Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xB3lN1MIdK8RrnzS4vYY2msNjvo.cer
File: xB3lN1MIdK8RrnzS4vYY2msNjvo.cer (raw, json)
Hash identifier: tIAjzzFnjikbfjmUWQZuuNpGq97VEOF8TmbIZECoZNE=
Subject key identifier: C4:1D:E5:37:53:08:74:AF:11:AE:7C:D2:E2:F6:18:DA:6B:0D:8E:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2E40EF56789BDB6C312256000A818259
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 07:45:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204486
IP: 194.187.32.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:40:ef:56:78:9b:db:6c:31:22:56:00:0a:81:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 07:45:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c41de537530874af11ae7cd2e2f618da6b0d8efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:ca:c0:ab:09:9e:01:df:53:a7:51:d4:c4:
96:63:64:3f:b9:55:91:d0:81:6b:d3:24:b6:9a:55:
2e:69:dc:83:79:12:a6:27:60:5f:a7:36:ed:f9:36:
59:34:95:18:34:16:3d:2b:fc:bb:24:fa:10:36:46:
17:d5:6e:59:6a:c5:c8:12:ed:61:c7:37:e0:97:9b:
4d:1a:3b:1b:0f:43:2a:f8:7c:a7:3f:7a:14:1c:f6:
88:8e:57:27:fd:30:e5:7d:98:a2:17:f0:2c:0b:a4:
91:a7:c4:8a:e3:26:0b:37:2a:69:6e:56:bc:f0:ef:
df:0d:8e:38:2c:48:79:3a:59:ab:aa:0d:88:96:65:
40:62:26:27:83:98:23:6e:42:84:e3:69:71:39:0e:
b9:4a:88:df:3b:05:a1:58:4a:c1:30:fb:b4:f0:33:
7c:d4:3e:b3:7b:75:27:1b:c2:e2:5f:5d:87:7c:26:
13:62:d0:b6:ad:72:17:9e:5f:82:8d:42:69:bb:f8:
08:89:14:53:91:c7:bb:55:14:16:39:98:6c:f0:8c:
55:91:89:df:9a:75:e5:d2:48:d7:08:e2:00:99:fc:
8b:fc:9e:47:05:2b:f9:6c:39:a3:6c:8b:f2:45:bd:
b7:ab:d2:1c:4f:ef:71:4a:3b:ba:fa:70:af:10:ed:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:E5:37:53:08:74:AF:11:AE:7C:D2:E2:F6:18:DA:6B:0D:8E:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/21aac6-c9b8-4e86-a578-926d5342cddf/1/xB3lN1MIdK8RrnzS4vYY2msNjvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.32.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204486
Signature Algorithm: sha256WithRSAEncryption
51:50:e8:ce:50:b7:d8:36:8d:f5:36:1c:70:ac:66:02:3a:ed:
4f:7c:37:7e:f6:39:af:68:96:ab:2a:1c:4c:26:bc:b2:82:22:
47:f7:30:2f:6f:b2:68:d7:be:b5:d5:c3:9b:44:09:fd:70:80:
41:d2:60:61:ac:96:f2:79:08:29:9e:09:3e:f4:bf:6f:c0:bc:
5a:ca:79:e0:d9:48:64:6f:9a:f3:44:d1:d2:2d:7e:5d:7a:26:
da:32:dd:35:d4:e0:09:7c:1b:65:8a:ed:18:5e:ff:f0:09:e6:
4d:fb:88:04:13:2f:9b:27:19:ef:07:dc:b7:0e:d7:2d:6e:e4:
b8:42:4b:2b:11:07:52:81:13:e3:4b:c6:be:59:d3:dc:54:d8:
48:3c:40:64:e1:f0:7e:df:43:f1:66:f3:a1:0e:82:89:b5:33:
1c:c4:b7:00:cb:a2:9c:6b:12:88:6a:b5:6d:dc:3d:82:f4:24:
de:1d:7a:da:be:f0:f1:f0:9a:4a:a2:c0:6e:84:4d:68:51:08:
78:9b:55:3d:36:07:1b:93:0a:8c:1f:0f:04:e8:0d:3f:14:92:
d5:84:fa:a5:0e:f2:e8:c9:9d:27:47:15:f9:d5:9e:a6:10:cf:
42:7c:52:34:89:28:a6:57:bf:35:6c:2e:b5:7d:cd:87:02:f1:
d1:bc:13:f0
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ0uQO9WeJvbbDEiVgAKgYJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI3MDc0NTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDFkZTUzNzUzMDg3NGFmMTFhZTdjZDJlMmY2MThkYTZiMGQ4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KbKwKsJngHfU6dR1MSWY2Q/uVWR
0IFr0yS2mlUuadyDeRKmJ2Bfpzbt+TZZNJUYNBY9K/y7JPoQNkYX1W5ZasXIEu1h
xzfgl5tNGjsbD0Mq+HynP3oUHPaIjlcn/TDlfZiiF/AsC6SRp8SK4yYLNyppbla8
8O/fDY44LEh5Olmrqg2IlmVAYiYng5gjbkKE42lxOQ65SojfOwWhWErBMPu08DN8
1D6ze3UnG8LiX12HfCYTYtC2rXIXnl+CjUJpu/gIiRRTkce7VRQWOZhs8IxVkYnf
mnXl0kjXCOIAmfyL/J5HBSv5bDmjbIvyRb23q9IcT+9xSju6+nCvEO2hNwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMQd5TdTCHSvEa580uL2GNprDY76MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzIxYWFj
Ni1jOWI4LTRlODYtYTU3OC05MjZkNTM0MmNkZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMjFhYWM2
LWM5YjgtNGU4Ni1hNTc4LTkyNmQ1MzQyY2RkZi8xL3hCM2xOMU1JZEs4UnJuelM0
dllZMm1zTmp2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwrsgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMexjANBgkqhkiG9w0BAQsFAAOCAQEAUVDozlC32DaN9TYccKxmAjrtT3w3fvY5
r2iWqyocTCa8soIiR/cwL2+yaNe+tdXDm0QJ/XCAQdJgYayW8nkIKZ4JPvS/b8C8
Wsp54NlIZG+a80TR0i1+XXom2jLdNdTgCXwbZYrtGF7/8AnmTfuIBBMvmycZ7wfc
tw7XLW7kuEJLKxEHUoET40vGvlnT3FTYSDxAZOHwft9D8WbzoQ6CibUzHMS3AMui
nGsSiGq1bdw9gvQk3h162r7w8fCaSqLAboRNaFEIeJtVPTYHG5MKjB8PBOgNPxSS
1YT6pQ7y6MmdJ0cV+dWephDPQnxSNIkople/NWwutX3NhwLx0bwT8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:50 2026 by rpki-client