Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/iuoPctjXohKC7_dETdtRJ0Z8PYg.cer
File: iuoPctjXohKC7_dETdtRJ0Z8PYg.cer (raw, json)
Hash identifier: s/WzNCnwvRK/j3oHtI1yihil+fl2qGbw1+RlnoyruxE=
Subject key identifier: 8A:EA:0F:72:D8:D7:A2:12:82:EF:F7:44:4D:DB:51:27:46:7C:3D:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A6BF2FC8DB5FA121094E1B0BEB66874E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de38b704-f554-4d0d-9ba3-89d97752b392/0/8AEA0F72D8D7A21282EFF7444DDB5127467C3D88.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de38b704-f554-4d0d-9ba3-89d97752b392/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 04 Nov 2026 13:28:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41666
IP: 91.216.79.0/24
IP: 2001:67c:8e4::/48
IP: 2a12:d940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:bf:2f:c8:db:5f:a1:21:09:4e:1b:0b:eb:66:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 13:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aea0f72d8d7a21282eff7444ddb5127467c3d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:c3:ff:b0:63:fc:c9:83:8a:a6:41:4c:78:
39:da:ce:1f:06:86:12:19:ad:bb:a9:01:b3:57:3c:
86:1b:d7:2c:41:4a:34:60:96:2f:cd:8c:9f:ab:27:
08:85:35:cd:32:9b:7b:02:79:61:68:f7:c1:94:b8:
f9:94:a0:e1:01:f9:b1:d6:c8:0c:73:02:d3:4c:dc:
21:1f:93:27:20:7e:e8:f0:1a:c6:24:f0:29:1f:47:
7c:4c:db:99:50:5b:88:a8:6a:97:79:88:28:a1:44:
1b:0a:b7:e6:a2:10:32:06:7b:b6:9e:37:55:06:b2:
65:d6:ca:3a:eb:d2:8e:39:84:cf:75:5c:67:1f:aa:
41:4e:cb:e8:73:11:e0:04:bd:a7:64:8b:be:76:5d:
d5:c0:e7:50:06:ef:a6:ba:8d:bd:29:4a:79:cf:9e:
94:34:4f:a2:56:1f:62:0d:8b:8e:86:99:b5:6d:78:
6b:dc:95:28:a0:b2:12:78:d8:b3:dd:de:36:b4:54:
55:16:88:c0:fb:e2:f2:ce:b8:1b:5d:bd:35:df:d2:
e6:11:99:de:fe:45:a2:65:24:cc:45:fd:e5:8b:a4:
ce:32:47:3a:4f:03:24:41:8a:65:86:5b:fc:b2:df:
d8:03:b3:b4:9b:15:83:d2:6e:4c:5f:c6:e9:ee:f9:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:0F:72:D8:D7:A2:12:82:EF:F7:44:4D:DB:51:27:46:7C:3D:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de38b704-f554-4d0d-9ba3-89d97752b392/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de38b704-f554-4d0d-9ba3-89d97752b392/0/8AEA0F72D8D7A21282EFF7444DDB5127467C3D88.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.79.0/24
IPv6:
2001:67c:8e4::/48
2a12:d940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41666
Signature Algorithm: sha256WithRSAEncryption
a6:47:6b:33:a8:ac:e7:e7:48:cf:9b:2f:23:c8:b1:88:6c:e0:
c2:a3:09:58:a8:13:b2:3c:5d:95:04:57:80:e0:42:02:b6:16:
4e:61:ae:47:ec:47:ff:11:d7:2c:f3:15:b9:14:28:41:f1:3c:
ea:cb:47:2e:3c:cd:c2:29:a1:64:0e:18:13:a0:0a:0b:af:55:
df:72:1e:02:e0:da:4d:80:6c:70:bb:cd:66:a3:2d:3b:cf:e6:
76:b2:e8:66:bc:a6:34:c8:54:43:80:a7:50:cd:c5:ed:e9:b0:
85:a0:b5:5a:3f:5e:de:45:d8:df:99:95:ec:cb:7c:3c:e4:6c:
f6:f7:f4:63:20:b0:4a:20:34:45:bc:e7:54:49:ad:67:a5:12:
fb:04:50:2b:99:5e:cd:12:30:0c:4b:88:53:95:2b:7d:d6:7e:
a7:70:74:be:db:2f:11:d2:3d:a9:a0:ed:ca:aa:34:ef:13:b0:
5b:16:da:f6:9a:6e:61:9d:d8:47:e9:b5:47:87:d4:6c:d5:67:
a5:c5:4b:a7:70:cb:f2:ed:14:96:ac:cc:a5:b0:12:53:c2:9e:
13:0e:76:5d:f7:48:71:da:34:d5:64:f5:6d:7c:7c:6d:11:94:
e8:91:0e:ca:2e:f8:15:8a:9d:d5:43:bb:9a:19:fa:5f:64:17:
00:91:97:1a
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAaGmvy/I21+hIQlOGwvrZodOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMTA0MTMyODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWVhMGY3MmQ4ZDdhMjEyODJlZmY3NDQ0ZGRiNTEyNzQ2N2MzZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pzD/7Bj/MmDiqZBTHg52s4fBoYS
Ga27qQGzVzyGG9csQUo0YJYvzYyfqycIhTXNMpt7AnlhaPfBlLj5lKDhAfmx1sgM
cwLTTNwhH5MnIH7o8BrGJPApH0d8TNuZUFuIqGqXeYgooUQbCrfmohAyBnu2njdV
BrJl1so669KOOYTPdVxnH6pBTsvocxHgBL2nZIu+dl3VwOdQBu+muo29KUp5z56U
NE+iVh9iDYuOhpm1bXhr3JUooLISeNiz3d42tFRVFojA++LyzrgbXb0139LmEZne
/kWiZSTMRf3li6TOMkc6TwMkQYplhlv8st/YA7O0mxWD0m5MX8bp7vnaSQIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFIrqD3LY16ISgu/3RE3bUSdGfD2IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlMzhi
NzA0LWY1NTQtNGQwZC05YmEzLTg5ZDk3NzUyYjM5Mi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGUz
OGI3MDQtZjU1NC00ZDBkLTliYTMtODlkOTc3NTJiMzkyLzAvOEFFQTBGNzJEOEQ3
QTIxMjgyRUZGNzQ0NEREQjUxMjc0NjdDM0Q4OC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwDAQCAAEwBgME
AFvYTzAWBAIAAjAQAwcAIAEGfAjkAwUDKhLZQDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMAosIwDQYJKoZIhvcNAQELBQADggEBAKZHazOorOfnSM+bLyPIsYhs4MKj
CVioE7I8XZUEV4DgQgK2Fk5hrkfsR/8R1yzzFbkUKEHxPOrLRy48zcIpoWQOGBOg
CguvVd9yHgLg2k2AbHC7zWajLTvP5nay6Ga8pjTIVEOAp1DNxe3psIWgtVo/Xt5F
2N+ZlezLfDzkbPb39GMgsEogNEW851RJrWelEvsEUCuZXs0SMAxLiFOVK33Wfqdw
dL7bLxHSPamg7cqqNO8TsFsW2vaabmGd2EfptUeH1GzVZ6XFS6dwy/LtFJaszKWw
ElPCnhMOdl33SHHaNNVk9W18fG0RlOiRDsou+BWKndVDu5oZ+l9kFwCRlxo=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:43:24 2026 by rpki-client