Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
File: tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer (raw, json)
Hash identifier: 64TYLA8X1WDAjENvlABOb32mNugRLmbkNIUJiT4k3L4=
Subject key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A059625635094780E16D3A01104ED78277
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Aug 2026 19:53:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213520
IP: 2a0a:11c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:62:56:35:09:47:80:e1:6d:3a:01:10:4e:d7:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 19:53:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:ac:34:ce:c7:9b:e0:7f:fb:00:19:4f:4e:
53:56:06:a0:99:c0:14:9d:17:3d:5e:af:8e:77:65:
19:25:2d:c7:1e:64:d1:e9:88:3f:76:dc:d7:c5:b6:
fe:1e:15:2a:61:78:4d:00:f4:bc:69:41:b4:97:6e:
63:63:e7:8c:c6:9e:ff:c4:f5:c1:5d:49:4f:56:d3:
10:8e:0a:12:7a:65:ab:1d:09:ef:01:96:d3:70:10:
73:74:0f:4f:69:6b:f7:6f:51:a3:c5:1b:a9:e0:18:
ba:36:13:d1:e5:0f:97:2e:f5:5e:e7:1a:f2:19:d8:
4c:03:39:f3:73:fd:f5:4b:a9:e6:5b:9f:f3:3f:a9:
13:f0:87:30:a3:3a:30:07:6f:fa:65:77:84:57:bd:
64:37:4b:78:72:3d:4a:7e:f3:02:bd:66:47:7f:11:
5e:93:2f:85:57:44:87:97:54:21:71:e4:d4:03:05:
38:24:9c:1b:4e:a4:ad:a3:9e:19:29:00:b8:e6:47:
d0:25:99:d7:18:7b:1a:fc:fc:16:59:1f:0b:23:8d:
30:39:2e:1d:44:14:8f:cf:d4:45:f9:31:6a:0a:3e:
db:e5:9f:4a:b5:80:17:e5:44:8e:41:be:cb:9c:4f:
dc:d7:b1:a0:25:a7:81:d8:10:cc:f3:d7:2f:4b:5c:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:11c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213520
Signature Algorithm: sha256WithRSAEncryption
59:30:9b:84:0b:c3:cd:b1:0a:28:a9:85:e5:ef:16:2a:f4:cc:
03:a2:d8:94:3a:44:b8:fb:6a:58:c6:ed:c9:ec:6d:b2:e5:72:
39:f7:a8:d0:9c:d9:9b:41:e6:4d:e0:15:ee:22:db:43:c4:d6:
79:ac:19:14:75:46:08:54:7d:51:ba:b7:bb:eb:69:03:14:73:
17:09:a1:6e:c9:04:dd:c0:f2:db:b2:ca:41:5b:d9:af:e4:ef:
c6:07:cd:dd:de:de:6a:2a:18:8e:64:52:41:ab:84:3b:91:13:
ed:9f:38:07:1b:30:77:5f:54:14:c8:cd:f5:f0:87:1b:64:8e:
ee:c5:8b:40:7a:6d:d7:99:29:63:ad:59:7b:2c:7e:3b:3d:34:
10:70:aa:d5:e5:e4:f2:b4:4f:82:17:70:6c:c9:7e:da:34:ab:
7f:a8:f1:ad:c8:b6:b7:0d:15:fc:11:b5:ab:64:c9:d7:a2:4d:
c7:3c:a7:98:07:dc:71:2e:05:72:de:ac:78:e9:f1:d1:4b:59:
99:63:70:70:2f:54:23:79:10:33:12:19:89:1a:01:1d:e4:e0:
2c:f2:f5:35:f5:c8:d1:46:14:9b:7c:96:d3:fe:90:18:53:45:
dc:8f:5a:6c:7b:9d:a5:98:1e:82:54:40:4e:29:88:18:60:ea:
cc:77:74:70
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAaBZYlY1CUeA4W06ARBO14J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODMxMTk1MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGIwYTRjMjM5MjMxNGQyOGE1YjY4YjZmYWYwMjAxZWEwYTAxNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fysNM7Hm+B/+wAZT05TVgagmcAU
nRc9Xq+Od2UZJS3HHmTR6Yg/dtzXxbb+HhUqYXhNAPS8aUG0l25jY+eMxp7/xPXB
XUlPVtMQjgoSemWrHQnvAZbTcBBzdA9PaWv3b1GjxRup4Bi6NhPR5Q+XLvVe5xry
GdhMAznzc/31S6nmW5/zP6kT8IcwozowB2/6ZXeEV71kN0t4cj1KfvMCvWZHfxFe
ky+FV0SHl1QhceTUAwU4JJwbTqSto54ZKQC45kfQJZnXGHsa/PwWWR8LI40wOS4d
RBSPz9RF+TFqCj7b5Z9KtYAX5USOQb7LnE/c17GgJaeB2BDM89cvS1ybtwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFLSwpMI5IxTSiltotvrwIB6goBSzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzdkZjRm
Mi04ZGZkLTQ1NzItOTA1NS1jM2VmYzA5MjY2NGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvN2RmNGYy
LThkZmQtNDU3Mi05MDU1LWMzZWZjMDkyNjY0Yi8xL3RMQ2t3amtqRk5LS1cyaTIt
dkFnSHFDZ0ZMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgoRwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDQhAwDQYJKoZIhvcNAQELBQADggEBAFkwm4QLw82xCiipheXvFir0zAOi2JQ6
RLj7aljG7cnsbbLlcjn3qNCc2ZtB5k3gFe4i20PE1nmsGRR1RghUfVG6t7vraQMU
cxcJoW7JBN3A8tuyykFb2a/k78YHzd3e3moqGI5kUkGrhDuRE+2fOAcbMHdfVBTI
zfXwhxtkju7Fi0B6bdeZKWOtWXssfjs9NBBwqtXl5PK0T4IXcGzJfto0q3+o8a3I
trcNFfwRtatkydeiTcc8p5gH3HEuBXLerHjp8dFLWZljcHAvVCN5EDMSGYkaAR3k
4Czy9TX1yNFGFJt8ltP+kBhTRdyPWmx7naWYHoJUQE4piBhg6sx3dHA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:57:52 2026 by rpki-client