Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
File: sAm-idR1R1b5z954-sGjYnrAyBc.cer (raw, json)
Hash identifier: QXdfuVdCwjwXmF3VmgS7RcWn50LaLReZXuykIatQ+/g=
Subject key identifier: B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9A2DE765FC351984F76C3E16233F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.201.221.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:a2:de:76:5f:c3:51:98:4f:76:c3:e1:62:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:27:d8:b1:31:e3:86:3f:5b:32:55:dd:92:
3f:d5:63:f9:9a:64:3a:2d:5e:3d:c7:40:ac:f0:10:
6d:93:8b:af:ca:f4:29:6a:39:3c:9c:40:3c:43:0c:
73:75:37:51:26:41:dc:a1:18:1b:43:b6:45:ee:28:
52:4d:e6:58:80:b4:4f:32:2a:2e:d3:eb:8a:77:8a:
aa:0b:b6:b9:78:57:75:a8:e1:9d:4a:ed:7d:4f:db:
8a:14:d8:25:ee:5f:32:a1:6e:b1:8e:bc:8e:e0:31:
98:9b:9b:ce:c2:a7:6f:a2:7b:b1:97:7a:af:ea:ab:
b5:5c:d1:04:af:d1:6d:82:22:87:2a:06:da:09:18:
97:e4:f0:74:46:9b:7f:ef:84:3e:a2:ec:84:e6:e6:
35:a7:85:3a:b2:15:bf:18:e1:6e:ca:bd:9f:c9:40:
58:4f:75:77:53:b2:84:ab:73:07:22:6d:e6:00:12:
a6:c3:f7:a1:8b:a6:c2:2b:4a:ae:c6:c8:5b:f0:41:
f4:c8:6c:c3:8d:23:60:cf:86:93:b7:01:5c:6c:c3:
47:ea:41:06:a0:ce:c1:eb:cd:d9:70:e4:ed:6f:66:
4c:84:9e:b7:96:ca:c1:2e:fa:3a:49:4e:dd:ca:4f:
ec:92:88:24:ed:52:29:5c:47:38:1b:d2:05:79:b5:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:67:6f:56:0c:8d:d0:be:34:1f:40:ef:97:25:66:c5:54:ed:
44:92:e3:e2:8e:6f:05:ba:55:1f:50:97:32:39:78:20:c2:f5:
04:71:bf:27:b7:81:ab:66:65:0a:c4:b3:b8:f1:18:16:08:4e:
cc:00:47:d0:af:55:47:8f:9e:85:f2:74:9e:d1:70:6b:37:bc:
65:df:ac:ba:3f:70:11:ec:1e:b6:14:e6:cd:aa:cc:64:87:7e:
bc:ae:70:12:2f:04:d0:95:9a:e0:81:51:bc:d8:93:bb:ab:2e:
a8:ae:0b:08:16:1c:50:9d:f8:92:fe:04:8d:08:fd:53:2b:81:
ca:ef:b5:d0:9c:2c:1d:a7:b3:4f:93:d2:04:08:da:9f:8b:13:
e4:be:d7:c7:4b:45:bd:5f:d9:3c:24:af:7c:30:83:fd:b3:88:
93:3c:27:34:77:9a:01:42:ee:93:88:f5:85:f7:2e:a6:ca:71:
2e:6f:40:2a:85:87:44:3c:0e:ec:bc:eb:88:3e:99:fe:85:b8:
c7:4e:2d:61:40:28:d6:76:60:bd:d7:40:2d:eb:13:46:d7:16:
9e:f3:70:9e:e0:97:b1:53:1b:3f:11:f2:0c:0b:67:61:af:b7:
f1:46:78:23:33:6d:6d:5d:1b:9d:a3:79:a6:4a:04:c4:60:92:
03:b4:24:51
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+aLedl/DUZhPdsPhYjP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDA5YmU4OWQ0NzU0NzU2ZjljZmRlNzhmYWMxYTM2MjdhYzBjODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wsn2LEx44Y/WzJV3ZI/1WP5mmQ6
LV49x0Cs8BBtk4uvyvQpajk8nEA8QwxzdTdRJkHcoRgbQ7ZF7ihSTeZYgLRPMiou
0+uKd4qqC7a5eFd1qOGdSu19T9uKFNgl7l8yoW6xjryO4DGYm5vOwqdvonuxl3qv
6qu1XNEEr9FtgiKHKgbaCRiX5PB0Rpt/74Q+ouyE5uY1p4U6shW/GOFuyr2fyUBY
T3V3U7KEq3MHIm3mABKmw/ehi6bCK0quxshb8EH0yGzDjSNgz4aTtwFcbMNH6kEG
oM7B683ZcOTtb2ZMhJ63lsrBLvo6SU7dyk/skogk7VIpXEc4G9IFebXyzQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLAJvonUdUdW+c/eePrBo2J6wMgXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2QwMzJk
ZS03YjQyLTQyNTMtOTA3NC0xOTViMjAyNGFiZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZDAzMmRl
LTdiNDItNDI1My05MDc0LTE5NWIyMDI0YWJlZS8xL3NBbS1pZFIxUjFiNXo5NTQt
c0dqWW5yQXlCYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAucndMA0GCSqGSIb3DQEBCwUAA4IBAQCuZ29W
DI3QvjQfQO+XJWbFVO1EkuPijm8FulUfUJcyOXggwvUEcb8nt4GrZmUKxLO48RgW
CE7MAEfQr1VHj56F8nSe0XBrN7xl36y6P3AR7B62FObNqsxkh368rnASLwTQlZrg
gVG82JO7qy6orgsIFhxQnfiS/gSNCP1TK4HK77XQnCwdp7NPk9IECNqfixPkvtfH
S0W9X9k8JK98MIP9s4iTPCc0d5oBQu6TiPWF9y6mynEub0AqhYdEPA7svOuIPpn+
hbjHTi1hQCjWdmC910At6xNG1xae83Ce4JexUxs/EfIMC2dhr7fxRngjM21tXRud
o3mmSgTEYJIDtCRR
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:02:25 2026 by rpki-client