Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZpJ0lye-5ui0hK1d4-wqhgJOofs.cer
File: ZpJ0lye-5ui0hK1d4-wqhgJOofs.cer (raw, json)
Hash identifier: WsD7Z673Esm2AwMJvE/QpxECJt6iK/BKrqHBO6zEmgM=
Subject key identifier: 66:92:74:97:27:BE:E6:E8:B4:84:AD:5D:E3:EC:2A:86:02:4E:A1:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2FE7B7EAEBD406E9230A69B24BDBD68D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 15:26:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213279
IP: 194.62.114.0/24
IP: 2a14:b400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:e7:b7:ea:eb:d4:06:e9:23:0a:69:b2:4b:db:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 15:26:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6692749727bee6e8b484ad5de3ec2a86024ea1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:92:28:96:f8:55:94:23:7b:70:fa:27:88:
64:de:5c:85:0a:b3:39:fb:ad:8b:53:83:0f:dd:25:
77:d7:e9:d5:6a:e0:b1:42:15:f7:9c:8e:91:df:a4:
ca:27:f8:68:84:da:a6:0a:ed:00:ac:84:e9:f4:40:
5b:59:f4:23:c6:34:08:f8:12:87:54:ec:54:f3:55:
e7:e8:54:ac:ef:31:f3:9c:65:d3:c9:e6:01:10:1e:
32:ef:55:88:4e:16:45:2b:08:6c:43:45:00:85:c9:
34:1b:5d:a7:43:95:39:18:e0:a8:54:09:06:e4:08:
68:30:65:70:7f:44:d4:bf:16:2a:74:b6:9a:de:f9:
5a:0b:a6:2e:af:3d:16:d7:72:42:26:f8:6e:d8:d9:
5d:69:0d:8c:13:32:e1:aa:b0:2e:de:c4:28:59:9a:
80:35:99:29:5a:df:18:6f:45:91:fb:d1:f3:33:b3:
46:ef:57:8a:29:39:0a:51:7a:6d:44:7f:0b:8b:bd:
83:c9:c0:5d:66:43:dc:7d:35:74:d9:a8:51:f3:c6:
ea:ed:96:5b:2a:ac:b5:bd:1d:c7:ce:44:22:27:03:
ec:12:8d:ce:88:fe:7a:3c:52:0d:f8:4c:a8:04:94:
83:fe:16:8b:62:1e:42:65:52:f8:04:a2:cb:9b:fc:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:74:97:27:BE:E6:E8:B4:84:AD:5D:E3:EC:2A:86:02:4E:A1:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.114.0/24
IPv6:
2a14:b400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213279
Signature Algorithm: sha256WithRSAEncryption
9b:63:64:ae:72:56:c1:fe:fb:88:0e:18:89:4d:b7:69:6e:bc:
1a:ad:d4:cf:b4:23:c0:67:1a:15:da:5a:52:12:a6:f6:42:ce:
83:c8:31:9d:e1:20:ac:64:25:4b:a3:07:62:9a:48:0e:b5:b2:
8e:3e:66:2e:fb:08:ce:04:f1:fc:4c:01:18:33:5e:f8:0f:7f:
b3:de:1f:8e:91:d5:bf:1a:d5:b0:8a:c0:3a:bf:4d:52:45:54:
76:78:60:e8:19:b8:84:1c:1b:35:dc:58:80:a6:ff:52:e4:e6:
27:e3:cd:e2:05:46:f9:37:32:d7:bc:b9:b3:cd:5d:63:1c:ff:
40:d5:0f:26:56:d2:e6:b6:84:1b:1a:3a:1b:b4:25:e8:7c:91:
81:58:93:6a:15:ff:6c:0c:3c:62:d0:14:17:4b:fc:48:fb:69:
d6:11:5d:81:ab:d8:16:7b:79:a9:68:5a:de:8a:fb:76:0d:4d:
73:a7:ce:8a:41:cf:77:48:88:1f:ca:f1:f9:b5:f8:de:ea:70:
12:7d:aa:be:eb:7b:a0:92:e3:24:e7:b4:9c:5f:90:b7:c6:cd:
f7:79:4c:22:90:11:9d:e0:fa:21:ab:62:91:c9:3c:10:56:13:
3e:a7:48:84:03:a3:5b:f1:66:eb:c5:d5:f9:74:0e:b4:4a:1d:
70:03:6a:22
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ0v57fq69QG6SMKabJL29aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI3MTUyNjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjkyNzQ5NzI3YmVlNmU4YjQ4NGFkNWRlM2VjMmE4NjAyNGVhMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QqSKJb4VZQje3D6J4hk3lyFCrM5
+62LU4MP3SV31+nVauCxQhX3nI6R36TKJ/hohNqmCu0ArITp9EBbWfQjxjQI+BKH
VOxU81Xn6FSs7zHznGXTyeYBEB4y71WIThZFKwhsQ0UAhck0G12nQ5U5GOCoVAkG
5AhoMGVwf0TUvxYqdLaa3vlaC6Yurz0W13JCJvhu2NldaQ2MEzLhqrAu3sQoWZqA
NZkpWt8Yb0WR+9HzM7NG71eKKTkKUXptRH8Li72DycBdZkPcfTV02ahR88bq7ZZb
Kqy1vR3HzkQiJwPsEo3OiP56PFIN+EyoBJSD/haLYh5CZVL4BKLLm/wxRQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGaSdJcnvubotIStXePsKoYCTqH7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2NhOWU0
Ny01NjZmLTRlN2QtYjg1OS1iYTJlZmNjNTY1NTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvY2E5ZTQ3
LTU2NmYtNGU3ZC1iODU5LWJhMmVmY2M1NjU1OC8xL1pwSjBseWUtNXVpMGhLMWQ0
LXdxaGdKT29mcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwj5yMA0EAgACMAcDBQMqFLQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBHzANBgkqhkiG9w0BAQsFAAOCAQEAm2NkrnJWwf77
iA4YiU23aW68Gq3Uz7QjwGcaFdpaUhKm9kLOg8gxneEgrGQlS6MHYppIDrWyjj5m
LvsIzgTx/EwBGDNe+A9/s94fjpHVvxrVsIrAOr9NUkVUdnhg6Bm4hBwbNdxYgKb/
UuTmJ+PN4gVG+Tcy17y5s81dYxz/QNUPJlbS5raEGxo6G7Ql6HyRgViTahX/bAw8
YtAUF0v8SPtp1hFdgavYFnt5qWha3or7dg1Nc6fOikHPd0iIH8rx+bX43upwEn2q
vut7oJLjJOe0nF+Qt8bN93lMIpARneD6Iatikck8EFYTPqdIhAOjW/Fm68XV+XQO
tEodcANqIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:56 2026 by rpki-client