Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
File: N9hCIZddCjB-NmvwADTVClKoxF8.cer (raw, json)
Hash identifier: OzWlqHPkcIqaPf+h2ZhEvgs+T+KqGoDwDjupeJXuEKk=
Subject key identifier: 37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00EFB11C2A80C88F121FDD41A727DB62B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 09:08:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215421
IP: 193.177.240.0/24
IP: 2a14:ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:fb:11:c2:a8:0c:88:f1:21:fd:d4:1a:72:7d:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 09:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d84221975d0a307e366bf00034d50a52a8c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:a5:8f:6f:35:6a:c1:5a:d7:6d:f1:2e:7d:
2a:06:58:8b:11:a5:c4:8b:c4:62:68:fe:c3:0c:17:
e6:5d:b8:17:26:d2:fe:bd:b5:29:ac:3e:ca:04:54:
6c:0f:1d:fe:6e:bf:c7:2e:0c:80:8c:42:3a:ac:d4:
e6:23:39:91:0b:17:f7:2c:af:81:77:5e:c3:69:c9:
02:23:4e:b9:4a:d1:65:41:07:a9:a6:45:69:9a:00:
9d:0c:bb:42:55:31:a7:2f:3d:47:d2:64:68:44:d1:
63:1b:e2:7c:44:75:c5:4f:9b:c3:3a:61:3f:43:db:
c2:3d:bc:c4:dc:37:66:ef:e9:59:85:03:04:b5:a2:
f1:23:76:fc:ac:72:0c:91:aa:49:9f:64:ad:b8:53:
c9:ce:2e:e9:6a:a9:cd:a6:0e:ac:64:61:56:43:7e:
e9:dc:ac:61:57:26:b5:32:17:33:9f:17:8d:28:16:
4a:fb:74:2b:8b:ec:c9:96:b1:be:48:32:73:b8:9a:
0f:ea:8c:33:1f:d9:06:da:9a:73:38:b6:a1:74:65:
fe:fd:89:37:1a:73:16:4b:4d:64:c2:c0:0d:1b:1d:
f3:76:82:37:39:04:00:f7:f7:83:2b:ea:1d:c7:0b:
2a:be:d4:84:30:95:f9:03:a3:7c:d4:1e:46:1b:98:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.240.0/24
IPv6:
2a14:ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215421
Signature Algorithm: sha256WithRSAEncryption
89:cf:b5:4e:c0:23:ae:28:cd:79:1d:dd:9f:ed:9b:38:91:de:
0a:94:6c:d0:5b:12:36:f3:ea:ea:a7:82:a1:4d:01:fd:fa:84:
54:9c:f6:f3:6f:f7:98:40:2d:0d:7a:bb:1b:41:61:85:fc:45:
87:24:7e:f1:dd:69:f2:95:a9:e9:fe:3a:ed:9b:d4:06:22:dc:
63:98:e4:b8:5f:7b:ab:75:7c:52:39:2f:50:7c:e0:7c:6e:d5:
e6:b8:f9:cf:da:da:d5:ab:b7:7f:6a:84:d4:4b:29:65:31:dd:
c8:3c:f2:6f:ec:9f:18:da:f1:ec:bd:a7:f9:6c:d8:e3:ff:45:
12:7f:33:2c:75:cb:19:66:55:f5:bb:8e:88:a4:9c:fa:57:f9:
a7:a5:4c:f0:ae:85:99:58:18:59:01:ee:91:ed:20:7e:ee:3e:
60:42:f6:96:ee:3c:3e:d4:bd:f2:03:3a:6c:39:3c:c0:7f:15:
ca:f4:d4:e6:54:b0:ce:d5:20:5f:02:ff:a3:75:b6:70:10:53:
8e:09:05:e9:c1:c1:4d:1c:af:f0:d0:32:48:13:5d:9d:16:fc:
40:6c:84:ca:db:ba:a9:82:3f:cd:5b:d9:dd:ec:57:59:25:e0:
03:6e:3e:5d:08:19:ae:bf:cb:1a:c1:e7:04:80:3f:ea:03:d8:
94:31:1a:3d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAaAO+xHCqAyI8SH91BpyfbYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE3MDkwODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q4NDIyMTk3NWQwYTMwN2UzNjZiZjAwMDM0ZDUwYTUyYThjNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPulj281asFa123xLn0qBliLEaXE
i8RiaP7DDBfmXbgXJtL+vbUprD7KBFRsDx3+br/HLgyAjEI6rNTmIzmRCxf3LK+B
d17DackCI065StFlQQeppkVpmgCdDLtCVTGnLz1H0mRoRNFjG+J8RHXFT5vDOmE/
Q9vCPbzE3Ddm7+lZhQMEtaLxI3b8rHIMkapJn2StuFPJzi7paqnNpg6sZGFWQ37p
3KxhVya1MhcznxeNKBZK+3Qri+zJlrG+SDJzuJoP6owzH9kG2ppzOLahdGX+/Yk3
GnMWS01kwsANGx3zdoI3OQQA9/eDK+odxwsqvtSEMJX5A6N81B5GG5iGgwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDfYQiGXXQowfjZr8AA01QpSqMRfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzgwYjJl
Yi0xMzBiLTQzZmItOGQwMS1kYjE0Y2U4NGMwY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvODBiMmVi
LTEzMGItNDNmYi04ZDAxLWRiMTRjZTg0YzBjZC8xL045aENJWmRkQ2pCLU5tdndB
RFRWQ2xLb3hGOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwbHwMA0EAgACMAcDBQMqFArAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNJfTANBgkqhkiG9w0BAQsFAAOCAQEAic+1TsAjrijN
eR3dn+2bOJHeCpRs0FsSNvPq6qeCoU0B/fqEVJz282/3mEAtDXq7G0FhhfxFhyR+
8d1p8pWp6f467ZvUBiLcY5jkuF97q3V8UjkvUHzgfG7V5rj5z9ra1au3f2qE1Esp
ZTHdyDzyb+yfGNrx7L2n+WzY4/9FEn8zLHXLGWZV9buOiKSc+lf5p6VM8K6FmVgY
WQHuke0gfu4+YEL2lu48PtS98gM6bDk8wH8VyvTU5lSwztUgXwL/o3W2cBBTjgkF
6cHBTRyv8NAySBNdnRb8QGyEytu6qYI/zVvZ3exXWSXgA24+XQgZrr/LGsHnBIA/
6gPYlDEaPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:35:15 2026 by rpki-client