Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
File: W-4FGpOQHswBdEB5qkrC-wd7n8E.cer (raw, json)
Hash identifier: bI2D2iQN9iFgHjXeM8/sGL+eI1/ZrcqpNxNUr9RrFts=
Subject key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11934143A2B1D7DC643E7DB6E056ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39450
IP: 31.15.16.0/22
IP: 45.128.224.0/22
IP: 91.213.39.0/24
IP: 91.228.64.0/22
IP: 92.246.88.0/22
IP: 194.4.164.0/22
IP: 195.20.137.0/24
IP: 2a0d:8540::/29
IP: 2a0e:4240::/29
IP: 2a11:500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:93:41:43:a2:b1:d7:dc:64:3e:7d:b6:e0:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:6d:62:31:53:a1:6d:d4:f2:f8:20:20:d8:
e0:f4:92:f8:e7:93:44:40:42:42:a4:0f:5b:48:fa:
40:d7:f2:a4:61:ae:36:f3:a0:e7:97:91:ba:a0:a7:
5c:4b:11:ca:8f:63:c8:db:01:12:56:fb:29:82:e3:
0f:e2:90:fd:f2:f6:a5:c2:60:e5:37:88:5c:01:0c:
c1:a7:c4:c3:6c:9b:fc:65:3b:f3:1f:20:f0:2a:40:
7d:0f:df:95:8b:3e:5b:d6:8a:78:f4:75:ca:97:bd:
6c:2e:ff:cb:5a:55:63:32:81:dd:05:45:f8:fa:38:
90:fe:c2:4c:43:a0:26:54:43:79:e1:8c:3a:e1:c3:
15:3d:bb:4c:4e:6c:71:91:4d:5c:56:82:5c:10:cf:
66:00:ae:1f:65:7d:54:0e:fd:1f:6d:ec:d2:2e:52:
46:e5:86:0e:ea:a3:27:2e:80:fc:b9:65:76:a9:92:
66:72:95:93:e5:83:24:d9:2d:81:b8:f2:1a:90:5a:
64:65:f3:b1:45:48:8f:d4:28:ec:06:a7:a2:0b:da:
f5:c3:07:4e:df:47:ff:09:b9:77:c2:a2:4b:b6:12:
71:eb:69:7e:1a:2d:71:ae:c7:13:f1:8c:08:d7:47:
f8:50:46:c1:4f:65:98:a5:9f:85:ea:65:57:ce:69:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0/22
45.128.224.0/22
91.213.39.0/24
91.228.64.0/22
92.246.88.0/22
194.4.164.0/22
195.20.137.0/24
IPv6:
2a0d:8540::/29
2a0e:4240::/29
2a11:500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39450
Signature Algorithm: sha256WithRSAEncryption
53:9a:b6:0f:59:50:f7:21:8c:16:db:d1:8e:f0:26:e7:ca:29:
9f:2b:19:65:32:f9:1d:3a:5c:0e:de:70:c3:2e:59:72:c6:f0:
cb:f3:33:d8:bc:15:2f:67:00:76:b5:c5:58:d4:8f:0d:38:34:
2f:a3:4f:5e:81:b1:86:27:a8:90:32:5c:48:de:19:ca:47:2d:
13:bb:d6:79:88:06:f0:22:50:7c:9c:f2:ec:aa:2e:49:b4:4c:
d6:f0:f8:85:22:1f:1a:00:58:5b:48:b2:a6:9d:96:5d:8e:42:
56:b0:56:ab:a7:f1:95:17:06:b6:32:fa:1c:4d:6d:7d:72:32:
b2:8e:70:33:a3:47:ce:40:46:06:b7:c6:fe:e3:de:cb:c9:6a:
7f:1d:cc:68:e3:59:61:92:38:72:d9:26:6c:d1:6e:ed:78:27:
23:b3:24:da:69:34:a9:e4:32:f3:aa:68:94:36:e2:59:51:0c:
20:b9:78:ef:a7:97:6b:57:24:e3:76:0f:ce:cb:3f:64:9e:7f:
f0:c1:1e:a9:72:b7:59:6a:27:3c:9c:78:5a:2e:b9:d0:c9:8a:
4d:36:cd:3c:d9:92:72:8a:96:34:2d:0c:56:af:8e:98:d7:06:
27:0c:f1:43:b1:76:8c:75:d5:b3:5b:66:48:5c:88:5c:24:06:
d6:d7:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:25:22 2026 by rpki-client