Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
File:                     tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer (raw, json)
Hash identifier:          YP0Jl+en7+vEFeMaFCQaWBX8a+0haHqXvXboiRi/ZvI=
Subject key identifier:   B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A0D863F34C4061C05302E46395FB006287
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
caRepository:             rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
Notify URL:               https://rpki-rrdp.warpnet.xyz/notification.xml
Certificate not before:   Fri 25 Sep 2026 11:47:04 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 38168
                          AS: 199918
                          IP: 130.78.8.0 -- 130.78.31.255
                          IP: 164.138.200.0/24
                          IP: 196.1.104.0/24
                          IP: 2001:67c:34::/48
                          IP: 2a04:5a80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:63:f3:4c:40:61:c0:53:02:e4:63:95:fb:00:62:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 25 11:47:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:06:49:97:b8:e4:e8:60:32:3a:ce:ae:c8:
                    ea:c8:b3:2e:ed:d6:14:ff:4a:f3:3e:6e:fd:c7:5c:
                    d6:e2:c0:6f:67:6f:89:14:a3:65:46:5c:b8:51:66:
                    6b:b5:97:1e:aa:e6:2f:3e:fb:0c:48:d8:ac:54:fe:
                    6d:6c:4d:ab:00:90:68:3b:5b:02:bc:50:07:7c:2e:
                    be:6c:b3:4e:5e:64:b3:e9:36:54:45:ea:43:bc:13:
                    59:05:27:d3:93:ab:aa:36:c5:76:8c:f8:b8:66:ce:
                    80:5f:63:ce:f2:a2:0a:21:35:20:59:39:de:36:0c:
                    b8:d9:42:15:a0:3d:f8:f3:1a:16:1c:43:23:1c:e0:
                    a1:70:27:5d:d3:4a:57:f7:ce:41:b5:72:33:68:7d:
                    ca:40:37:36:5d:3c:47:04:ea:73:e5:83:cd:83:4f:
                    3e:8f:50:f8:60:51:42:6c:5b:45:ef:aa:58:e9:76:
                    eb:df:3f:2f:c7:2d:8b:93:ff:31:d0:4b:bb:21:b7:
                    23:d6:f1:79:b0:7c:1e:c9:5f:c2:ae:9b:53:8c:ee:
                    33:5b:93:44:79:3c:ca:66:76:8e:27:6e:ac:34:61:
                    a7:7e:f1:24:67:1e:5c:c1:d1:03:5b:a5:c8:92:01:
                    27:f8:71:93:e0:32:0e:66:af:51:a1:e8:72:ac:be:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
                RPKI Manifest - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                RPKI Notify - URI:https://rpki-rrdp.warpnet.xyz/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.8.0-130.78.31.255
                  164.138.200.0/24
                  196.1.104.0/24
                IPv6:
                  2001:67c:34::/48
                  2a04:5a80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38168
                  199918

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:af:a8:5d:28:82:b8:7a:36:5b:e6:9f:90:f8:1f:1e:c3:
         0a:7d:ec:25:6f:6d:1c:8a:52:d3:3c:1d:5f:d3:ef:b2:8e:6e:
         a1:32:6e:50:49:c6:e6:f2:03:e3:05:a1:f2:67:d0:56:e6:d4:
         e9:40:d7:d0:a5:12:ee:a6:19:41:6a:36:84:12:03:73:57:f9:
         43:76:6f:7f:c8:1c:f3:38:b4:21:f0:f0:f4:4b:96:55:b3:57:
         76:c5:e2:de:c3:83:7c:bb:d8:6d:d2:ba:6a:b4:0b:ed:be:9a:
         bc:3d:4e:31:6d:66:9a:b3:fb:19:b8:5b:2c:18:73:2b:c9:be:
         11:1a:cc:93:5d:60:33:60:b4:84:72:5b:cc:0f:0a:36:9b:e5:
         a0:b6:a2:24:9f:36:a4:e2:d1:2b:0e:9f:2f:c7:f5:0d:75:98:
         1d:9c:ca:c0:28:c6:e9:14:5f:8d:ce:16:24:b7:96:be:1e:fa:
         62:fb:67:59:b1:fb:b7:f1:ea:a8:f4:52:16:25:24:16:5d:0f:
         11:9b:11:5a:7b:5c:9d:1e:f8:6b:13:a5:f1:f7:43:b8:cf:0b:
         50:45:5a:4e:0b:49:4a:74:e0:70:62:f7:f6:64:60:a1:90:cb:
         4d:a9:a0:e9:13:91:f3:34:4c:b3:60:53:14:a3:9d:0b:ac:77:
         d9:84:f4:e6
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAaDYY/NMQGHAUwLkY5X7AGKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTI1MTE0NzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGI3NGVkOTQxODNjYzA2YTM1Yzk1YzViNzA5NmI3YzBlZjA0OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTMGSZe45OhgMjrOrsjqyLMu7dYU
/0rzPm79x1zW4sBvZ2+JFKNlRly4UWZrtZcequYvPvsMSNisVP5tbE2rAJBoO1sC
vFAHfC6+bLNOXmSz6TZURepDvBNZBSfTk6uqNsV2jPi4Zs6AX2PO8qIKITUgWTne
Ngy42UIVoD348xoWHEMjHOChcCdd00pX985BtXIzaH3KQDc2XTxHBOpz5YPNg08+
j1D4YFFCbFtF76pY6Xbr3z8vxy2Lk/8x0Eu7Ibcj1vF5sHweyV/CrptTjO4zW5NE
eTzKZnaOJ26sNGGnfvEkZx5cwdEDW6XIkgEn+HGT4DIOZq9RoehyrL6y5QIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFLS3TtlBg8wGo1yVxbcJa3wO8ElEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgfAGCCsGAQUFBwELBIHjMIHgMDoGCCsGAQUFBzAFhi5yc3lu
YzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJwbmV0LzAvMGYGCCsG
AQUFBzAKhlpyc3luYzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJw
bmV0LzAvQjRCNzRFRDk0MTgzQ0MwNkEzNUM5NUM1QjcwOTZCN0MwRUYwNDk0NC5t
ZnQwOgYIKwYBBQUHMA2GLmh0dHBzOi8vcnBraS1ycmRwLndhcnBuZXQueHl6L25v
dGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZW
M2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcB
Af8EPDA6MCAEAgABMBowDAMEA4JOCAMEBYJOAAMEAKSKyAMEAMQBaDAWBAIAAjAQ
AwcAIAEGfAA0AwUDKgRagDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAlRgCAwMM
7jANBgkqhkiG9w0BAQsFAAOCAQEATkWvqF0ogrh6Nlvmn5D4Hx7DCn3sJW9tHIpS
0zwdX9Pvso5uoTJuUEnG5vID4wWh8mfQVubU6UDX0KUS7qYZQWo2hBIDc1f5Q3Zv
f8gc8zi0IfDw9EuWVbNXdsXi3sODfLvYbdK6arQL7b6avD1OMW1mmrP7GbhbLBhz
K8m+ERrMk11gM2C0hHJbzA8KNpvloLaiJJ82pOLRKw6fL8f1DXWYHZzKwCjG6RRf
jc4WJLeWvh76YvtnWbH7t/HqqPRSFiUkFl0PEZsRWntcnR74axOl8fdDuM8LUEVa
TgtJSnTgcGL39mRgoZDLTamg6ROR8zRMs2BTFKOdC6x32YT05g==
-----END CERTIFICATE-----
Generated at Mon Oct 19 13:12:09 2026 by rpki-client