Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
File:                     tEoCLTL71XRRhunCgtrO8p5G_80.cer (raw, json)
Hash identifier:          Tb5tW9Toy9kDRKm9L2/Ha5M9OLubCT5qayHaLIeUSp8=
Subject key identifier:   B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18FB508E1B40C8CC984EF9DF28875FF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:42:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 29533
                          AS: 35701
                          IP: 192.109.204.0/24
                          IP: 194.146.121.0/24
                          IP: 195.234.45.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:fb:50:8e:1b:40:c8:cc:98:4e:f9:df:28:87:5f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:42:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:fa:67:73:67:bb:a6:c1:53:f6:9e:ca:82:
                    a9:0b:43:7b:07:16:b0:01:05:3b:fa:98:d9:bd:b8:
                    d3:86:a9:54:78:3d:c6:55:fb:a8:05:77:29:39:ce:
                    27:44:05:df:ca:6f:31:47:4e:fb:4a:35:d3:02:95:
                    be:1c:52:49:da:fc:99:6e:40:65:60:ea:d5:a5:14:
                    3e:db:ab:79:5e:d9:f9:ed:a6:f3:1a:50:dc:be:4b:
                    23:74:52:7a:0d:00:4e:47:e8:b1:d2:4a:c5:1a:51:
                    bb:02:ab:31:4a:49:50:8e:c4:9d:d9:4c:66:08:b0:
                    01:89:a3:88:0a:38:3e:5e:d8:9e:7c:8c:cd:1a:10:
                    d3:fb:4e:cd:a3:d0:e9:40:ff:44:1b:75:c0:06:43:
                    56:75:01:77:26:d4:f3:d5:ec:45:20:ef:0e:01:ba:
                    76:f8:27:55:49:5d:f8:7b:d4:77:5f:69:eb:1a:33:
                    b8:65:4e:0a:05:62:9d:19:91:be:24:63:8d:12:95:
                    29:36:75:71:7b:2e:de:ee:45:b0:44:a4:2d:5c:6a:
                    8a:3a:5e:11:95:61:6b:5c:ce:12:cd:ec:71:e5:bc:
                    33:0a:62:3a:fe:8f:6c:19:3d:54:a6:8b:44:fe:17:
                    56:c4:1c:7c:ae:41:11:3e:c2:c6:60:2b:b8:de:d1:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.204.0/24
                  194.146.121.0/24
                  195.234.45.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29533
                  35701

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:a1:ed:c9:d7:79:87:02:54:71:46:51:fb:89:3f:44:03:
         14:8b:1c:44:82:ab:d4:38:32:63:ec:5a:d2:90:39:25:42:b2:
         f6:41:e4:41:6c:b4:fa:b9:9f:fd:06:cd:8e:ed:5f:0c:43:4e:
         61:85:1f:d9:1f:9f:4e:6b:0e:40:69:4d:eb:08:98:bd:49:fc:
         dd:f8:34:3d:7f:c9:51:98:3f:9b:df:51:27:05:ce:fa:21:b7:
         08:1f:57:c8:27:f9:1f:41:85:d1:4c:2a:1f:b7:24:23:18:9b:
         1c:f3:12:c6:ef:14:01:ab:44:88:e2:3e:2d:5e:e3:d9:1d:ed:
         b1:b8:28:6c:ef:bb:a6:d9:3b:e2:5a:73:cd:d5:7c:31:3b:2e:
         0e:b6:d6:43:95:6e:d3:8f:ea:e2:66:23:cf:d6:b8:aa:da:dd:
         2e:e5:15:1e:56:cf:6b:c4:02:58:ac:d3:f6:3e:67:2d:25:54:
         9d:55:74:81:49:ed:eb:f5:1f:04:16:af:aa:b8:fd:94:de:56:
         f5:f7:08:d9:8f:6a:da:2b:2e:1a:da:84:d7:a8:87:2f:b9:d7:
         2c:ea:de:ef:eb:84:72:1c:b3:f5:35:c1:66:5d:08:59:68:04:
         49:8f:20:c0:bc:3d:15:ac:b1:76:5c:9c:9b:55:de:0a:07:45:
         16:e5:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:43 2026 by rpki-client