Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer (raw, json)
Hash identifier: FOmJvhZwPvA5rthBcace/XuHlpS3S4phD9Y1hBvsnog=
Subject key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA33C284E510FACB824EF83B2F6F3E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210775
IP: 2001:67c:848::/48
IP: 2001:67c:84c::/48
IP: 2001:67c:850::/48
IP: 2001:67c:854::/48
IP: 2001:67c:858::/48
IP: 2001:67c:85c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:3c:28:4e:51:0f:ac:b8:24:ef:83:b2:f6:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:f2:6a:cc:9e:0f:c6:31:a9:87:f8:b1:f4:
ef:aa:73:cd:35:0d:f9:db:cd:7c:63:bb:51:90:90:
ca:3e:08:7d:c8:8e:36:be:bc:a5:be:e3:9d:90:b6:
90:0b:07:ee:08:65:70:69:cf:4e:38:c2:2d:42:88:
a8:01:58:e4:a5:ac:17:74:8a:8a:03:cb:54:68:fa:
70:3b:43:6a:52:5e:11:32:77:50:07:f4:bf:7d:92:
eb:3c:86:46:2e:94:ca:0e:40:f8:f5:94:0d:4a:52:
4f:16:a2:27:4d:bb:e0:7c:81:52:40:de:f7:7c:33:
03:67:78:06:8d:ae:90:75:e4:6f:03:94:b1:e5:04:
f0:13:f4:b8:de:a3:b0:c6:f6:8a:9a:13:b0:20:39:
2f:0e:bb:77:25:47:cb:ac:52:dc:a8:8e:03:ac:0d:
95:84:b0:0c:b8:e2:a3:18:e0:a1:76:42:0e:32:05:
ba:63:8b:54:06:02:29:5a:e5:af:2a:42:d2:f6:ee:
79:bb:af:96:49:10:e7:96:32:47:82:a7:7f:a1:47:
dc:ae:b3:d7:74:db:c6:b8:5d:9d:01:4e:c3:0d:e2:
05:76:9b:a5:b9:92:43:96:46:92:9f:df:e9:3c:e5:
73:67:1d:a4:5a:01:a8:3b:99:51:bf:e4:05:a2:c9:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:848::/48
2001:67c:84c::/48
2001:67c:850::/48
2001:67c:854::/48
2001:67c:858::/48
2001:67c:85c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210775
Signature Algorithm: sha256WithRSAEncryption
96:85:64:c2:5f:aa:b1:29:0a:8e:67:4c:1e:19:2f:5e:03:ab:
1d:9c:cb:61:47:fe:59:20:72:9c:76:36:ff:a8:62:76:ff:98:
fc:a3:aa:b7:2f:58:d7:a6:58:54:23:88:79:09:30:83:cd:09:
ab:fe:68:84:1a:06:eb:d0:d8:c9:a4:de:15:c6:7b:af:c4:58:
85:fb:da:b3:00:8d:b5:5f:0b:54:29:36:d8:e2:85:e9:12:a3:
c1:fe:92:cd:30:42:54:f1:c8:d8:61:d5:fc:d7:4b:00:0e:d6:
b9:a1:e0:ee:e2:56:e2:e2:3b:6e:a6:dc:24:74:1a:d2:d0:c5:
33:35:c0:6f:62:ed:a0:c5:2c:a7:b2:5f:19:ca:ee:19:28:97:
f2:99:75:e0:65:40:42:dd:41:1b:45:02:df:1e:c3:2b:92:09:
53:6d:de:75:55:a4:b5:d8:93:65:1b:ad:28:93:ff:e0:23:48:
67:04:71:67:f0:4c:c6:80:75:0f:6f:87:02:04:b0:68:b2:38:
eb:86:aa:6f:4c:da:8d:b6:4c:16:09:16:a8:73:a3:65:08:c6:
f9:5b:81:9e:dc:e6:0d:b2:a3:ce:e4:be:ad:59:5d:75:b5:4b:
d7:f3:0a:65:74:5d:cd:d8:2e:03:cd:9c:6c:a0:8b:f3:60:50:
4e:15:63:e7
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAZt7ozwoTlEPrLgk74Oy9vPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE4YWUyNGM5NGNkNDAyNzRiMzgwN2JhYmZjOGI5YmNjZWE4YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nDyasyeD8YxqYf4sfTvqnPNNQ35
2818Y7tRkJDKPgh9yI42vrylvuOdkLaQCwfuCGVwac9OOMItQoioAVjkpawXdIqK
A8tUaPpwO0NqUl4RMndQB/S/fZLrPIZGLpTKDkD49ZQNSlJPFqInTbvgfIFSQN73
fDMDZ3gGja6QdeRvA5Sx5QTwE/S43qOwxvaKmhOwIDkvDrt3JUfLrFLcqI4DrA2V
hLAMuOKjGOChdkIOMgW6Y4tUBgIpWuWvKkLS9u55u6+WSRDnljJHgqd/oUfcrrPX
dNvGuF2dAU7DDeIFdpuluZJDlkaSn9/pPOVzZx2kWgGoO5lRv+QFosmlIQIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFLEYriTJTNQCdLOAe6v8i5vM6os2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzgxMTQ2
My0zOWZmLTQ4ZmEtYjNjNS1lODM2ODk0MzNkYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvODExNDYz
LTM5ZmYtNDhmYS1iM2M1LWU4MzY4OTQzM2RjMC8xL3NSaXVKTWxNMUFKMHM0Qjdx
X3lMbTh6cWl6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF
BwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGfAhIAwcAIAEGfAhMAwcAIAEGfAhQAwcA
IAEGfAhUAwcAIAEGfAhYAwcAIAEGfAhcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM3VzANBgkqhkiG9w0BAQsFAAOCAQEAloVkwl+qsSkKjmdMHhkvXgOrHZzLYUf+
WSBynHY2/6hidv+Y/KOqty9Y16ZYVCOIeQkwg80Jq/5ohBoG69DYyaTeFcZ7r8RY
hfvaswCNtV8LVCk22OKF6RKjwf6SzTBCVPHI2GHV/NdLAA7WuaHg7uJW4uI7bqbc
JHQa0tDFMzXAb2LtoMUsp7JfGcruGSiX8pl14GVAQt1BG0UC3x7DK5IJU23edVWk
tdiTZRutKJP/4CNIZwRxZ/BMxoB1D2+HAgSwaLI464aqb0zajbZMFgkWqHOjZQjG
+VuBntzmDbKjzuS+rVlddbVL1/MKZXRdzdguA82cbKCL82BQThVj5w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:32 2026 by rpki-client