Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
File: V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer (raw, json)
Hash identifier: 7NASLml5e3u1imwvb98CtDwGBe/i2xHA6NC/iy0PQXI=
Subject key identifier: 57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F94395508880E03E18AEEBAC4998BA8EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jul 2026 13:03:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213671
IP: 95.142.148.0/24
IP: 150.237.32.0/19
IP: 185.85.184.0/22
IP: 192.48.111.0/24
IP: 2a05:b100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:39:55:08:88:0e:03:e1:8a:ee:ba:c4:99:8b:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 13:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:e2:af:0e:c9:c4:14:c7:4e:d9:ec:68:5e:
4c:d2:d1:2f:c7:12:1e:3f:b1:eb:12:38:29:d5:ec:
e5:b0:d9:bc:de:06:20:29:c7:f8:02:3b:bd:1e:c1:
db:52:66:f8:87:88:12:e9:77:84:1c:a0:17:3d:ea:
9f:d5:ff:96:6e:24:30:37:7a:e5:8b:b3:6d:38:96:
4e:38:09:32:6b:0b:c1:b3:76:96:48:9c:75:1f:aa:
d7:12:8c:68:6e:f3:00:90:28:b1:d0:f6:be:b7:35:
68:a8:a5:40:2e:54:5e:11:88:da:1e:19:8e:b0:4d:
ff:3a:4f:fb:94:2a:d9:8f:ba:56:03:b2:a3:83:fe:
7b:0e:48:68:37:79:50:f5:f4:ef:51:5f:4b:bd:92:
1c:cc:69:f6:62:a7:f1:c3:a7:64:73:57:7e:f0:bf:
19:0d:59:c8:b2:f3:db:4f:0d:07:74:24:33:d2:62:
3a:40:fa:33:25:36:32:88:76:1d:61:92:7d:7b:88:
50:2e:de:41:67:65:a9:b1:44:a8:64:87:6a:33:8e:
77:b2:6b:de:4c:9e:de:89:9b:e3:ac:19:b6:39:9c:
e4:60:a4:59:f9:64:26:93:25:89:d3:65:5f:ef:ea:
b5:9f:c5:80:9b:c7:0c:a9:8e:25:75:8c:c8:be:ce:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.148.0/24
150.237.32.0/19
185.85.184.0/22
192.48.111.0/24
IPv6:
2a05:b100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213671
Signature Algorithm: sha256WithRSAEncryption
3e:01:2a:14:04:24:0d:af:cf:de:e3:ca:5c:d3:3e:b6:ba:f2:
b2:8a:76:42:42:80:3d:8d:d2:6d:4b:f2:02:aa:64:d4:77:80:
6f:95:35:25:9b:f3:47:10:f8:74:32:7a:82:4b:94:c0:2c:59:
52:a1:14:8c:50:6b:cb:90:2d:af:d8:6f:5a:14:ad:57:72:5e:
35:ca:67:68:13:30:bc:e4:90:81:45:53:83:0d:ec:b9:87:a7:
e5:31:45:27:84:0a:fe:88:d5:6e:aa:ea:4f:2d:41:73:ab:33:
f5:11:15:9e:d7:87:ea:52:7e:47:2d:cf:5a:3b:28:1e:05:6f:
ed:47:1b:56:17:5d:cd:44:77:11:e1:4f:6b:2f:7c:46:5d:7e:
0a:03:58:fb:8d:eb:3b:58:17:2f:66:67:d5:9e:cd:60:5d:e1:
88:60:ba:67:e5:23:91:c9:15:92:24:0e:f1:56:7d:9d:2c:a7:
85:a1:79:1d:a4:7e:48:7c:ed:bf:f7:28:03:21:51:55:e3:9a:
e6:2c:d3:06:03:d8:25:99:2a:38:d5:e1:d7:09:60:77:08:7c:
cb:4a:75:b8:7a:30:c6:ae:22:cd:81:4c:fe:ee:3e:dd:f9:1d:
4b:0c:49:7c:c4:4d:07:d8:9f:59:c2:a6:b1:99:6f:38:4a:b5:
7d:50:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:23:27 2026 by rpki-client