Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
File: xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer (raw, json)
Hash identifier: X1YSh3nS+P41j9emjdAufUxDA/15cy8YQm3MGXvNXxw=
Subject key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F933405BDB5C2963081A9E2DB686FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.216.227.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:33:40:5b:db:5c:29:63:08:1a:9e:2d:b6:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c73e163a37870548d696ef0330646b8425328f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:68:dd:f3:e1:28:46:8b:c3:2d:53:4f:ac:
7b:21:a1:49:1d:fa:02:5b:71:21:76:cd:e6:87:f1:
6a:2b:10:d3:f2:9f:7b:82:52:fd:76:f3:86:d5:15:
5c:57:fb:c0:21:e3:5f:fc:c6:21:ff:8d:ef:c4:f8:
99:52:dc:28:f7:7a:38:0a:f9:cf:c1:98:e1:54:c8:
70:6f:ff:8f:65:8a:d3:a5:7e:db:41:f1:6e:00:db:
3d:e0:30:3b:1b:26:b1:47:7e:21:eb:25:4c:44:bd:
2a:ed:92:b8:48:62:2a:9c:a9:52:f0:56:d4:f1:5d:
f2:1d:ff:6d:47:27:a6:15:0b:ca:1c:e4:65:67:74:
ac:f9:94:c3:1b:d1:47:47:dc:67:52:9e:bc:4d:3e:
cf:66:72:d3:2b:ba:b7:4a:f6:0d:d9:d6:1f:84:ed:
d0:38:75:81:0d:9b:7b:16:8f:21:31:23:31:2c:cb:
3c:f4:8d:6c:ba:f3:87:a0:40:09:a4:e8:93:23:3e:
d9:34:03:d7:0d:d1:05:6a:cf:20:67:fb:f6:15:67:
82:2e:ad:ac:12:88:07:3d:ab:05:40:99:df:05:b1:
f2:0a:ec:ed:06:b5:fa:4d:b6:18:51:a0:e5:35:38:
ab:aa:6d:bd:43:06:23:45:9c:9c:88:3f:70:df:38:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:df:a0:e2:10:f6:f2:24:a4:0b:c3:fc:7b:a9:fd:55:d4:ed:
d4:00:30:ab:90:68:34:a5:c5:c6:4b:17:c2:4b:6f:93:d6:5f:
7e:54:c6:e0:5e:1f:4c:64:b8:7b:19:db:1c:e1:33:0e:e7:71:
e5:61:7f:53:cc:48:71:94:65:22:30:d3:1d:42:09:0b:57:52:
de:16:e7:ab:35:11:1b:d5:b5:89:58:9c:2d:22:e3:10:f3:f5:
53:82:65:df:33:bf:67:9e:78:ab:00:67:19:66:42:26:33:71:
54:49:51:2a:57:16:30:c1:37:06:61:78:95:30:f4:32:4c:67:
97:c5:f5:5f:32:31:98:03:d8:09:b8:f7:99:f1:84:c4:e5:cc:
ec:7e:e7:40:d8:fc:74:6c:c5:c0:b3:2e:ad:8d:1a:25:ea:f6:
ed:2e:6e:d7:9b:1b:11:b4:cf:83:23:88:7b:16:17:52:6d:ab:
84:6a:03:4b:23:9e:3f:22:74:85:d4:36:48:3f:17:3e:bc:71:
7f:d6:d6:22:d2:d4:28:53:20:52:29:cc:f1:61:66:43:a7:af:
9d:7a:e9:63:06:a9:13:f0:46:91:ac:90:8b:05:c4:12:1c:71:
1a:35:6f:57:64:35:ef:2e:c4:9e:9f:31:85:e4:8b:d4:0b:1b:
d3:f8:95:95
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+TNAW9tcKWMIGp4ttob8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzNlMTYzYTM3ODcwNTQ4ZDY5NmVmMDMzMDY0NmI4NDI1MzI4ZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonBo3fPhKEaLwy1TT6x7IaFJHfoC
W3Ehds3mh/FqKxDT8p97glL9dvOG1RVcV/vAIeNf/MYh/43vxPiZUtwo93o4CvnP
wZjhVMhwb/+PZYrTpX7bQfFuANs94DA7GyaxR34h6yVMRL0q7ZK4SGIqnKlS8FbU
8V3yHf9tRyemFQvKHORlZ3Ss+ZTDG9FHR9xnUp68TT7PZnLTK7q3SvYN2dYfhO3Q
OHWBDZt7Fo8hMSMxLMs89I1suvOHoEAJpOiTIz7ZNAPXDdEFas8gZ/v2FWeCLq2s
EogHPasFQJnfBbHyCuztBrX6TbYYUaDlNTirqm29QwYjRZyciD9w3zie/QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMc+Fjo3hwVI1pbvAzBka4QlMo8oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2ZjMzky
YS02YTNlLTRkYTUtYjdiOS1hN2VkYjdkM2Y1MzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZmMzOTJh
LTZhM2UtNGRhNS1iN2I5LWE3ZWRiN2QzZjUzNy8xL3h6NFdPamVIQlVqV2x1OERN
R1JyaENVeWp5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw9jjMA0GCSqGSIb3DQEBCwUAA4IBAQBu36Di
EPbyJKQLw/x7qf1V1O3UADCrkGg0pcXGSxfCS2+T1l9+VMbgXh9MZLh7Gdsc4TMO
53HlYX9TzEhxlGUiMNMdQgkLV1LeFuerNREb1bWJWJwtIuMQ8/VTgmXfM79nnnir
AGcZZkImM3FUSVEqVxYwwTcGYXiVMPQyTGeXxfVfMjGYA9gJuPeZ8YTE5czsfudA
2Px0bMXAsy6tjRol6vbtLm7XmxsRtM+DI4h7FhdSbauEagNLI54/InSF1DZIPxc+
vHF/1tYi0tQoUyBSKczxYWZDp6+deuljBqkT8EaRrJCLBcQSHHEaNW9XZDXvLsSe
nzGF5IvUCxvT+JWV
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:42 2026 by rpki-client