Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer (raw, json)
Hash identifier: YxZaJWyVqKnIBsuZYSX1LzPEza/RAIf+BbfZoGzZcQY=
Subject key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE0DC6896F3B2BD54F022FD0F44638E63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Mar 2026 07:04:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56770
IP: 91.227.131.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:dc:68:96:f3:b2:bd:54:f0:22:fd:0f:44:63:8e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 07:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:dd:47:d7:4f:51:3e:5b:8d:59:89:ac:54:
ab:65:77:a7:a6:70:e8:99:b0:14:cc:49:60:8d:d5:
9f:49:ce:c9:72:e6:13:4c:be:0e:ef:09:05:20:62:
a0:0c:04:70:2f:a6:d9:6d:d8:00:ad:44:d9:83:4a:
8c:26:59:9a:b1:e7:61:54:78:56:93:f8:ae:0c:c7:
fd:ab:c4:eb:d8:0d:0b:32:1a:95:36:a9:e2:04:61:
bf:e8:af:ac:56:26:9b:fc:9d:c4:cf:3d:7e:ce:ec:
b0:e0:2c:cb:ad:c9:d2:e2:0d:68:b4:f2:0e:5b:e4:
ce:39:b2:93:0e:31:82:be:39:a7:59:47:4a:8f:88:
87:c2:53:37:50:0a:03:bc:49:19:29:b1:92:4d:f1:
58:96:13:50:22:61:e3:81:0f:a9:3d:92:e8:fe:d2:
bd:dd:4d:3a:2b:f1:bb:70:b1:16:45:31:78:15:e6:
9a:33:4f:30:42:52:b7:b6:54:3d:39:ca:1f:04:09:
d0:da:b7:8b:84:1b:5a:4d:be:98:da:36:1c:0e:98:
d4:1b:5d:30:56:a2:52:c9:b5:c9:20:d2:66:6d:5a:
7d:b1:7c:18:b8:57:b3:df:3a:05:e3:93:44:c0:2c:
9c:76:1d:12:69:5d:e9:b8:9a:4b:1a:cf:ef:2c:50:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.131.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56770
Signature Algorithm: sha256WithRSAEncryption
0e:a0:e9:b7:ef:d8:73:54:17:0b:69:56:7a:9b:23:30:0f:ae:
0f:07:75:13:e6:06:cb:c7:c4:6e:80:e5:13:78:3b:62:0d:71:
1d:b7:59:ca:c4:50:99:52:93:89:40:87:79:f1:fa:68:f8:3c:
1c:e0:54:59:a7:12:a0:c4:ff:59:2f:45:85:6b:1d:b5:5b:34:
63:b4:d1:ab:4e:88:b8:f0:fe:63:6f:ce:ed:29:18:3f:65:75:
73:23:61:b1:80:0c:73:2f:e5:b9:4c:42:d3:a1:46:81:0e:70:
93:2f:08:93:bc:1b:c6:37:2d:0b:5d:da:46:40:46:3a:61:e3:
29:9d:01:53:e1:69:c3:5e:85:8c:e2:90:2b:fb:03:83:54:f2:
8d:5a:58:13:7a:28:40:9b:f5:58:e3:95:93:f5:06:d9:08:f4:
e7:8f:7f:bc:0d:f4:56:1d:21:9e:9e:d7:74:f0:2c:f1:4f:9e:
28:0e:5e:a7:72:59:86:59:29:45:ad:8a:dd:a7:ba:e6:20:3b:
1b:95:4a:ce:cd:86:03:90:20:f3:5e:0c:c7:8d:13:b1:77:c0:
a9:80:99:d0:9f:00:50:66:8b:9b:38:6b:ab:8f:83:0f:a0:4e:
11:c0:e5:8e:e9:a6:0f:73:5e:83:6b:46:8f:d4:b2:91:e5:86:
b3:7a:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:50 2026 by rpki-client