Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
File: ZK4vfE0s7wtpdCnWE69QhvyZiow.cer (raw, json)
Hash identifier: a2r0tBTfecXfUyRXa2FxUa9wxHSvYdI2YftTBD36OC8=
Subject key identifier: 64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9454EE2CBB2D0B861E33A8A793847
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206211
IP: 185.247.240.0/22
IP: 2a0d:d180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:45:4e:e2:cb:b2:d0:b8:61:e3:3a:8a:79:38:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ae2f7c4d2cef0b697429d613af5086fc998a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:18:e6:50:47:b9:58:d4:eb:0b:24:6f:56:
c0:d4:b2:93:f7:48:90:c3:55:da:2c:97:66:46:da:
48:5b:8c:d9:40:c3:b6:cb:c7:a3:85:f8:f7:7b:cc:
11:82:d5:77:4d:cd:f4:60:ee:14:b3:b9:02:33:d2:
5b:61:98:3f:a7:48:3f:5b:9c:17:bf:52:59:62:15:
8c:c6:79:c8:4c:c4:35:17:57:bf:85:9e:8a:90:98:
7f:ca:5a:47:c9:90:1b:a4:a7:1d:f8:5f:c4:97:65:
32:d5:70:5a:b3:c5:a2:18:67:0e:a3:7a:a1:8a:fa:
57:8e:6a:0a:48:d1:81:db:04:4d:84:17:50:35:49:
5d:fd:8a:fd:4d:e5:d1:5d:fa:28:fd:2b:3a:c8:e9:
d9:c1:ee:4f:2b:68:2e:b8:9b:f0:f7:41:31:79:12:
a2:3f:56:97:d4:f2:39:94:05:85:a0:01:d0:53:e2:
80:5e:50:37:ff:6e:41:29:c7:80:39:ca:07:04:b9:
dd:70:85:8a:68:34:93:84:cb:05:f2:ed:71:e6:ee:
4b:9f:38:d0:16:09:b0:89:fc:a9:af:bc:de:23:13:
3d:79:20:f2:20:99:92:fb:71:31:5c:d7:f8:ea:73:
53:f1:8b:88:0c:6a:8e:88:36:a8:14:30:11:e9:7b:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.240.0/22
IPv6:
2a0d:d180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206211
Signature Algorithm: sha256WithRSAEncryption
3c:ff:6b:a5:07:31:40:ec:a6:68:95:fd:2b:8b:9c:a1:db:43:
8d:4d:04:36:4c:16:70:8f:6b:1c:6e:2c:46:80:b8:d7:3c:15:
c2:82:8b:fb:9b:9e:ab:b2:07:34:08:39:f6:91:7d:26:13:e3:
81:5e:b8:57:5f:4b:ba:4c:9d:53:3a:6e:3d:66:24:72:05:11:
60:51:9e:26:80:9b:dc:d2:2b:cf:6f:ca:99:1d:b5:e4:59:b8:
fd:99:35:de:60:4b:a9:d7:d9:bc:c7:1e:8c:7a:cc:14:60:81:
87:9a:17:1a:93:9a:55:22:70:f0:05:88:65:b1:52:19:54:6c:
ec:24:c5:eb:62:30:0e:54:c0:ce:79:27:5b:d9:1a:b3:5f:7a:
82:d5:a3:e7:bb:db:36:77:93:6f:ca:e2:5b:85:f0:00:3d:8f:
2f:ab:13:d2:72:70:f5:76:5b:d2:c9:87:91:46:db:9d:cf:6d:
c3:fc:71:7b:25:a2:ea:4e:df:fd:99:cb:d2:ba:ea:e2:3e:8b:
38:2c:69:ee:23:6f:e8:95:d3:d7:68:a2:8a:ae:d1:2c:83:26:
ec:26:74:c1:2e:78:4f:d6:b2:25:f1:4c:7f:b2:7e:12:29:8b:
a1:e1:43:91:ec:98:61:7b:fc:43:49:b7:f2:4b:f2:d4:74:bf:
08:e2:2c:02
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+UVO4suy0Lhh4zqKeThHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGFlMmY3YzRkMmNlZjBiNjk3NDI5ZDYxM2FmNTA4NmZjOTk4YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsIY5lBHuVjU6wskb1bA1LKT90iQ
w1XaLJdmRtpIW4zZQMO2y8ejhfj3e8wRgtV3Tc30YO4Us7kCM9JbYZg/p0g/W5wX
v1JZYhWMxnnITMQ1F1e/hZ6KkJh/ylpHyZAbpKcd+F/El2Uy1XBas8WiGGcOo3qh
ivpXjmoKSNGB2wRNhBdQNUld/Yr9TeXRXfoo/Ss6yOnZwe5PK2guuJvw90ExeRKi
P1aX1PI5lAWFoAHQU+KAXlA3/25BKceAOcoHBLndcIWKaDSThMsF8u1x5u5LnzjQ
Fgmwifypr7zeIxM9eSDyIJmS+3ExXNf46nNT8YuIDGqOiDaoFDAR6XvvlwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGSuL3xNLO8LaXQp1hOvUIb8mYqMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzNkYzcy
ZS0wODYxLTQzMTYtYTRiZS1hMjk1ODEzZjFmODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvM2RjNzJl
LTA4NjEtNDMxNi1hNGJlLWEyOTU4MTNmMWY4Mi8xL1pLNHZmRTBzN3d0cGRDbldF
NjlRaHZ5Wmlvdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuffwMA0EAgACMAcDBQMqDdGAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMlgzANBgkqhkiG9w0BAQsFAAOCAQEAPP9rpQcxQOym
aJX9K4ucodtDjU0ENkwWcI9rHG4sRoC41zwVwoKL+5ueq7IHNAg59pF9JhPjgV64
V19LukydUzpuPWYkcgURYFGeJoCb3NIrz2/KmR215Fm4/Zk13mBLqdfZvMcejHrM
FGCBh5oXGpOaVSJw8AWIZbFSGVRs7CTF62IwDlTAznknW9kas196gtWj57vbNneT
b8riW4XwAD2PL6sT0nJw9XZb0smHkUbbnc9tw/xxeyWi6k7f/ZnL0rrq4j6LOCxp
7iNv6JXT12iiiq7RLIMm7CZ0wS54T9ayJfFMf7J+EimLoeFDkeyYYXv8Q0m38kvy
1HS/COIsAg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:17 2026 by rpki-client