Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
File: g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer (raw, json)
Hash identifier: cMRQP7nRD4Qpsy2NffsQJe0YQV5+/9njFT7YcQrwz4M=
Subject key identifier: 83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF530E2DFA227CBB3EB36BBBB90A21D55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 08:57:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.14.48.0/22
IP: 2a03:aa40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:30:e2:df:a2:27:cb:b3:eb:36:bb:bb:90:a2:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 08:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83de67d35120f58feb42f1742975246e3e86858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:63:58:f6:48:94:9b:8c:37:cb:87:03:b1:
70:25:67:2a:89:a1:4c:16:fc:f5:ad:08:d1:d4:24:
60:d4:28:35:46:12:63:2f:99:2e:d7:90:e3:d8:da:
04:4f:83:ec:fb:c3:c9:62:37:4c:9a:e4:99:c6:13:
48:ef:c7:16:e3:1b:0a:f1:5a:be:a0:5c:88:20:21:
1f:6e:86:81:9c:aa:95:9e:33:bc:8e:48:88:34:de:
6e:dc:c7:f1:0a:c3:77:4b:1c:83:d4:84:32:99:b9:
3e:96:4e:a4:87:6b:df:6f:5e:0b:68:ee:75:9d:53:
5d:bf:0c:26:68:8b:4f:00:03:a6:d7:d8:9e:05:1b:
74:ee:ed:c4:80:0f:0d:89:23:2d:60:cc:fc:8c:cf:
75:85:11:b3:19:80:4c:3f:50:0d:12:8e:61:6c:e7:
b7:fd:4c:51:bd:cd:eb:0e:5d:eb:24:b2:e6:cf:4a:
da:d3:45:3a:2c:51:fc:83:84:54:54:d8:37:7f:78:
57:d2:61:77:66:50:42:ab:ea:23:fc:e7:3c:9b:29:
3f:eb:17:9b:7d:df:df:ac:1b:ca:53:87:a0:b8:e6:
65:e3:88:00:f0:1a:c9:75:bc:ac:64:a4:3d:07:3c:
b8:eb:78:79:5d:91:a9:83:bf:75:75:b1:4b:7c:34:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.48.0/22
IPv6:
2a03:aa40::/32
Signature Algorithm: sha256WithRSAEncryption
75:f1:f7:d1:fa:56:c5:c9:10:f4:c5:b7:94:01:f5:0c:b1:6a:
15:08:7e:7b:fb:11:4a:62:73:4b:4c:6b:52:b6:b7:95:e9:e7:
49:97:61:f5:4b:71:f2:b5:62:81:f0:f2:16:1f:19:86:75:cb:
27:fd:3b:23:0c:a7:a9:b1:01:16:26:60:8d:8c:81:ad:52:95:
13:27:5d:c2:4b:b1:ca:91:25:06:f4:72:6e:b5:f5:95:87:de:
7c:50:50:a3:4e:93:84:4e:47:36:1e:73:09:d8:19:a2:72:2b:
34:15:ea:d8:9d:35:07:1d:e7:7f:02:7f:6f:1d:0f:d3:49:1e:
a3:a1:77:0b:ab:a9:70:10:d2:11:80:62:a6:e5:9c:42:c2:d6:
1e:91:f8:fb:5f:8f:48:d2:66:7c:09:a3:16:ae:70:56:64:d5:
15:b9:f4:fe:07:31:d1:ef:78:83:0b:e2:3c:bb:5f:b9:49:62:
c7:8e:90:cf:59:e1:b4:c1:0f:57:d7:a2:9a:75:29:fa:a3:c8:
75:ef:14:f3:af:32:fc:6f:b1:a6:7e:a7:86:04:3f:17:91:2c:
c4:dc:28:21:f6:5d:f7:e1:96:36:fb:b6:eb:2a:22:cc:cf:71:
cf:0d:a1:c7:be:92:3d:7e:d5:66:98:aa:37:e3:eb:c4:d8:4e:
f1:dc:7b:0f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ/1MOLfoifLs+s2u7uQoh1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODEyMDg1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2RlNjdkMzUxMjBmNThmZWI0MmYxNzQyOTc1MjQ2ZTNlODY4NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX1jWPZIlJuMN8uHA7FwJWcqiaFM
Fvz1rQjR1CRg1Cg1RhJjL5ku15Dj2NoET4Ps+8PJYjdMmuSZxhNI78cW4xsK8Vq+
oFyIICEfboaBnKqVnjO8jkiINN5u3MfxCsN3SxyD1IQymbk+lk6kh2vfb14LaO51
nVNdvwwmaItPAAOm19ieBRt07u3EgA8NiSMtYMz8jM91hRGzGYBMP1ANEo5hbOe3
/UxRvc3rDl3rJLLmz0ra00U6LFH8g4RUVNg3f3hX0mF3ZlBCq+oj/Oc8myk/6xeb
fd/frBvKU4eguOZl44gA8BrJdbysZKQ9Bzy463h5XZGpg791dbFLfDSMGwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIPeZ9NRIPWP60LxdCl1JG4+hoWMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzFhMzAw
Yi1iYTg3LTRmMzgtOWRiMi01NTA3NDVjY2RlYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMWEzMDBi
LWJhODctNGYzOC05ZGIyLTU1MDc0NWNjZGViMC8xL2c5NW4wMUVnOVlfclF2RjBL
WFVrYmo2R2hZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ4wMA0EAgACMAcDBQAqA6pAMA0GCSqGSIb3
DQEBCwUAA4IBAQB18ffR+lbFyRD0xbeUAfUMsWoVCH57+xFKYnNLTGtStreV6edJ
l2H1S3HytWKB8PIWHxmGdcsn/TsjDKepsQEWJmCNjIGtUpUTJ13CS7HKkSUG9HJu
tfWVh958UFCjTpOETkc2HnMJ2Bmicis0FerYnTUHHed/An9vHQ/TSR6joXcLq6lw
ENIRgGKm5ZxCwtYekfj7X49I0mZ8CaMWrnBWZNUVufT+BzHR73iDC+I8u1+5SWLH
jpDPWeG0wQ9X16KadSn6o8h17xTzrzL8b7GmfqeGBD8XkSzE3Cgh9l334ZY2+7br
KiLMz3HPDaHHvpI9ftVmmKo34+vE2E7x3HsP
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:40:28 2026 by rpki-client