Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
File: tRidnqgtX7tm1sEfGHYzR2A04N4.cer (raw, json)
Hash identifier: HIGAQw89Zx41DcDsUk+KXQBMUGEgS/9WTJCmBIUAxpU=
Subject key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED58C7DD89BCB93CCC82A21413D5BE9A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Jun 2026 12:26:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210574
IP: 5.250.253.0/24
IP: 46.36.201.0/24
IP: 2a11:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:8c:7d:d8:9b:cb:93:cc:c8:2a:21:41:3d:5b:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 17 12:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:da:3e:95:96:b7:80:03:2d:e7:55:bb:f9:
7a:37:18:7c:8f:d0:19:46:98:98:1b:28:0c:0f:3a:
b1:08:6a:28:3b:d6:2d:0f:e7:61:79:81:08:42:86:
a6:e2:53:bf:48:b9:30:f8:c7:b7:12:e8:8c:db:8b:
01:e9:4d:cb:f4:29:cb:6e:84:d5:b5:59:4c:32:92:
a9:61:a6:66:0c:54:56:ae:ec:76:7e:cf:78:d1:91:
d4:40:4b:43:b1:c7:ea:39:89:f5:1c:c4:57:9e:9d:
92:38:7c:a9:27:fe:5a:7c:d0:b8:e5:79:7d:da:85:
1d:2f:38:ce:c0:49:1f:9b:d0:27:30:29:f7:cc:4c:
98:ae:fe:b7:96:39:31:c1:c4:bf:6e:08:07:89:66:
2a:2f:4b:8e:3a:df:4b:37:47:24:0a:be:3a:52:65:
58:6f:29:27:c0:8c:bb:c7:da:65:5f:9e:43:ae:a0:
f5:cb:c4:df:fa:f4:0e:e1:7e:37:46:64:27:85:43:
dd:07:18:9c:4f:b7:7d:a4:a4:13:35:18:84:81:b0:
8e:14:e5:88:13:f2:ea:51:71:f9:d3:b4:6b:b9:c6:
12:a4:eb:73:66:79:a3:24:df:24:a8:4a:00:18:e9:
2c:b7:97:e7:42:d2:bf:c9:bc:9f:4b:6c:be:7a:d8:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
46.36.201.0/24
IPv6:
2a11:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210574
Signature Algorithm: sha256WithRSAEncryption
10:4d:1f:15:1b:53:d3:cb:d2:e3:54:b1:bf:7c:df:c1:7b:f1:
89:42:d6:04:6a:7f:d3:ae:77:ce:b9:73:68:19:bc:dd:96:f7:
76:1a:91:71:be:21:f6:93:1b:78:49:09:c8:08:ad:09:3f:6f:
f8:1c:fc:2c:34:fa:c1:22:3c:42:46:ee:ad:7b:1c:c3:83:a4:
d7:87:4f:95:76:a2:4b:3c:0e:76:0f:b8:7c:8d:71:c2:b3:82:
22:5e:b7:78:20:36:c3:b6:5f:9f:f8:4e:3a:6d:01:e8:d9:f4:
c2:3b:79:b5:f3:00:cc:96:14:0e:e9:56:fe:d7:1e:0a:62:63:
1e:8b:19:34:10:39:42:a4:eb:d5:94:8e:08:42:02:cc:8d:13:
bb:56:e6:df:aa:ec:35:4c:f8:ea:90:65:4e:02:16:52:cf:45:
9f:b9:f4:03:84:5c:08:ae:dc:fa:8b:17:34:d2:e1:a3:ec:b7:
37:96:84:ec:d0:7b:0f:08:44:43:7e:af:2f:81:10:3d:14:01:
87:2f:17:d4:87:e0:2d:45:a9:f3:08:59:3a:34:49:56:d9:f7:
98:b2:bf:cc:cf:8e:92:87:9a:49:4f:97:1c:e4:85:fc:b7:be:
71:7b:c8:8b:f9:ca:3d:cc:6a:03:c8:85:e3:fd:4c:ec:39:e0:
c6:80:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:03:45 2026 by rpki-client