Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/L1GR6cLO2EPbR_H_eMRhJYLYXVg.cer
File: L1GR6cLO2EPbR_H_eMRhJYLYXVg.cer (raw, json)
Hash identifier: KBBPp2lcOYO+dFD0awAduR4VhlzHGvlTvH5Ui3ZR2Ck=
Subject key identifier: 2F:51:91:E9:C2:CE:D8:43:DB:47:F1:FF:78:C4:61:25:82:D8:5D:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1453E212789668198068BEAD933098153
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/L1GR6cLO2EPbR_H_eMRhJYLYXVg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 Oct 2026 15:04:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218378
IP: 2a0f:ae00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:3e:21:27:89:66:81:98:06:8b:ea:d9:33:09:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 15:04:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f5191e9c2ced843db47f1ff78c4612582d85d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:cc:d7:9f:42:71:5c:5f:62:37:05:82:80:
5a:c1:e9:e3:09:6f:93:66:3c:70:29:74:c7:7f:0d:
69:0d:c4:12:48:c4:31:48:08:81:bd:a6:49:01:3b:
f7:3b:62:85:ee:c1:01:00:f7:41:82:9c:a7:f9:19:
9c:e4:6c:ed:3e:4e:40:3c:1c:ca:de:cd:8c:9c:60:
6b:3b:6c:8a:05:f6:6d:12:fb:48:f3:55:99:3e:d6:
a1:20:e8:a0:d2:62:63:c6:8a:d8:c7:49:fd:70:1e:
74:15:c9:93:30:08:b8:c9:05:4c:b4:dd:e1:52:e8:
47:f7:fd:b1:f3:d1:fc:2d:fd:2f:70:c6:7a:6a:bc:
4a:f3:e8:e7:93:f1:69:9d:32:8c:f9:b4:45:4b:7e:
5e:18:d6:2b:95:0b:5c:ca:5b:0d:c5:bf:8e:4d:a9:
bf:3d:ee:eb:d0:78:6d:b5:9e:20:ef:9e:a5:bd:79:
2b:eb:1d:f1:ef:8c:4d:b3:d1:0f:df:92:ef:f5:05:
70:10:d6:09:d1:e7:38:c1:93:f4:aa:5e:ab:7f:e6:
e3:6e:4e:bd:ea:21:13:84:03:ee:ab:47:38:c4:54:
77:38:e5:d5:7a:b0:19:c6:58:40:60:45:56:dd:13:
c8:12:c4:15:78:d6:57:fa:ad:db:f1:5f:d7:7e:a4:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:91:E9:C2:CE:D8:43:DB:47:F1:FF:78:C4:61:25:82:D8:5D:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/L1GR6cLO2EPbR_H_eMRhJYLYXVg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ae00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218378
Signature Algorithm: sha256WithRSAEncryption
07:58:6c:5d:e1:c7:49:ea:8e:83:a0:2b:19:bd:28:3b:4e:4e:
6d:ed:db:2f:5a:5e:06:71:2e:83:1e:91:5d:7e:49:b3:e3:aa:
48:bb:f7:ca:44:34:9a:1a:fb:48:a8:8e:49:da:d3:45:d6:d8:
8b:f5:f8:a7:9b:52:30:ba:f7:f3:65:47:ec:d8:94:fc:e7:8b:
1f:f9:b9:43:6c:c4:e0:19:56:35:ff:b7:86:b4:46:b0:a6:10:
00:21:10:a8:f6:1f:77:e0:8c:84:42:3e:45:05:a7:71:55:9e:
77:43:cd:ca:d1:c7:36:7e:f3:61:19:ac:f8:d6:ca:c3:ed:14:
01:46:80:0b:43:5f:d4:89:c7:cc:13:18:9d:bc:d6:ec:56:7b:
2e:f2:7b:73:1a:a9:70:57:cf:2d:b1:df:8a:e4:3f:d3:d8:07:
02:bd:82:e9:a4:46:37:2d:c0:66:9c:06:7f:0c:8b:5b:f7:f7:
7f:54:55:07:82:3e:9e:f3:86:93:60:05:e5:ba:2b:5f:00:f1:
35:1b:aa:d9:fb:16:02:dc:f7:e8:63:e1:dd:f7:80:37:a6:31:
d2:bd:9b:df:5d:bc:6f:c3:cb:7a:a8:d0:51:a4:8c:9c:79:2a:
bb:c0:98:c7:1d:e7:88:5f:a3:67:94:21:f5:68:87:77:f1:b0:
99:8d:b3:8a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAaFFPiEniWaBmAaL6tkzCYFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDE2MTUwNDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjUxOTFlOWMyY2VkODQzZGI0N2YxZmY3OGM0NjEyNTgyZDg1ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15TM159CcVxfYjcFgoBawenjCW+T
ZjxwKXTHfw1pDcQSSMQxSAiBvaZJATv3O2KF7sEBAPdBgpyn+Rmc5GztPk5APBzK
3s2MnGBrO2yKBfZtEvtI81WZPtahIOig0mJjxorYx0n9cB50FcmTMAi4yQVMtN3h
UuhH9/2x89H8Lf0vcMZ6arxK8+jnk/FpnTKM+bRFS35eGNYrlQtcylsNxb+OTam/
Pe7r0HhttZ4g756lvXkr6x3x74xNs9EP35Lv9QVwENYJ0ec4wZP0ql6rf+bjbk69
6iEThAPuq0c4xFR3OOXVerAZxlhAYEVW3RPIEsQVeNZX+q3b8V/XfqSy/QIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFC9RkenCzthD20fx/3jEYSWC2F1YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzA0Y2M4
MC1jYzM2LTRlZjAtYTMyNS1kZTYyMjQ3YmRmNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDRjYzgw
LWNjMzYtNGVmMC1hMzI1LWRlNjIyNDdiZGY1Yy8xL0wxR1I2Y0xPMkVQYlJfSF9l
TVJoSllMWVhWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKg+uADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDVQowDQYJKoZIhvcNAQELBQADggEBAAdYbF3hx0nqjoOgKxm9KDtOTm3t2y9a
XgZxLoMekV1+SbPjqki798pENJoa+0iojkna00XW2Iv1+KebUjC69/NlR+zYlPzn
ix/5uUNsxOAZVjX/t4a0RrCmEAAhEKj2H3fgjIRCPkUFp3FVnndDzcrRxzZ+82EZ
rPjWysPtFAFGgAtDX9SJx8wTGJ281uxWey7ye3MaqXBXzy2x34rkP9PYBwK9gumk
RjctwGacBn8Mi1v3939UVQeCPp7zhpNgBeW6K18A8TUbqtn7FgLc9+hj4d33gDem
MdK9m99dvG/Dy3qo0FGkjJx5KrvAmMcd54hfo2eUIfVoh3fxsJmNs4o=
-----END CERTIFICATE-----
Generated at Fri Oct 23 17:30:08 2026 by rpki-client