:ad:6c:8b:53:16:6a:
bf:79:65:31:56:75:1a:16:c4:e7:f0:b2:66:3d:6c:71:2f:6b:
be:b7:c9:c0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+6BC4aZJIrepeXkjTDXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTViODMwYzdlMzZlNzRmMzY1ZTE5YThkZTI3ZDEwY2NjNDk0ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4RYQ+vOvSdg3zDOgHz0ZqGXzcWn
TC/AGrt2FGKzBShxpyb25IScxV9YK1ySGzssppfpVm/wImUUJYgjS6Kwsxzeg+iW
GSeK6cUl2yGUIkBDC6WU2SOHH8oINrJs2eH0juaV0L2SLhRn4Q45qJAdADLXDr2z
GkIjrThug+ifqzaT7o4sBBDuAgT4jTsab9idSMblES4R0jw1InXnNLmvbGE8Xut4
m3QDsvaMsJmkl6YTeOvmJSzSLIKB3XwVn7vRxtgg+kVrFIc9si8IGP1V6tGmCNQ4
48q9hvwhTlUphYpd7gPkl3jDXkIg8+itvJD5nNJbColCK9pPHScgmobgrwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB5bgwx+NudPNl4ZqN4n0QzMSU5HMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzBiZWEz
My1iYjQwLTRiZDEtOTcyNC1mNjRjNzBmNGQ0NDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMGJlYTMz
LWJiNDAtNGJkMS05NzI0LWY2NGM3MGY0ZDQ0NS8xL0hsdURESDQyNTA4MlhobW8z
aWZSRE14SlRrYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuftFMA0EAgACMAcDBQMqExcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM6wzANBgkqhkiG9w0BAQsFAAOCAQEATAW49telDv5Z
I8rstdQkFDmOd5bvn3RoU8isP441eKnjat0NsMxKPluta6jv1TpOTa6vfd3nAEzw
z79L6kKqs2M9TOOFoflDEySJBUdNxikUcqRsNbYcR8EcMyWVLobZ1xtutP581yGp
27mNsGzkH/45ESuihphs4Mu4Th8vgSfPoHoYON09wQDC0wpUE+2ijPER2Z1IGFkB
eab217eOd3Ko54crA/D09HOixU4JMFG6HEmQkZ3TIwJVI1v067Zeb7vj/zs6TNey
z3REfCFU93zs0VF+wVLxqthLNjlrNlLOWW9TrWyLUxZqv3llMVZ1GhbE5/CyZj1s
cS9rvrfJwA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:00 2026 by rpki-client