Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
File: b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer (raw, json)
Hash identifier: Vn2k8b4s13XubqWw5D56WZjDZyZJGeOylHwm+m+fklM=
Subject key identifier: 6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F600F49178825C25569CCAC2BEEA297C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jul 2026 09:57:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a09:dd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:0f:49:17:88:25:c2:55:69:cc:ac:2b:ee:a2:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 09:57:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f440c018544050e5ced0252080f7e8348b00a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:99:d0:39:55:ce:be:45:ec:5b:bc:7a:27:
c4:f4:66:c6:7c:79:a6:ca:e6:69:8e:03:1b:7d:be:
a5:59:4f:80:0f:bc:a2:6e:66:71:5b:b7:a1:4e:af:
4b:5b:d1:fb:30:cf:e2:69:4a:5f:c6:c7:67:1c:89:
ff:f7:af:2a:82:2b:50:76:3e:ff:4c:66:9a:b0:85:
d9:bc:bf:5e:ed:ed:c3:d3:23:6f:eb:3a:07:fe:a9:
15:df:66:34:23:29:5e:9a:73:e2:72:60:39:d7:5c:
3b:b0:d6:11:f3:7a:45:d2:f9:99:e4:a5:08:df:68:
c1:3b:ef:4e:e5:25:91:e4:51:2e:ea:04:50:d4:90:
d0:58:3f:c1:5d:9e:10:64:f6:e1:c0:16:5d:15:6e:
26:97:e0:03:0c:f5:15:62:b2:7a:41:c4:7a:c0:2a:
2e:57:1c:9d:f0:74:7d:98:d7:11:3c:6f:ec:9e:71:
45:2f:e2:4e:3b:87:8f:1c:3f:86:cc:c7:55:15:bf:
28:16:ae:b3:6f:db:64:fa:34:da:62:4c:0c:fc:a7:
0e:28:77:db:54:08:b8:0b:7d:20:05:e2:f0:8e:8e:
ba:7f:21:43:64:69:26:fe:b0:dd:f3:c4:31:36:3f:
91:7b:2e:f4:bb:4a:05:b7:e7:20:44:3f:0e:42:eb:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
51:47:25:ec:0f:24:c3:87:80:1d:3f:80:05:fd:57:fc:9a:37:
eb:40:35:81:7b:19:35:fe:08:54:49:eb:cd:b3:7c:ce:67:ed:
ff:e8:07:06:90:a0:31:0d:0e:bd:a3:0e:28:9a:49:6e:88:d6:
bf:f6:4c:0b:c4:9a:ce:a9:4e:f8:44:32:17:a4:eb:ae:14:cf:
1a:d8:2f:30:a4:f4:2f:d3:74:91:a1:45:f5:88:f2:e9:ae:56:
dd:57:8f:28:07:12:5d:f5:b9:9f:e8:b6:9e:6b:80:5d:2a:98:
94:9e:34:01:79:a9:71:ff:d2:4a:fc:33:07:aa:fd:d9:ae:8b:
f4:52:9c:0e:5f:3e:5e:57:6c:c0:fd:84:54:d5:02:b3:28:69:
7a:8e:44:20:ee:46:6c:bd:3d:5d:2e:a3:11:d6:57:be:3d:70:
3c:99:54:34:c6:6f:1e:ed:ae:2a:1b:b4:e2:59:1d:e2:d2:9c:
a6:db:c4:07:be:da:91:4d:76:c8:7e:10:2c:fa:7a:e0:0d:85:
2c:e8:0f:cf:09:5c:04:25:dd:0c:26:5b:bb:b0:ed:a7:7d:7e:
c0:c4:85:56:a4:41:07:0b:78:01:c6:13:38:2f:03:98:48:ff:
f6:6a:2a:f3:8f:1b:e6:5c:69:79:fa:cc:ad:01:ea:10:9c:89:
b1:c6:1f:62
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ9gD0kXiCXCVWnMrCvuopfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzE0MDk1NzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ0MGMwMTg1NDQwNTBlNWNlZDAyNTIwODBmN2U4MzQ4YjAwYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhSZ0DlVzr5F7Fu8eifE9GbGfHmm
yuZpjgMbfb6lWU+AD7yibmZxW7ehTq9LW9H7MM/iaUpfxsdnHIn/968qgitQdj7/
TGaasIXZvL9e7e3D0yNv6zoH/qkV32Y0IylemnPicmA511w7sNYR83pF0vmZ5KUI
32jBO+9O5SWR5FEu6gRQ1JDQWD/BXZ4QZPbhwBZdFW4ml+ADDPUVYrJ6QcR6wCou
Vxyd8HR9mNcRPG/snnFFL+JOO4ePHD+GzMdVFb8oFq6zb9tk+jTaYkwM/KcOKHfb
VAi4C30gBeLwjo66fyFDZGkm/rDd88QxNj+Rey70u0oFt+cgRD8OQuvUIwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFG9EDAGFRAUOXO0CUggPfoNIsAoyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2IzNjMz
Yy1iMTk2LTRmNDYtOTIwMy05YjFmNTlkZmMyMzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYjM2MzNj
LWIxOTYtNGY0Ni05MjAzLTliMWY1OWRmYzIzNC8xL2IwUU1BWVZFQlE1YzdRSlND
QTktZzBpd0NqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgndgDANBgkqhkiG9w0BAQsFAAOCAQEAUUcl
7A8kw4eAHT+ABf1X/Jo360A1gXsZNf4IVEnrzbN8zmft/+gHBpCgMQ0OvaMOKJpJ
bojWv/ZMC8SazqlO+EQyF6TrrhTPGtgvMKT0L9N0kaFF9Yjy6a5W3VePKAcSXfW5
n+i2nmuAXSqYlJ40AXmpcf/SSvwzB6r92a6L9FKcDl8+XldswP2EVNUCsyhpeo5E
IO5GbL09XS6jEdZXvj1wPJlUNMZvHu2uKhu04lkd4tKcptvEB77akU12yH4QLPp6
4A2FLOgPzwlcBCXdDCZbu7Dtp31+wMSFVqRBBwt4AcYTOC8DmEj/9moq848b5lxp
efrMrQHqEJyJscYfYg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 23:07:46 2026 by rpki-client