Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.cer (raw, json)
Hash identifier:          nxiAEJp5rWHj+gBkW6wg+SQsdZ2lTKu7yHGxtGyQgAk=
Subject key identifier:   4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ECB1F7C5C919D17A6CF0AF94E48B81
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:18:33 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 208708
                          IP: 45.87.112.0/22
                          IP: 2a10:8d00::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:b1:f7:c5:c9:19:d1:7a:6c:f0:af:94:e4:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:1a:08:40:0e:36:ea:01:5d:8f:ef:6e:b2:
                    b3:f6:31:06:05:ec:2d:3c:d0:ca:3b:48:68:d2:0f:
                    6a:3e:ca:ad:80:8f:a1:25:70:cb:17:dd:cb:69:b5:
                    7d:90:0e:f9:b1:80:5a:be:42:41:57:52:73:6e:2f:
                    fb:44:a2:32:37:91:ea:0b:2e:c2:59:d7:df:84:c6:
                    a4:9d:b2:84:15:9a:a1:7d:cf:3c:e2:ed:d2:5f:a4:
                    25:4f:f6:be:d7:7d:8f:97:4d:a2:d4:f5:86:bd:c0:
                    df:93:f9:e5:8b:e6:c9:0f:a2:56:99:90:0b:33:35:
                    04:68:79:52:a3:85:c1:61:79:43:0d:c7:80:5b:2e:
                    da:0a:5f:d7:47:35:47:c7:2b:69:ad:2c:70:26:cb:
                    e8:f3:c2:95:65:9e:86:0a:87:a3:a5:bc:3c:71:df:
                    d2:f7:a0:1e:71:bd:e9:8f:cf:4d:7b:26:7e:60:62:
                    6b:28:84:33:34:ca:43:6c:c5:47:07:02:42:6f:5f:
                    78:5c:e0:49:1f:1b:3b:df:77:d4:05:c3:2e:3f:7c:
                    06:f4:78:26:f3:71:4e:10:65:f8:39:2a:49:4b:19:
                    ed:f8:c1:97:61:34:76:92:9c:90:66:8e:85:85:03:
                    b8:51:d3:ae:d2:61:97:d9:a4:57:24:01:4d:5a:51:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.112.0/22
                IPv6:
                  2a10:8d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208708

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:88:e6:1e:10:ef:0a:2e:1d:11:24:14:6b:9c:22:f1:81:
         a3:c5:1b:90:58:84:b3:1f:5d:18:05:fc:55:17:b8:95:82:af:
         91:9d:81:65:2d:de:15:14:e7:c7:f0:7d:c8:4b:cb:1a:99:2c:
         9a:0e:3b:a2:28:af:7d:1a:fb:be:70:03:24:c5:88:12:a3:52:
         e7:ef:c7:fd:b0:c1:ee:cf:fc:0f:33:86:f5:3d:40:95:d4:56:
         8e:10:59:48:d8:bc:fe:6a:1f:4b:32:5d:2e:16:f5:14:0c:28:
         7f:69:89:d5:49:05:1c:ef:9e:ce:1a:4e:38:62:93:cc:b4:2a:
         11:25:3e:47:f1:5a:59:11:23:9c:a9:e7:c1:4e:22:6a:ad:e4:
         ff:e1:0f:c2:de:97:24:9d:36:58:1e:27:66:3a:a7:e0:33:d6:
         6c:57:f9:8b:66:90:6a:a5:6b:eb:60:cf:c9:0c:92:e3:8a:35:
         83:32:75:4e:5a:9f:f2:60:58:e1:91:01:f2:21:72:42:a7:ff:
         a0:35:6b:7d:4b:62:ad:6d:74:85:47:f2:3b:52:67:af:f8:b6:
         cb:43:a4:96:cb:f2:21:0e:89:11:b7:53:28:b7:13:e8:64:8c:
         c2:f0:d5:15:79:d9:ea:ab:07:f7:25:5b:c9:7c:c4:ae:d1:a6:
         af:c1:7e:7b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt57LH3xckZ0Xps8K+U5IuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQ2OGYxODEyNjViNGQ5NmNhMjgzNWEzZTU3MGMyNjc5MDM1ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuMaCEAONuoBXY/vbrKz9jEGBewt
PNDKO0ho0g9qPsqtgI+hJXDLF93LabV9kA75sYBavkJBV1Jzbi/7RKIyN5HqCy7C
WdffhMaknbKEFZqhfc884u3SX6QlT/a+132Pl02i1PWGvcDfk/nli+bJD6JWmZAL
MzUEaHlSo4XBYXlDDceAWy7aCl/XRzVHxytprSxwJsvo88KVZZ6GCoejpbw8cd/S
96Aecb3pj89NeyZ+YGJrKIQzNMpDbMVHBwJCb194XOBJHxs733fUBcMuP3wG9Hgm
83FOEGX4OSpJSxnt+MGXYTR2kpyQZo6FhQO4UdOu0mGX2aRXJAFNWlFvFwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFExGjxgSZbTZbKKDWj5XDCZ5A13/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzY5MDY1
OS0zMTkwLTQzNGQtOGMyMi0xY2QzMzkzZDBiZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNjkwNjU5
LTMxOTAtNDM0ZC04YzIyLTFjZDMzOTNkMGJmNS8xL1RFYVBHQkpsdE5sc29vTmFQ
bGNNSm5rRFhmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVdwMA0EAgACMAcDBQMqEI0AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvRDANBgkqhkiG9w0BAQsFAAOCAQEAPjKI5h4Q7wou
HREkFGucIvGBo8UbkFiEsx9dGAX8VRe4lYKvkZ2BZS3eFRTnx/B9yEvLGpksmg47
oiivfRr7vnADJMWIEqNS5+/H/bDB7s/8DzOG9T1AldRWjhBZSNi8/mofSzJdLhb1
FAwof2mJ1UkFHO+ezhpOOGKTzLQqESU+R/FaWREjnKnnwU4iaq3k/+EPwt6XJJ02
WB4nZjqn4DPWbFf5i2aQaqVr62DPyQyS44o1gzJ1Tlqf8mBY4ZEB8iFyQqf/oDVr
fUtirW10hUfyO1Jnr/i2y0OklsvyIQ6JEbdTKLcT6GSMwvDVFXnZ6qsH9yVbyXzE
rtGmr8F+ew==
-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:32 2026 by rpki-client