Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer (raw, json)
Hash identifier: 1UWHyj378ZSxQVBGxJRf9n60ET+qmyZmU4OXEWwokPw=
Subject key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D875F33246B2971EA2835EFEF3A06BFF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Apr 2026 15:04:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44056
IP: 31.135.224.0/20
IP: 46.148.128.0/20
IP: 83.97.104.0/21
IP: 91.195.130.0/23
IP: 91.230.146.0/24
IP: 91.237.186.0/23
IP: 92.62.116.0/24
IP: 109.196.64.0/20
IP: 176.125.192.0/19
IP: 195.2.238.0/23
IP: 195.244.24.0/23
IP: 2a13:2940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:5f:33:24:6b:29:71:ea:28:35:ef:ef:3a:06:bf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 15:04:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=668e9b2eefb205342382b6072a903f9d9837071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:6e:b5:f9:d9:38:95:e0:5d:f6:ec:b5:f2:
d7:2a:d4:48:61:ff:19:72:aa:a1:9b:9b:3c:9d:27:
52:57:02:6e:ce:e3:24:2c:b2:ab:64:5b:82:58:44:
cf:86:ce:7b:6b:2d:e2:29:e2:2c:79:a2:29:7d:fe:
ff:9e:5b:d6:ab:9b:f3:40:4d:80:e4:a2:2c:f5:38:
fd:87:bd:8c:8d:06:3b:3c:f8:0c:38:89:64:76:00:
7c:73:51:c0:6e:12:f9:96:94:7b:d5:7b:fa:b5:3e:
47:cd:54:80:5f:a3:9f:3b:24:69:e4:37:0c:4b:f3:
5b:1a:ba:08:30:08:a7:cb:c9:70:cd:62:86:1e:82:
b4:93:be:f6:38:c7:8c:84:a5:f6:dc:c9:1b:4f:53:
dd:7b:8f:b2:b3:8c:75:9f:1b:fa:92:3a:91:15:46:
20:f4:82:32:08:1e:2a:04:29:9f:54:7c:ce:c8:57:
ea:00:3f:00:0a:be:63:51:f9:00:3b:df:fa:a9:37:
27:2d:95:a9:50:f3:70:c8:06:bb:5d:b0:9c:a4:8b:
4a:0a:fe:44:91:bd:fa:a0:20:23:6b:da:5d:97:22:
78:a3:d8:d9:ad:69:ae:ff:17:e9:f5:4d:9e:ff:17:
2f:fe:18:c6:12:cc:42:26:d1:4b:b5:89:72:fc:75:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
92.62.116.0/24
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
195.244.24.0/23
IPv6:
2a13:2940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44056
Signature Algorithm: sha256WithRSAEncryption
50:ce:6f:07:ad:92:41:2a:6e:7e:78:c9:22:05:44:fe:ce:4d:
e1:ab:e3:ca:fe:8a:d9:d8:99:00:a2:63:c7:17:2f:9d:f0:06:
e3:bd:3b:89:99:a2:c1:3f:38:82:fc:67:d8:2f:d2:ae:e1:8c:
89:f3:f8:61:33:89:5b:dc:6b:bb:74:d6:72:fc:0a:8d:2b:4e:
e5:fb:66:3a:70:1d:f5:36:5b:5d:b4:88:36:42:0a:44:4a:ee:
d4:ec:70:b8:15:77:4f:4d:7d:14:9e:9a:12:b2:b1:ff:18:42:
ba:71:7c:6e:12:b7:84:05:af:dc:a8:4e:7a:ba:a9:a6:3c:70:
fb:a3:e3:38:1c:19:21:71:c0:b7:b9:b3:4b:d3:59:1e:e5:86:
10:21:b2:62:d6:bd:65:44:ac:df:34:a8:b8:f3:a2:af:6b:78:
12:6a:d1:30:ca:92:7d:18:a8:67:51:32:0a:0e:87:56:dd:dd:
fb:5c:a3:cc:c4:56:14:66:9a:e5:38:4f:23:f7:7e:79:68:d0:
08:dc:3f:89:b5:d5:4e:99:f0:a6:f9:7f:21:0a:95:e4:25:d7:
52:5a:f7:9e:68:73:6d:96:a7:4a:19:41:4b:8c:11:4a:62:8c:
4b:d1:00:00:9c:26:dc:02:55:c1:96:41:07:e2:df:2b:64:88:
ce:10:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:20 2026 by rpki-client