Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
File: lEethLhLrsR9ViHi91Yj8-rxOWA.cer (raw, json)
Hash identifier: I/iYsBLY3PvNI4Uou8splXrXl5AWZxiQpMVpi3esOsg=
Subject key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E871DB0CD57F5B48462C5C78B6FC0B67F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 06:55:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213518
IP: 79.170.96.0/22
IP: 91.220.16.0/24
IP: 2a14:d300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:1d:b0:cd:57:f5:b4:84:62:c5:c7:8b:6f:c0:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 06:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:27:f7:75:bb:28:56:bd:53:05:8a:22:2c:
77:24:5d:b7:54:d5:1e:d9:ee:b0:84:e8:b6:f5:58:
2e:be:bb:35:52:c4:99:e7:48:20:be:8d:a9:e7:cd:
4f:dc:49:0f:67:73:72:dc:07:92:28:1b:50:32:de:
ee:45:1e:e5:14:ea:b5:a2:8f:68:f9:2d:2a:c7:b5:
5f:ee:3f:57:12:0a:fe:53:71:fb:74:d9:73:db:48:
fb:14:19:17:13:34:59:e8:78:cd:54:24:65:9e:46:
05:60:f4:ff:18:fa:f3:52:75:8e:ba:3c:a5:1e:e4:
45:13:d6:0c:02:f3:9a:08:80:c4:1a:07:5c:1e:63:
0d:b2:48:f3:eb:a7:60:e0:12:1c:df:29:18:07:8f:
34:05:aa:73:c8:fb:9b:8d:07:6d:b1:7d:0e:23:4d:
69:1b:07:6a:4d:48:e5:ce:ee:28:85:a9:bb:27:52:
29:46:34:3c:e7:2f:c2:0b:ba:6c:7d:9d:19:4c:3b:
5e:ea:20:7d:2e:fc:6b:ad:3f:d4:c6:bb:8c:62:45:
64:c6:ec:c0:46:5a:c3:32:d2:3d:ef:50:2b:3a:2f:
71:36:a5:8a:05:93:7d:af:22:ac:cc:89:38:c7:59:
1d:60:fc:79:e6:e8:d4:a1:72:21:11:5b:49:25:87:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.96.0/22
91.220.16.0/24
IPv6:
2a14:d300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213518
Signature Algorithm: sha256WithRSAEncryption
44:d8:53:75:aa:8b:49:2b:d1:48:0f:ec:d2:f1:0a:2c:6c:6f:
af:a5:3a:1e:de:73:97:7d:50:ea:00:f1:02:60:8c:be:87:0e:
0a:e8:b4:59:8a:58:b2:fa:d2:98:11:9b:37:b8:58:93:71:51:
a7:20:18:e3:43:4f:b4:42:5c:43:8b:e9:d2:11:6f:49:43:c1:
31:5a:3f:d1:8b:ed:b4:95:0d:9c:c6:b6:60:82:d4:c4:3c:37:
c1:df:40:e7:27:9f:70:2e:bc:21:ce:8f:23:42:37:c2:cd:21:
71:fa:2c:8d:5f:9f:25:88:de:17:ba:4e:86:3f:7f:7d:59:d6:
38:3f:e3:1a:06:25:fb:7b:be:28:bd:f0:bb:af:f4:3a:2d:c6:
1e:de:bf:ec:fc:50:38:fb:ba:96:28:4d:19:ed:e5:b7:04:12:
95:bb:11:04:26:c3:80:1d:a4:a7:0a:f7:82:14:45:94:f5:f4:
94:9e:4b:57:4e:11:77:d9:b2:3f:31:ba:9d:a9:d6:c9:c4:83:
47:92:cf:5b:de:00:64:e9:5d:3b:c9:b5:6e:5a:5c:d2:43:4a:
67:72:75:35:8c:f1:e0:e2:48:60:db:81:19:d7:4e:e6:b2:c0:
8b:12:bc:31:b8:c1:a7:58:76:5d:b0:18:e5:46:77:0a:e3:a8:
04:03:76:9d
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ6HHbDNV/W0hGLFx4tvwLZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjAyMDY1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQ3YWQ4NGI4NGJhZWM0N2Q1NjIxZTJmNzU2MjNmM2VhZjEzOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka0n93W7KFa9UwWKIix3JF23VNUe
2e6whOi29Vguvrs1UsSZ50ggvo2p581P3EkPZ3Ny3AeSKBtQMt7uRR7lFOq1oo9o
+S0qx7Vf7j9XEgr+U3H7dNlz20j7FBkXEzRZ6HjNVCRlnkYFYPT/GPrzUnWOujyl
HuRFE9YMAvOaCIDEGgdcHmMNskjz66dg4BIc3ykYB480BapzyPubjQdtsX0OI01p
GwdqTUjlzu4oham7J1IpRjQ85y/CC7psfZ0ZTDte6iB9LvxrrT/UxruMYkVkxuzA
RlrDMtI971ArOi9xNqWKBZN9ryKszIk4x1kdYPx55ujUoXIhEVtJJYdViQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFJRHrYS4S67EfVYh4vdWI/Pq8TlgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzIzOGM1
Ni1jMjVlLTRmZDYtYjkxNi01YjMxOGMzNDk5ZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMjM4YzU2
LWMyNWUtNGZkNi1iOTE2LTViMzE4YzM0OTlmYi8xL2xFZXRoTGhMcnNSOVZpSGk5
MVlqOC1yeE9XQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCT6pgAwQAW9wQMA0EAgACMAcDBQMqFNMAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCDjANBgkqhkiG9w0BAQsFAAOCAQEARNhT
daqLSSvRSA/s0vEKLGxvr6U6Ht5zl31Q6gDxAmCMvocOCui0WYpYsvrSmBGbN7hY
k3FRpyAY40NPtEJcQ4vp0hFvSUPBMVo/0YvttJUNnMa2YILUxDw3wd9A5yefcC68
Ic6PI0I3ws0hcfosjV+fJYjeF7pOhj9/fVnWOD/jGgYl+3u+KL3wu6/0Oi3GHt6/
7PxQOPu6lihNGe3ltwQSlbsRBCbDgB2kpwr3ghRFlPX0lJ5LV04Rd9myPzG6nanW
ycSDR5LPW94AZOldO8m1blpc0kNKZ3J1NYzx4OJIYNuBGddO5rLAixK8MbjBp1h2
XbAY5UZ3CuOoBAN2nQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:01 2026 by rpki-client