Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.cer (raw, json)
Hash identifier: TIcZ+0KLqVwYWq1H1L2IwwzNH9EePUoKFPaJWXiHayU=
Subject key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB0BA8F4803576DB491913CE91A06B50C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 08:51:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219514
IP: 2a01:b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:ba:8f:48:03:57:6d:b4:91:91:3c:e9:1a:06:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 08:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:31:44:cb:73:ec:1f:c2:1a:c9:2e:97:dd:
09:08:8b:dd:0f:07:e0:2c:ce:1a:cb:bd:c6:9d:a0:
64:00:c6:50:61:69:cf:32:22:a7:0d:7f:a7:58:3b:
ab:74:87:88:42:46:a3:99:99:84:82:1a:aa:94:f7:
84:46:6b:f5:7d:1a:ef:fc:d5:57:b8:75:69:e7:94:
ef:94:9c:58:68:89:e7:07:56:b5:82:42:74:f0:81:
60:b0:6f:e9:95:ed:db:65:b8:5e:a6:3a:51:50:52:
fa:af:73:ce:13:49:e6:2b:68:df:8d:b3:48:b7:e3:
15:9b:ff:e7:44:8c:35:d3:14:7d:d6:ef:d4:e9:5b:
36:8c:5b:e8:b7:dc:b9:98:5e:1a:f7:22:9c:7e:d9:
62:ce:66:74:24:50:73:ea:ae:dd:cf:e9:27:55:db:
7b:c5:80:b7:ab:98:05:a7:55:03:cb:43:b6:d4:5f:
25:5d:2e:76:8b:d3:74:06:57:ea:fa:cc:bc:ee:51:
c2:4b:65:62:13:0b:c3:16:92:1f:11:ca:2b:ca:cb:
02:17:27:42:b3:c5:75:f6:ba:63:77:eb:9e:db:44:
e4:cc:e2:71:ac:29:ae:ae:7d:ea:f3:8c:f3:5f:dc:
b0:67:0c:85:50:14:73:9c:cc:53:b4:fb:08:91:09:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219514
Signature Algorithm: sha256WithRSAEncryption
64:41:ce:8c:16:53:bb:34:87:c8:5a:56:f9:69:28:07:51:6a:
e6:d8:22:a9:53:ed:19:59:6f:96:92:85:e1:f8:24:d5:2a:31:
8d:ad:03:97:f2:67:06:e4:81:e5:97:e2:2c:3d:89:b3:d4:56:
ca:a8:40:57:56:f5:a6:cc:46:2c:be:41:e6:ae:eb:b9:40:99:
52:6a:c6:2b:42:39:f9:8f:52:df:d1:11:eb:88:8f:68:45:72:
2f:1d:a4:62:14:1d:83:f2:f6:5d:7c:d8:53:11:71:fb:b3:f3:
a1:bd:35:b5:b4:ca:d2:47:99:13:d4:2c:0d:27:6a:44:43:33:
dd:80:93:b4:14:09:a7:03:4e:49:9a:8e:90:35:bb:1a:9b:7d:
7d:8f:74:f5:1f:3c:d2:0a:38:b0:6e:dc:7b:1f:7e:bb:07:5d:
52:62:25:8a:c4:e8:df:0b:a5:db:44:4a:8a:61:06:de:ff:0c:
45:1e:2c:36:45:a6:a0:8d:7f:fb:d7:5c:fd:f4:57:48:ba:af:
c8:ed:7a:9d:94:1a:0c:84:82:63:db:d4:92:f5:2b:81:bf:38:
38:89:97:ff:dc:bc:a4:b0:6d:b5:04:1d:22:de:02:73:52:d0:
43:8e:24:6f:99:0f:f6:1c:44:60:5d:eb:67:ef:17:1d:92:92:
62:e4:ce:06
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZ6wuo9IA1dttJGRPOkaBrUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjEwMDg1MTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmZhMDU3YmJjNGQwOWI5YzY3MWM0M2ZmOTZmMzVjMDBkZTlmYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PcxRMtz7B/CGskul90JCIvdDwfg
LM4ay73GnaBkAMZQYWnPMiKnDX+nWDurdIeIQkajmZmEghqqlPeERmv1fRrv/NVX
uHVp55TvlJxYaInnB1a1gkJ08IFgsG/ple3bZbhepjpRUFL6r3POE0nmK2jfjbNI
t+MVm//nRIw10xR91u/U6Vs2jFvot9y5mF4a9yKcftlizmZ0JFBz6q7dz+knVdt7
xYC3q5gFp1UDy0O21F8lXS52i9N0Blfq+sy87lHCS2ViEwvDFpIfEcoryssCFydC
s8V19rpjd+ue20TkzOJxrCmurn3q84zzX9ywZwyFUBRznMxTtPsIkQkwtwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFB/6BXu8TQm5xnHEP/lvNcAN6fu7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzQ1YzMw
MC04NWVkLTQ1NDktODUxYS1lNjA5MDhlYjdjOGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNDVjMzAw
LTg1ZWQtNDU0OS04NTFhLWU2MDkwOGViN2M4ZC8xL0hfb0ZlN3hOQ2JuR2NjUV8t
Vzgxd0EzcC03cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgELgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDWXowDQYJKoZIhvcNAQELBQADggEBAGRBzowWU7s0h8haVvlpKAdRaubYIqlT
7RlZb5aSheH4JNUqMY2tA5fyZwbkgeWX4iw9ibPUVsqoQFdW9abMRiy+Qeau67lA
mVJqxitCOfmPUt/REeuIj2hFci8dpGIUHYPy9l182FMRcfuz86G9NbW0ytJHmRPU
LA0nakRDM92Ak7QUCacDTkmajpA1uxqbfX2PdPUfPNIKOLBu3HsffrsHXVJiJYrE
6N8LpdtESophBt7/DEUeLDZFpqCNf/vXXP30V0i6r8jtep2UGgyEgmPb1JL1K4G/
ODiJl//cvKSwbbUEHSLeAnNS0EOOJG+ZD/YcRGBd62fvFx2SkmLkzgY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:18:51 2026 by rpki-client