Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
File: d27ATX5nmIYhbQe8cijbUo88hv0.cer (raw, json)
Hash identifier: RG+XpCvakHc3wopBFXsFojFckTQK0g8++rCdrW43Kzw=
Subject key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DBB26EB65AA3A5B99EE88C23193EB45F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Apr 2026 16:23:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.210.154.0/24
IP: 185.84.30.0/23
IP: 2a04:e100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:26:eb:65:aa:3a:5b:99:ee:88:c2:31:93:eb:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 16:23:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:79:91:7e:e9:63:ff:de:03:b0:f0:c5:41:
f0:4a:d8:e5:7d:8c:26:a7:51:10:48:9a:e8:74:cf:
89:2e:76:f9:02:d1:ac:47:85:69:21:ff:bd:f2:1d:
33:a5:3c:80:d6:4d:c8:5b:7b:df:60:3c:b1:a5:08:
f8:a6:54:73:68:95:e8:61:23:a4:4a:fb:3f:cc:a9:
f6:e9:b2:7e:ae:4a:ab:51:56:4b:88:1a:3e:c1:9b:
0a:b8:1a:43:d4:c9:fa:94:db:f4:bb:ba:c6:e2:52:
da:54:a0:74:2e:44:b1:71:96:45:2f:4e:36:59:08:
49:f7:96:4a:8e:94:f1:7d:af:f4:a1:d0:91:45:f0:
25:c7:d2:52:80:fa:95:70:6d:5f:ee:d4:ae:12:ee:
78:6d:93:83:1e:da:65:85:c6:ab:9f:b6:94:13:07:
82:36:0e:96:8c:46:33:16:ca:b0:bd:7f:12:e2:df:
8c:47:bb:c3:da:9d:fc:64:49:06:fe:0a:d3:ae:79:
2b:09:99:5d:5b:76:ef:17:d2:5d:46:ad:60:60:49:
92:00:11:9f:e3:6b:90:d3:3a:dc:f1:d3:2e:72:82:
b6:57:92:db:88:a9:7c:ac:8d:af:38:a1:20:49:53:
52:17:e4:3f:c8:dc:b4:f9:68:9b:ab:03:ca:c0:9c:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.154.0/24
185.84.30.0/23
IPv6:
2a04:e100::/29
Signature Algorithm: sha256WithRSAEncryption
6a:f6:6c:f3:ef:55:0b:e9:16:9b:d0:de:d9:b2:4f:29:11:ab:
a4:d9:d0:33:37:07:49:03:7a:00:b9:8e:04:f4:65:a0:cf:ff:
90:a9:f2:96:61:a4:b1:19:c2:fe:c3:cd:0a:a3:df:75:7e:a6:
1a:ec:11:aa:c8:47:3a:b9:7f:ce:39:eb:5e:ac:5d:22:12:ad:
b0:74:6e:c8:80:8b:bd:91:be:30:06:d4:a6:9b:1f:e1:8b:a0:
dc:84:fe:a1:93:88:ee:95:10:6d:6f:96:b4:21:c0:00:f1:97:
4b:f9:03:62:59:8f:94:1c:84:a0:2b:6c:fc:ec:9b:6a:a1:74:
28:4e:ce:02:0c:d9:f3:6f:ca:d6:43:d6:ab:7f:c6:28:c9:16:
13:50:e6:15:27:77:5f:f0:b7:88:36:24:11:7c:42:0c:e6:62:
5e:b9:21:df:30:5b:e3:84:3a:73:19:b9:5b:81:dc:d6:21:16:
da:a2:81:ec:0e:fe:5a:41:fe:a5:54:cd:12:fb:cc:80:de:64:
b6:c0:8a:60:bf:76:b3:dd:c5:c7:71:ce:da:96:7e:a4:b5:81:
f6:3c:b6:b0:f2:70:6b:44:aa:19:9b:e4:f6:c0:e5:c5:fc:b7:
31:cc:12:a3:dc:55:16:cf:af:1c:2a:84:2e:57:e8:06:12:7c:
6c:6b:13:63
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZ27Jutlqjpbme6IwjGT60XwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDIzMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzZlYzA0ZDdlNjc5ODg2MjE2ZDA3YmM3MjI4ZGI1MjhmM2M4NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4p5kX7pY//eA7DwxUHwStjlfYwm
p1EQSJrodM+JLnb5AtGsR4VpIf+98h0zpTyA1k3IW3vfYDyxpQj4plRzaJXoYSOk
Svs/zKn26bJ+rkqrUVZLiBo+wZsKuBpD1Mn6lNv0u7rG4lLaVKB0LkSxcZZFL042
WQhJ95ZKjpTxfa/0odCRRfAlx9JSgPqVcG1f7tSuEu54bZODHtplhcarn7aUEweC
Ng6WjEYzFsqwvX8S4t+MR7vD2p38ZEkG/grTrnkrCZldW3bvF9JdRq1gYEmSABGf
42uQ0zrc8dMucoK2V5LbiKl8rI2vOKEgSVNSF+Q/yNy0+WibqwPKwJxCSQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFHduwE1+Z5iGIW0HvHIo21KPPIb9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzJmODI4
Mi02YzU0LTQwMTgtOTNiMS00OTNhZjFjYmJlMGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvMmY4Mjgy
LTZjNTQtNDAxOC05M2IxLTQ5M2FmMWNiYmUwYy8xL2QyN0FUWDVubUlZaGJRZThj
aWpiVW84OGh2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW9KaAwQBuVQeMA0EAgACMAcDBQMqBOEAMA0G
CSqGSIb3DQEBCwUAA4IBAQBq9mzz71UL6Rab0N7Zsk8pEauk2dAzNwdJA3oAuY4E
9GWgz/+QqfKWYaSxGcL+w80Ko991fqYa7BGqyEc6uX/OOeterF0iEq2wdG7IgIu9
kb4wBtSmmx/hi6DchP6hk4julRBtb5a0IcAA8ZdL+QNiWY+UHISgK2z87JtqoXQo
Ts4CDNnzb8rWQ9arf8YoyRYTUOYVJ3df8LeINiQRfEIM5mJeuSHfMFvjhDpzGblb
gdzWIRbaooHsDv5aQf6lVM0S+8yA3mS2wIpgv3az3cXHcc7aln6ktYH2PLaw8nBr
RKoZm+T2wOXF/LcxzBKj3FUWz68cKoQuV+gGEnxsaxNj
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:23:36 2026 by rpki-client