Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
File: pZyqKnNoBpiyyeGmyWQadPPOdug.cer (raw, json)
Hash identifier: wajgZOfAT30jyQtjcUhjgLx3TpufS4GM4Kpu4u9tC3k=
Subject key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED4159F43EF56251186B0CF9B6F746
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.34.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:41:59:f4:3e:f5:62:51:18:6b:0c:f9:b6:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:9b:26:74:33:e9:80:c2:87:55:0e:2e:3f:
0e:13:cc:a7:16:b2:67:40:74:52:28:d4:a9:f0:5a:
2c:1f:c9:f0:73:d4:5e:48:fb:88:3a:81:ad:ac:7b:
61:b5:72:19:b0:70:92:77:d9:05:cf:80:e0:df:be:
d8:45:5c:5d:b7:68:3d:88:2c:38:95:19:0e:63:e6:
48:c2:c8:5d:cf:e1:68:3a:ee:03:ab:ac:37:9e:ff:
28:45:bb:93:50:b2:6f:3a:ea:c7:9c:09:94:05:33:
9c:9c:b0:22:27:c6:f6:93:4b:b0:f7:78:ef:7e:e0:
fe:b1:84:7e:71:70:d5:09:21:8b:02:3e:2b:20:90:
f9:c3:ff:b0:ef:b8:9c:66:ee:cb:a5:ca:72:8f:7b:
d7:32:21:8a:cc:2b:a4:99:1f:9f:eb:10:43:cc:17:
bb:47:22:83:b7:52:62:35:ad:16:41:e6:29:ca:32:
f6:ee:26:ac:f3:ed:42:e4:0a:a6:61:36:5e:0b:c0:
78:ca:23:e2:48:51:17:74:87:d3:ee:db:4f:07:d5:
53:11:7b:b6:ec:4e:d4:a9:b5:28:17:2a:3a:61:7d:
62:e3:db:95:20:10:87:3e:33:4d:d6:fe:52:94:29:
d7:77:9a:50:60:9f:33:e5:da:ab:48:1f:37:3c:04:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.156.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8f:e8:de:26:7c:db:b3:48:9c:ab:55:a3:ea:f6:60:cb:22:
05:fa:ea:c6:39:49:56:1c:3c:92:98:66:02:c0:34:2a:0f:ad:
bf:a2:50:5e:d4:99:03:75:b5:0b:75:60:6c:65:0b:a5:ca:b5:
38:7a:ee:d1:da:e7:15:cc:7e:2a:8b:55:9a:d4:71:3b:de:ac:
b5:5c:03:16:d8:c0:c2:55:09:f5:42:0d:8e:5f:ae:cf:c5:5d:
b3:63:26:c7:6a:5a:4d:19:5b:a0:ad:1b:0c:85:2b:e0:a6:33:
20:3f:64:fd:c7:f7:f4:6e:40:90:6d:a5:33:29:17:73:c6:48:
4a:65:a8:8c:7e:69:d0:cb:36:9f:c1:64:2e:a8:c6:94:b7:c6:
8b:c0:f1:16:84:d2:62:a3:0a:35:df:69:e7:6a:3a:8d:c5:b5:
94:91:4f:4a:19:b3:46:a6:f2:c9:36:4c:27:b2:3f:df:12:01:
62:8b:93:1f:70:e2:24:b2:76:f8:a3:da:b2:9b:7b:ca:94:61:
9a:e6:88:7f:99:86:17:ab:3f:32:25:a5:e1:4b:73:4b:ec:bf:
d8:36:3f:3e:4a:fd:1c:e0:f4:56:87:eb:bf:d2:23:ab:0e:ad:
b3:27:96:35:ed:67:53:76:cc:ca:9f:0f:58:32:9a:c2:da:1a:
13:7c:dc:07
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt87UFZ9D71YlEYawz5tvdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTljYWEyYTczNjgwNjk4YjJjOWUxYTZjOTY0MWE3NGYzY2U3NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj12bJnQz6YDCh1UOLj8OE8ynFrJn
QHRSKNSp8FosH8nwc9ReSPuIOoGtrHthtXIZsHCSd9kFz4Dg377YRVxdt2g9iCw4
lRkOY+ZIwshdz+FoOu4Dq6w3nv8oRbuTULJvOurHnAmUBTOcnLAiJ8b2k0uw93jv
fuD+sYR+cXDVCSGLAj4rIJD5w/+w77icZu7Lpcpyj3vXMiGKzCukmR+f6xBDzBe7
RyKDt1JiNa0WQeYpyjL27ias8+1C5AqmYTZeC8B4yiPiSFEXdIfT7ttPB9VTEXu2
7E7UqbUoFyo6YX1i49uVIBCHPjNN1v5SlCnXd5pQYJ8z5dqrSB83PARxxwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKWcqipzaAaYssnhpslkGnTzznboMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2RkNjcy
Zi01MzM2LTRmMzUtYjNlZi1hZTkxYWIzNDJiZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZGQ2NzJm
LTUzMzYtNGYzNS1iM2VmLWFlOTFhYjM0MmJlMS8xL3BaeXFLbk5vQnBpeXllR215
V1FhZFBQT2R1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwiKcMA0GCSqGSIb3DQEBCwUAA4IBAQCEj+je
Jnzbs0icq1Wj6vZgyyIF+urGOUlWHDySmGYCwDQqD62/olBe1JkDdbULdWBsZQul
yrU4eu7R2ucVzH4qi1Wa1HE73qy1XAMW2MDCVQn1Qg2OX67PxV2zYybHalpNGVug
rRsMhSvgpjMgP2T9x/f0bkCQbaUzKRdzxkhKZaiMfmnQyzafwWQuqMaUt8aLwPEW
hNJiowo132nnajqNxbWUkU9KGbNGpvLJNkwnsj/fEgFii5MfcOIksnb4o9qym3vK
lGGa5oh/mYYXqz8yJaXhS3NL7L/YNj8+Sv0c4PRWh+u/0iOrDq2zJ5Y17WdTdszK
nw9YMprC2hoTfNwH
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:56:16 2026 by rpki-client