Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.cer (raw, json)
Hash identifier: W6oJQ76dEa3kwCDjdOxWObIVLUBJfI+T1BqV20H3d0k=
Subject key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E3A0EE96A7D0E59DD0255E2833561DC35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 May 2026 07:48:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.152.52.0/22
IP: 194.11.20.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:0e:e9:6a:7d:0e:59:dd:02:55:e2:83:35:61:dc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 18 07:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:05:57:49:81:6f:a6:f6:c2:e2:86:43:7d:
43:4a:fc:9f:5d:9c:9f:cd:0c:36:4e:a1:fb:dc:fc:
ac:87:59:bc:61:1b:d1:94:b3:ab:dd:6d:40:4f:3f:
36:47:63:a3:9b:f3:e7:de:f6:40:cb:2c:08:5a:1e:
64:e6:25:99:59:c6:b3:1c:d8:81:3a:c4:cd:29:54:
4e:4d:69:20:ba:80:a6:b1:90:6a:47:d9:6b:83:cf:
fb:75:49:d2:d9:64:5f:67:16:9f:70:cc:d4:16:3a:
dd:2f:72:72:92:78:84:c4:e5:fa:6e:bc:84:3b:1e:
14:c1:97:3d:37:51:b3:09:e5:b6:a1:53:c6:b1:f8:
e2:2d:c3:94:a7:86:93:5c:95:b8:16:59:d4:70:72:
06:2d:78:35:22:6a:37:30:5c:1d:45:0c:9d:15:f5:
f3:47:ac:4e:2f:d5:74:61:c4:9f:33:66:56:9f:db:
54:ac:b6:ff:ad:d1:3c:67:bb:8d:ae:cf:6d:0c:3d:
d8:ce:08:ef:a5:7f:7b:59:ff:92:4a:ae:1d:a8:18:
08:47:81:1f:cb:28:cb:fe:91:58:7d:13:fd:f7:99:
fc:eb:ab:85:59:27:f1:f2:87:55:22:2d:22:dc:79:
0b:f1:25:55:11:7a:4e:e0:9b:d0:52:8a:ac:da:e0:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.52.0/22
194.11.20.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:2c:1a:39:1b:85:04:81:a2:33:58:43:ae:41:75:27:96:cc:
fb:b9:f9:3a:c7:78:32:0a:00:b1:78:e2:ea:cb:f6:23:e0:37:
fe:7a:d7:96:7e:fd:fe:4b:83:b4:e1:dd:77:50:be:9e:c3:33:
8a:52:b2:4b:65:38:69:a1:dc:a3:37:02:39:4f:65:c7:4f:28:
a3:0e:86:52:52:9c:43:ad:f2:43:27:d0:5f:96:4c:e1:0e:15:
7f:a1:4f:bd:48:8a:cf:39:df:71:45:6b:e3:fe:6a:8d:7f:9f:
ad:2b:13:13:98:06:4d:c5:d0:8d:e5:95:98:6a:6e:d0:28:5e:
69:b8:87:94:24:02:3f:57:55:95:92:cf:7f:17:d7:4d:69:33:
ce:6a:bb:0f:78:2a:fd:18:a9:85:05:a3:7b:f8:f1:d8:8f:f1:
82:62:dd:19:b4:f5:48:8e:60:74:5e:d6:e4:21:a4:94:7f:69:
b1:a7:f7:63:d3:79:04:3c:08:8e:dd:d1:42:bd:a8:5f:1f:b0:
54:85:65:a9:e1:70:88:65:f8:58:ea:a2:0a:c1:f0:8e:a9:b3:
67:93:2d:85:29:28:d2:e1:9b:03:ae:25:4d:9c:c0:8f:d2:37:
11:3e:e3:a1:4d:cb:98:aa:2c:a4:d0:9a:ae:b3:d8:d0:c6:3e:
5b:4b:f2:a2
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZ46DulqfQ5Z3QJV4oM1Ydw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTE4MDc0ODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmNkMzU5NDY4YzhiYWE5OGZjM2NhMmVmMmQ5MDU4M2E2OWUwMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoFV0mBb6b2wuKGQ31DSvyfXZyf
zQw2TqH73Pysh1m8YRvRlLOr3W1ATz82R2Ojm/Pn3vZAyywIWh5k5iWZWcazHNiB
OsTNKVROTWkguoCmsZBqR9lrg8/7dUnS2WRfZxafcMzUFjrdL3JykniExOX6bryE
Ox4UwZc9N1GzCeW2oVPGsfjiLcOUp4aTXJW4FlnUcHIGLXg1Imo3MFwdRQydFfXz
R6xOL9V0YcSfM2ZWn9tUrLb/rdE8Z7uNrs9tDD3YzgjvpX97Wf+SSq4dqBgIR4Ef
yyjL/pFYfRP995n866uFWSfx8odVIi0i3HkL8SVVEXpO4JvQUoqs2uA+7QIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFGbNNZRoyLqpj8PKLvLZBYOmngAWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzczNzBj
NC1lNGNkLTRkYjMtOWI4Ni1lMzU5YWUwYTY4MzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNzM3MGM0
LWU0Y2QtNGRiMy05Yjg2LWUzNTlhZTBhNjgzOC8xL1pzMDFsR2pJdXFtUHc4b3U4
dGtGZzZhZUFCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCuZg0AwQBwgsUMA0GCSqGSIb3DQEBCwUAA4IB
AQCeLBo5G4UEgaIzWEOuQXUnlsz7ufk6x3gyCgCxeOLqy/Yj4Df+eteWfv3+S4O0
4d13UL6ewzOKUrJLZThpodyjNwI5T2XHTyijDoZSUpxDrfJDJ9BflkzhDhV/oU+9
SIrPOd9xRWvj/mqNf5+tKxMTmAZNxdCN5ZWYam7QKF5puIeUJAI/V1WVks9/F9dN
aTPOarsPeCr9GKmFBaN7+PHYj/GCYt0ZtPVIjmB0XtbkIaSUf2mxp/dj03kEPAiO
3dFCvahfH7BUhWWp4XCIZfhY6qIKwfCOqbNnky2FKSjS4ZsDriVNnMCP0jcRPuOh
TcuYqiyk0Jqus9jQxj5bS/Ki
-----END CERTIFICATE-----
Generated at Tue Jun 16 08:26:05 2026 by rpki-client