Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer (raw, json)
Hash identifier: Ke3J/XzCsSMvABeirEX7oQxvWaxrJZ3s9HQ5qhMQRb0=
Subject key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E7666F633A082F53E83237796F837E275
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 30 May 2026 01:01:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57705
IP: 5.32.132.0/22
IP: 85.187.17.0/24
IP: 91.247.180.0/24
IP: 213.232.237.0/24
IP: 2a0c:7740::/29
IP: 2a11:2ac0::/29
IP: 2a11:c8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:76:66:f6:33:a0:82:f5:3e:83:23:77:96:f8:37:e2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 30 01:01:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:b6:10:5d:ec:7d:a5:4c:5b:04:d9:25:b2:
61:49:1f:79:08:1e:7f:39:70:a4:9e:66:47:31:3b:
d3:3e:52:c1:55:8d:f2:06:11:83:f4:0f:92:2e:1f:
1e:46:cf:b1:4d:43:80:52:db:e7:b2:e3:1b:de:91:
12:28:b9:a4:21:72:8c:7b:d9:65:67:3d:17:a2:97:
b8:5e:a8:11:ab:61:8e:7c:95:28:30:b7:18:b8:77:
b9:8d:83:66:53:16:d4:e0:59:6b:bd:c0:1a:72:8d:
2e:83:ec:59:24:e1:ad:13:61:e4:c6:46:2b:02:b8:
ea:f1:53:d0:76:51:4b:cb:f6:d4:a2:5c:c8:a9:7b:
28:6f:20:9c:10:8c:96:63:7a:90:98:e2:2f:69:7e:
57:4f:17:bf:b3:3b:81:40:4e:74:57:75:da:84:2a:
6b:03:5f:99:0b:b7:eb:0e:3e:bf:8b:1b:d2:08:42:
69:66:4a:68:1a:cd:65:ef:0b:aa:60:b8:48:38:bd:
9e:f6:6f:31:1e:86:ef:81:f7:49:91:f9:3d:c6:09:
f0:d5:24:35:0d:13:a8:07:d2:9a:3d:a5:0d:6e:6c:
2a:6a:6a:64:0c:2b:8a:8a:d1:c9:3b:88:a6:9f:2b:
e1:a8:1f:36:18:26:7b:9d:be:5c:13:14:ff:45:00:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.132.0/22
85.187.17.0/24
91.247.180.0/24
213.232.237.0/24
IPv6:
2a0c:7740::/29
2a11:2ac0::/29
2a11:c8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57705
Signature Algorithm: sha256WithRSAEncryption
4a:29:22:06:f3:d0:30:e6:15:a6:b7:12:88:19:d7:36:0f:9c:
00:20:67:56:30:cf:63:09:e4:84:0a:a9:5f:9f:ff:ab:63:fb:
07:80:4e:b0:34:64:28:a4:2e:e8:a7:96:4a:6f:b9:14:76:ee:
ec:e2:df:0e:d3:8f:c6:03:98:8a:4c:85:d9:78:90:29:c1:88:
70:e6:29:0a:5a:9a:52:a2:e4:4f:87:b5:bf:16:97:a0:e5:2f:
eb:20:16:5c:cd:c9:a3:db:87:d2:1c:80:71:8b:8b:a7:06:0b:
cb:13:ff:2c:71:41:ef:ac:7e:4e:1c:0f:ee:fa:b2:e1:f2:94:
10:b6:6e:ad:4f:88:24:ba:96:91:b7:14:ac:94:9f:67:43:85:
d6:e9:f9:8c:74:8f:0e:99:b0:cf:7f:4a:1e:e4:dd:7d:72:eb:
25:30:d2:f3:bf:a7:25:b2:40:1d:e9:1b:ed:c0:0f:84:c5:58:
a0:52:ea:2c:88:a4:df:13:33:85:bc:19:68:c0:e6:a4:05:1c:
01:98:52:6c:2e:50:b2:05:ca:bf:6d:28:38:cb:80:7c:7e:7c:
0d:b8:c8:5c:5a:63:e8:16:b0:53:51:5f:52:21:d3:61:07:4c:
77:6e:90:5c:c1:e6:83:3c:b7:21:4a:b9:27:30:17:97:d7:ba:
72:6e:b0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:50:26 2026 by rpki-client