Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
File: rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer (raw, json)
Hash identifier: nvI+ayncvoRV1dgvxx6NGC0j2dWaD6nllLnrPPvukuw=
Subject key identifier: AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBDCC346CFC77744F7808D7CF692FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202367
IP: 194.107.136.0/22
IP: 2a07:cf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:dc:c3:46:cf:c7:77:44:f7:80:8d:7c:f6:92:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:62:76:b5:92:67:c3:e8:4a:d7:51:04:bf:
70:e6:d0:cd:02:d8:6c:21:fb:bc:2a:1d:8e:83:9f:
cf:3e:1f:af:a1:9f:98:db:c1:91:a4:84:fd:54:ee:
60:5d:c1:ff:77:d2:cc:87:63:bb:a8:b4:42:af:5a:
81:da:2f:25:a7:98:cf:21:8a:89:ec:0d:c4:32:66:
cd:7f:fb:c5:55:c2:af:75:70:d3:f3:c8:73:cc:d4:
13:56:82:14:de:71:22:e4:44:3d:42:45:be:62:59:
27:c0:d6:4e:4a:6e:ba:16:14:89:1c:79:98:99:ff:
54:26:a7:b8:ff:ce:bd:2a:56:81:c6:c0:8d:6e:46:
bf:ed:b8:28:4e:da:d9:34:fe:74:6b:8a:c1:5f:e4:
5b:95:29:4f:0b:68:95:12:b2:b3:6f:02:01:1a:5d:
45:a0:57:1e:f0:ef:90:42:6f:58:28:07:38:17:8b:
6c:8f:7f:fb:e5:f5:f8:2d:5a:5e:69:39:84:c2:0c:
cf:5f:a3:0e:a5:4c:0c:32:96:11:ce:e2:72:13:f6:
e6:c3:bb:67:5c:80:c3:84:6b:f2:e8:ec:ea:c3:b6:
10:3b:08:75:6e:65:ca:23:d8:f7:f3:2e:f5:d5:cd:
34:5b:4c:14:f2:6d:cb:73:e0:10:fe:0e:e4:54:48:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.136.0/22
IPv6:
2a07:cf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202367
Signature Algorithm: sha256WithRSAEncryption
09:df:ad:76:3b:fe:54:c0:6d:6a:c9:77:6e:72:e9:f7:90:31:
6e:33:3f:70:8a:32:60:7e:12:31:f8:08:a6:6f:74:90:99:d5:
6a:f7:9b:2b:cb:f2:55:3b:2c:61:a3:9f:15:c4:4d:3a:8f:b6:
c9:25:a8:d1:36:0f:1a:b8:cf:bf:2b:f1:12:68:ec:73:9b:b6:
3e:a4:5c:7d:3f:79:88:39:5c:78:f1:83:2e:fc:7a:f2:a3:b8:
6a:bc:03:a0:63:b1:e2:a9:0b:c7:c0:4a:48:69:43:65:2c:97:
dc:25:bc:5b:5a:ba:c9:27:cd:04:12:39:e7:05:78:d3:14:ad:
76:7d:29:11:3e:ed:bb:f4:98:34:e3:17:c4:5a:13:85:7c:50:
83:c4:f1:58:29:43:67:7e:62:97:7a:e9:03:ad:7c:c8:52:d1:
c4:63:7a:4d:7c:af:23:25:28:b2:fd:03:db:85:83:19:fc:c2:
b2:5a:46:17:c3:22:84:4d:9d:ec:7a:f7:e2:ce:3c:d2:60:6c:
8a:45:85:01:a1:47:ea:7a:71:72:c0:69:33:33:c4:6c:60:41:
3d:3d:e5:c3:6e:4b:d0:0a:68:44:5a:55:ca:a3:c1:bf:43:65:
c1:72:ff:d9:97:1c:7d:22:72:9c:ce:28:d3:49:70:cd:62:b3:
68:e7:9b:6a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+9zDRs/Hd0T3gI189pL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzE0ZDljNmRiZTRiYjMzZGQ0YzQxOWU2MzZjMGVjZjUwMDQzZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhJidrWSZ8PoStdRBL9w5tDNAths
Ifu8Kh2Og5/PPh+voZ+Y28GRpIT9VO5gXcH/d9LMh2O7qLRCr1qB2i8lp5jPIYqJ
7A3EMmbNf/vFVcKvdXDT88hzzNQTVoIU3nEi5EQ9QkW+YlknwNZOSm66FhSJHHmY
mf9UJqe4/869KlaBxsCNbka/7bgoTtrZNP50a4rBX+RblSlPC2iVErKzbwIBGl1F
oFce8O+QQm9YKAc4F4tsj3/75fX4LVpeaTmEwgzPX6MOpUwMMpYRzuJyE/bmw7tn
XIDDhGvy6Ozqw7YQOwh1bmXKI9j38y711c00W0wU8m3Lc+AQ/g7kVEiI3QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKwU2cbb5Lsz3UxBnmNsDs9QBD7YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2UxYWI1
Ny05YzI1LTRiOGYtYjU2ZS00ZjUyMTIyOTA3NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZTFhYjU3
LTljMjUtNGI4Zi1iNTZlLTRmNTIxMjI5MDc2OS8xL3JCVFp4dHZrdXpQZFRFR2VZ
MndPejFBRVB0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwmuIMA0EAgACMAcDBQMqB88AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMWfzANBgkqhkiG9w0BAQsFAAOCAQEACd+tdjv+VMBt
asl3bnLp95AxbjM/cIoyYH4SMfgIpm90kJnVavebK8vyVTssYaOfFcRNOo+2ySWo
0TYPGrjPvyvxEmjsc5u2PqRcfT95iDlcePGDLvx68qO4arwDoGOx4qkLx8BKSGlD
ZSyX3CW8W1q6ySfNBBI55wV40xStdn0pET7tu/SYNOMXxFoThXxQg8TxWClDZ35i
l3rpA618yFLRxGN6TXyvIyUosv0D24WDGfzCslpGF8MihE2d7Hr34s480mBsikWF
AaFH6npxcsBpMzPEbGBBPT3lw25L0ApoRFpVyqPBv0NlwXL/2ZccfSJynM4o00lw
zWKzaOebag==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:48 2026 by rpki-client