Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer (raw, json)
Hash identifier: mKOsPjpROeDs9d4A2IwD5vgCOm0WebhnN2CXnqtGr9A=
Subject key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00E87EB800AD89164F0987974EF80BD61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 07:03:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208048
IP: 88.135.75.0/24
IP: 193.134.100.0/23
IP: 2a09:9580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:87:eb:80:0a:d8:91:64:f0:98:79:74:ef:80:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 07:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:e9:35:1e:a0:36:5b:fa:41:97:51:38:61:
69:a7:4c:78:5f:d4:ff:c4:52:97:92:22:ae:54:9d:
8c:7b:a8:98:f3:94:07:5a:4c:29:de:d6:77:82:95:
1c:fc:1e:03:bd:fd:18:83:4f:78:79:fc:e5:ad:88:
74:36:bf:df:2e:0d:a1:29:7b:c5:c9:98:91:76:a0:
fa:21:0a:da:d7:ee:62:ad:bd:14:5e:29:b9:be:3d:
5b:80:cb:76:f1:5e:08:62:2b:75:80:8a:20:b6:d9:
9a:07:33:48:a5:32:45:af:22:27:4d:da:0d:41:84:
92:5b:c6:9d:53:16:4c:ca:d6:bd:2a:ba:9d:5f:55:
f7:51:8a:77:33:b4:de:46:99:2e:c5:7b:de:d3:75:
aa:aa:a4:5a:56:35:62:c0:77:a8:7a:39:c4:a4:7d:
5d:41:08:8c:36:67:b5:d1:eb:1b:c3:68:9a:de:66:
b2:fd:b5:b8:41:bb:2b:61:81:04:72:49:02:d3:85:
d0:de:a8:55:60:ce:46:b1:68:6f:54:0f:c3:38:52:
71:29:d6:2f:b8:92:ab:ef:8c:10:29:7a:5e:72:90:
e2:40:29:96:96:88:a8:c0:ff:de:3c:ed:51:73:6d:
d1:96:cf:c5:05:31:3d:21:45:28:f4:47:ad:af:61:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.75.0/24
193.134.100.0/23
IPv6:
2a09:9580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208048
Signature Algorithm: sha256WithRSAEncryption
08:2b:be:c0:4b:c8:ea:cc:01:af:10:75:29:36:5c:94:50:79:
8e:0b:d4:d4:76:ee:fb:6c:9e:5f:0e:ff:8f:a0:08:00:ec:f3:
62:1c:a4:fa:1a:5d:44:f6:e0:26:cc:d9:2c:c4:62:0b:aa:a4:
5c:4b:b9:f8:90:e1:6d:d8:56:01:c9:ff:57:20:84:35:98:94:
eb:01:80:79:af:fe:69:ef:22:4a:24:5a:11:ab:28:fb:ae:eb:
6b:43:ff:2b:c6:81:87:13:75:15:a6:2a:b7:d1:66:35:16:90:
bc:fb:6d:3c:e3:ba:29:9c:10:c6:a4:9e:8a:2e:a6:25:0d:97:
c1:14:3e:73:a7:19:cd:e2:e1:43:ac:9c:54:36:b9:df:75:14:
4f:35:51:17:7e:4e:bf:b2:50:6f:12:95:7f:e1:ac:06:37:9f:
20:46:bf:c5:71:10:3a:3d:c9:6b:57:60:c0:2b:5a:b6:97:ef:
00:2d:81:44:2e:90:00:ce:b8:3a:6a:a7:a0:68:0d:95:05:3e:
09:fe:37:c9:b8:ce:5b:08:4c:86:40:0f:eb:5c:3c:0f:49:cc:
32:76:31:0c:86:17:d4:c2:a2:c0:0f:cc:19:7c:65:bd:e6:9b:
53:da:28:b8:94:5c:a5:1c:d7:79:79:ed:8e:ac:a0:9a:55:6d:
7c:46:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:40 2026 by rpki-client