Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.cer (raw, json)
Hash identifier: n1ATOIvasED2Q3BuhHmzfVBaeU1GteRF7MuD07/ubhc=
Subject key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2AFD5D89859CC92D592D23008B63FDFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 16:32:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62044
IP: 87.58.64.0/18
IP: 137.31.0.0/16
IP: 147.161.128.0/17
IP: 159.254.0.0/16
IP: 164.137.0.0/16
IP: 185.46.212.0/22
IP: 194.9.96.0 -- 194.9.116.255
IP: 220.42.0.0/15
IP: 2a03:eec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:fd:5d:89:85:9c:c9:2d:59:2d:23:00:8b:63:fd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 16:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:99:16:f6:6e:c6:5b:2a:aa:6e:9c:20:c9:
19:4c:68:68:52:40:02:3f:24:a0:69:ce:af:5d:6a:
97:23:6b:b4:b6:3f:62:c5:0c:f6:36:fc:c7:e9:13:
e4:2c:fa:20:38:e5:fb:96:55:59:48:bd:08:99:28:
7b:ab:1d:ff:6d:53:98:cf:c2:10:ea:74:98:92:c4:
e1:84:c0:c4:0e:46:d3:32:b7:1d:1c:4b:a3:22:35:
6c:be:ef:a4:3b:36:9a:ba:d4:d3:4a:49:8b:6a:5b:
00:83:98:28:cb:cd:42:27:35:d3:ea:05:98:76:70:
79:73:e4:37:c5:35:d8:6b:54:5f:04:14:c1:ad:4e:
d8:ba:44:5e:ce:c7:46:89:0f:ad:1f:b7:2b:48:08:
c8:40:b7:af:77:6d:36:f6:ab:4d:aa:48:8b:b7:b4:
3f:3a:86:39:bf:34:a9:74:ec:99:ba:b0:dc:37:52:
67:b4:b1:e9:7d:29:1d:1c:13:3f:a7:89:8a:7d:e3:
17:f5:db:54:e9:72:6d:89:e9:68:b3:58:1b:39:0d:
90:37:4d:66:9a:92:85:95:9d:cf:6d:1a:1d:7b:9a:
60:34:9c:41:6d:bf:84:96:17:cc:e2:36:4f:8c:54:
b3:81:29:be:11:7c:a1:ba:ea:54:1d:c3:9b:a4:20:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/18
137.31.0.0/16
147.161.128.0/17
159.254.0.0/16
164.137.0.0/16
185.46.212.0/22
194.9.96.0-194.9.116.255
220.42.0.0/15
IPv6:
2a03:eec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62044
Signature Algorithm: sha256WithRSAEncryption
1e:bf:8d:74:9a:81:0b:75:f1:92:4a:aa:06:9f:57:97:1b:a9:
3a:f7:52:d1:79:8e:8c:6f:e0:a6:60:35:ef:1f:fb:41:8f:19:
d6:79:c8:bc:b8:a9:cc:f6:9b:f4:d6:99:1e:37:4b:ae:9a:0b:
62:60:a8:80:91:40:30:9b:48:82:00:c2:68:c7:04:ab:f2:bc:
70:d6:74:29:73:e6:85:a4:5d:5c:b3:82:fc:70:49:5c:12:7b:
51:48:88:d8:b4:32:14:2e:6a:23:f7:07:f9:c3:5f:f7:4b:49:
0d:e2:77:61:06:f3:de:f8:b0:6b:51:c4:ee:3a:53:fa:5f:5a:
1b:73:c1:58:cb:32:d8:06:51:27:ae:60:77:7c:21:97:a2:07:
51:24:b2:94:a3:69:1c:69:0a:a5:6f:db:09:4c:7f:5b:fe:1e:
dd:d7:fa:03:0e:45:4b:d9:51:19:b2:b3:4b:78:59:b4:eb:2c:
c7:94:2a:39:82:4b:8f:78:d3:3a:7f:1b:d4:7b:59:75:86:e7:
d5:23:4d:6d:82:8b:8c:cb:31:b7:e5:97:ba:3b:57:f0:87:dd:
44:45:25:cf:bf:aa:9a:da:da:fa:00:89:98:2a:4f:cf:fa:32:
7a:9b:93:3e:e7:4c:2e:37:36:3c:d3:79:c1:a3:7d:9d:5d:5b:
0b:f8:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:55:59 2026 by rpki-client