Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.cer (raw, json)
Hash identifier: DW5/BvKZ3/flhnMYWFiOblUxhcFZ4puxVoMnI6SR2gQ=
Subject key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B775880397CBACA4DF465FA1FE093A6B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215990
IP: 2001:678:1194::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:80:39:7c:ba:ca:4d:f4:65:fa:1f:e0:93:a6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:72:4f:60:6a:3a:7b:d7:ab:cf:48:f5:85:
67:3b:6e:42:f8:09:b1:d0:ca:2e:cf:ac:f1:a8:e7:
33:ea:07:be:c0:b6:4f:66:87:93:12:03:23:b1:18:
9c:e8:c8:e4:8c:0b:3a:98:64:82:be:c2:45:33:1b:
a4:4d:01:77:76:64:d0:dc:12:38:17:6d:f2:d8:e1:
6d:97:a5:5d:00:2a:5b:83:d9:05:95:f3:05:cd:0f:
66:d4:a4:6e:83:5f:a4:db:6c:e9:8a:a2:ef:b6:12:
8a:11:94:13:52:23:44:a8:51:4a:cc:ae:fe:4f:f9:
84:e3:c3:3e:7a:98:0c:a2:62:2c:a1:21:cc:f5:6c:
4d:86:3e:db:0c:3f:06:ca:2d:f9:cc:14:ac:bf:61:
c6:8d:49:e2:ca:69:d0:f5:8a:b0:56:0d:18:15:13:
cb:71:5d:0a:7e:d9:7e:9f:74:01:e0:f0:79:0e:fa:
9e:bb:50:d0:ab:96:c6:d3:cb:90:6a:63:58:fb:17:
b8:1d:52:b9:8c:b4:0c:43:00:fe:5d:4c:59:98:ef:
32:56:4a:83:7c:53:b1:46:29:f3:2d:5e:20:b1:05:
48:f7:95:1f:4a:f3:88:f2:4f:0c:29:c4:b0:71:de:
38:bd:ef:60:c7:26:4c:13:a5:e3:68:05:86:5d:97:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1194::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215990
Signature Algorithm: sha256WithRSAEncryption
ae:5e:32:e2:e8:52:cb:06:71:52:c8:8f:82:a7:ef:05:fe:b4:
85:08:15:0f:d5:07:8e:42:19:fb:20:76:2e:83:be:6a:5a:b9:
fc:91:70:51:c9:a0:e4:04:2c:26:7c:90:4f:b0:f9:41:92:b1:
c6:68:ba:5f:87:f3:87:55:4d:3c:48:f4:ca:5f:c1:c6:e4:57:
02:5e:db:19:1f:4e:44:0d:c5:42:5d:43:d9:3d:74:5d:e9:5c:
af:3e:23:90:49:44:4d:44:c8:22:f8:49:31:2c:24:0f:2c:cf:
54:e6:68:3b:85:e0:08:5c:87:72:4e:2c:b3:b2:03:61:a8:6c:
81:4d:4b:9a:55:d9:1a:92:68:8f:c4:7f:f8:48:5e:78:38:56:
88:58:a0:5f:32:a0:84:b5:cd:2a:79:ca:32:70:07:0f:8c:b7:
7d:93:aa:40:64:1e:b1:79:d3:d7:da:08:61:06:aa:b1:22:0b:
c1:91:cf:30:1b:70:8e:bb:c3:65:da:57:7b:f2:9d:4a:a8:94:
74:3e:ed:73:9b:af:6a:21:a1:ad:42:37:ae:09:9b:04:be:c8:
21:4f:8c:8b:43:4f:e3:69:3d:83:e7:6e:48:ca:d9:b5:81:55:
b8:93:48:a8:d5:d2:cc:b7:33:72:72:ad:79:28:59:d3:92:57:
7e:d2:bc:aa
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt3WIA5fLrKTfRl+h/gk6axMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWFmM2FmMTY3YzNiNzU5NDI5ODI3ZDBmMGI3ODYwY2RmMWNjZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVyT2BqOnvXq89I9YVnO25C+Amx
0Mouz6zxqOcz6ge+wLZPZoeTEgMjsRic6MjkjAs6mGSCvsJFMxukTQF3dmTQ3BI4
F23y2OFtl6VdACpbg9kFlfMFzQ9m1KRug1+k22zpiqLvthKKEZQTUiNEqFFKzK7+
T/mE48M+epgMomIsoSHM9WxNhj7bDD8Gyi35zBSsv2HGjUniymnQ9YqwVg0YFRPL
cV0Kftl+n3QB4PB5Dvqeu1DQq5bG08uQamNY+xe4HVK5jLQMQwD+XUxZmO8yVkqD
fFOxRinzLV4gsQVI95UfSvOI8k8MKcSwcd44ve9gxyZME6XjaAWGXZcNlwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFEWvOvFnw7dZQpgn0PC3hgzfHM6mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzI0MGMy
YS0xZWJiLTQ4NDQtODQxNC02Njk3ZTQwYjA5MDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMjQwYzJh
LTFlYmItNDg0NC04NDE0LTY2OTdlNDBiMDkwMy8xL1JhODY4V2ZEdDFsQ21DZlE4
TGVHRE44Y3pxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGUMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNLtjANBgkqhkiG9w0BAQsFAAOCAQEArl4y4uhSywZxUsiPgqfvBf60hQgV
D9UHjkIZ+yB2LoO+alq5/JFwUcmg5AQsJnyQT7D5QZKxxmi6X4fzh1VNPEj0yl/B
xuRXAl7bGR9ORA3FQl1D2T10Xelcrz4jkElETUTIIvhJMSwkDyzPVOZoO4XgCFyH
ck4ss7IDYahsgU1LmlXZGpJoj8R/+EheeDhWiFigXzKghLXNKnnKMnAHD4y3fZOq
QGQesXnT19oIYQaqsSILwZHPMBtwjrvDZdpXe/KdSqiUdD7tc5uvaiGhrUI3rgmb
BL7IIU+Mi0NP42k9g+duSMrZtYFVuJNIqNXSzLczcnKteShZ05JXftK8qg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:01 2026 by rpki-client