Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
File: Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer (raw, json)
Hash identifier: iaTGVcyfMmhUdXRFKejJLyLbWAtK0PCaQU7UpVcWEno=
Subject key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CADFE31A0BAF16C7C1AA1A3C3E10C1F21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 10:00:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20915
IP: 87.254.0.0/19
IP: 185.210.168.0/22
IP: 217.25.0.0/20
IP: 2a00:eac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:31:a0:ba:f1:6c:7c:1a:a1:a3:c3:e1:0c:1f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 10:00:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:f8:f9:91:1c:ff:b0:07:a5:86:d4:46:bd:
f3:f6:1e:ec:9d:57:32:66:27:8f:02:77:58:f9:f9:
bb:b1:a0:66:4b:fe:32:90:93:c5:5d:9f:3a:53:ad:
5a:39:2c:8d:18:83:ce:30:91:e0:88:7b:c8:d2:a4:
65:4f:88:88:d3:3e:36:6d:09:17:34:31:c6:ce:3c:
70:6c:04:3d:92:4c:45:eb:41:36:2a:d4:be:1d:86:
26:d6:be:0b:9e:ca:ba:a8:d8:34:cf:f8:7a:4a:ab:
92:d9:fd:7b:78:4c:81:08:8b:2d:5a:9a:20:da:0d:
c5:af:50:29:fe:97:a4:d0:8e:f9:a9:ea:ca:67:1c:
b6:48:98:48:fd:36:3f:df:b7:8a:ed:c1:ac:80:d0:
26:6b:34:1a:e6:83:41:e0:6b:3a:8b:98:32:14:a3:
c6:42:12:16:92:76:15:9e:31:bf:62:3f:4a:7f:45:
02:e1:5d:23:67:af:43:ba:7d:27:f5:eb:d0:e2:c6:
ed:e4:6c:45:15:14:88:8d:d4:94:f5:30:c3:8c:09:
22:7e:fa:8e:c8:53:9b:5b:16:95:06:3c:a9:cb:68:
98:04:74:1b:63:9c:89:f9:8c:51:7b:b4:fd:9e:a0:
2c:5e:03:af:b8:78:0f:a4:61:5b:13:b2:a2:68:04:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/19
185.210.168.0/22
217.25.0.0/20
IPv6:
2a00:eac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20915
Signature Algorithm: sha256WithRSAEncryption
ab:e4:57:2c:48:c7:e3:f4:1b:08:c2:82:9e:3a:4b:5e:d2:87:
4d:f7:73:c2:d1:8e:ff:e2:f1:a8:6c:d7:15:83:dc:41:17:40:
53:ea:22:9e:b1:33:69:4e:5e:8f:a6:cc:e4:19:a1:bf:fa:60:
19:bc:0f:47:1a:08:b7:95:c4:30:70:21:67:91:a8:d9:75:93:
73:78:98:55:04:82:d1:74:c7:56:b8:e7:0d:41:cd:bb:5c:9b:
bb:01:fc:1d:21:9b:12:1e:32:5e:e8:26:be:0c:5b:87:7c:5d:
0e:3a:5d:7c:53:10:d2:2f:b2:f7:db:b8:d5:ea:7d:6a:92:0b:
18:a8:cc:c7:d7:b8:a8:5b:95:f8:ea:93:a7:8f:79:7c:5f:bd:
b5:b5:1d:d0:9d:d3:a2:90:e8:25:57:ec:31:bb:dd:18:2d:83:
ae:e6:02:45:73:1e:e5:40:bc:1d:09:99:6c:e4:3f:f3:b5:4a:
cc:0e:5d:3d:1a:18:c0:a8:12:67:e9:7c:de:28:0d:fe:17:eb:
be:b6:c1:ad:53:14:e5:e3:08:40:dd:50:4b:b5:52:32:e7:b5:
6f:4f:f6:bc:cb:28:a6:50:19:b3:96:c1:29:9c:7b:52:f3:0d:
4a:c7:e5:8a:b8:34:72:94:90:85:5f:ef:80:60:27:be:bd:bf:
cd:79:9b:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 5 21:59:08 2026 by rpki-client