Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.cer (raw, json)
Hash identifier: CrKSP537a9pn53GwI/dfqRoeUtxr4vLbPW/LgLr38hU=
Subject key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13A8BF4F4A4A5DB99BC42C055D4818959
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Oct 2026 13:13:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 89.35.118.0/24
IP: 149.62.34.0/24
IP: 159.200.208.0/24
IP: 185.70.28.0/22
IP: 2a05:2800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:8b:f4:f4:a4:a5:db:99:bc:42:c0:55:d4:81:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 13:13:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:ea:59:93:05:7a:43:ae:ed:13:dc:fb:0b:
15:32:e1:d3:74:71:aa:2c:a4:36:9b:22:04:47:87:
68:b7:ce:63:9b:e9:c3:84:ab:ad:63:97:af:92:6b:
83:5f:98:b6:3a:72:c9:24:9b:d8:dc:c0:ea:a3:cd:
01:fd:1c:d0:d0:c6:ef:c3:59:2f:4e:5f:f9:53:3b:
cb:b6:ab:9f:0f:d2:f7:a8:ae:b9:61:ed:23:2a:58:
ea:2a:bf:4a:ce:60:be:33:40:7e:41:49:f7:6f:25:
c9:14:57:e8:ce:40:bc:5c:ef:1e:81:32:c6:82:ff:
73:32:b1:7b:76:c8:36:58:15:ac:70:a3:75:0e:60:
aa:05:12:70:d2:7a:82:b2:14:49:a7:94:68:91:11:
e4:77:82:2d:8b:69:dc:80:2c:dc:52:0b:20:de:48:
1f:44:5a:36:3e:ed:18:19:95:6a:14:a1:24:cf:64:
cc:8c:c0:6f:36:34:00:24:39:cc:66:c2:8b:5b:3a:
f6:95:62:e8:b1:cf:7c:34:89:22:02:68:02:5c:b3:
89:d3:ba:12:2a:1a:84:31:4b:5b:86:f0:41:4a:71:
2d:ac:56:44:25:2b:72:2a:28:96:99:ad:42:7c:a8:
d4:2a:43:2c:42:69:7e:51:16:17:85:c4:aa:63:09:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.118.0/24
149.62.34.0/24
159.200.208.0/24
185.70.28.0/22
IPv6:
2a05:2800::/29
Signature Algorithm: sha256WithRSAEncryption
7d:70:53:4a:3b:3f:16:28:41:2f:b3:0a:9c:ff:94:16:68:17:
b5:a7:8d:b2:47:d4:88:42:09:72:1c:24:a9:95:46:65:d2:cc:
b3:47:14:49:a6:d4:82:1b:34:2f:09:31:7b:14:5a:c2:d4:f8:
a5:dc:ca:ab:cc:82:30:99:f5:68:d3:44:37:9e:66:69:29:4d:
d3:fe:64:60:5a:40:25:c4:e0:f9:88:0a:e1:59:e1:76:f9:b0:
07:c1:b5:85:9e:fe:42:8b:a4:f9:5b:8a:21:75:1a:18:5f:87:
a7:49:b8:26:25:99:20:fe:fd:c9:67:a9:04:44:92:4b:98:17:
1f:a1:b3:93:a6:54:a8:36:ee:6d:27:cf:ac:0e:92:f5:14:49:
92:4d:43:71:6b:77:70:a3:1f:d8:a7:43:bc:d4:3a:e5:35:6a:
6e:a6:29:22:fb:27:bc:39:ef:09:62:c5:e6:ea:19:44:b7:6a:
58:46:e2:ee:f9:30:26:84:ca:c5:35:44:de:7d:50:98:d7:70:
f3:2d:ff:89:46:57:71:55:ce:91:36:ec:aa:66:0d:3e:c4:b8:
ff:e1:8f:ea:d2:fe:d4:d3:01:e9:01:ac:9d:6e:df:31:fe:2a:
be:20:51:a9:dd:9d:4f:cb:fb:1b:99:91:59:d1:24:6a:e9:e4:
7c:57:a9:62
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAaE6i/T0pKXbmbxCwFXUgYlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDE0MTMxMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTU5ZDQ2OTM1NTViOWYyYWQ2ODA3YmFjZWRjNGI1YTJlNzAxYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI/qWZMFekOu7RPc+wsVMuHTdHGq
LKQ2myIER4dot85jm+nDhKutY5evkmuDX5i2OnLJJJvY3MDqo80B/RzQ0Mbvw1kv
Tl/5UzvLtqufD9L3qK65Ye0jKljqKr9KzmC+M0B+QUn3byXJFFfozkC8XO8egTLG
gv9zMrF7dsg2WBWscKN1DmCqBRJw0nqCshRJp5RokRHkd4Iti2ncgCzcUgsg3kgf
RFo2Pu0YGZVqFKEkz2TMjMBvNjQAJDnMZsKLWzr2lWLosc98NIkiAmgCXLOJ07oS
KhqEMUtbhvBBSnEtrFZEJStyKiiWma1CfKjUKkMsQml+URYXhcSqYwm6ewIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFMVZ1Gk1VbnyrWgHus7cS1oucBpIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzNmMGY4
Yi1hZjkzLTQyM2ItYmVhNS1kMmUzNTE2MDk3NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvM2YwZjhi
LWFmOTMtNDIzYi1iZWE1LWQyZTM1MTYwOTc1OS8xL3hWblVhVFZWdWZLdGFBZTZ6
dHhMV2k1d0drZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQAWSN2AwQAlT4iAwQAn8jQAwQCuUYcMA0EAgAC
MAcDBQMqBSgAMA0GCSqGSIb3DQEBCwUAA4IBAQB9cFNKOz8WKEEvswqc/5QWaBe1
p42yR9SIQglyHCSplUZl0syzRxRJptSCGzQvCTF7FFrC1Pil3MqrzIIwmfVo00Q3
nmZpKU3T/mRgWkAlxOD5iArhWeF2+bAHwbWFnv5Ci6T5W4ohdRoYX4enSbgmJZkg
/v3JZ6kERJJLmBcfobOTplSoNu5tJ8+sDpL1FEmSTUNxa3dwox/Yp0O81DrlNWpu
piki+ye8Oe8JYsXm6hlEt2pYRuLu+TAmhMrFNUTefVCY13DzLf+JRldxVc6RNuyq
Zg0+xLj/4Y/q0v7U0wHpAaydbt8x/iq+IFGp3Z1Py/sbmZFZ0SRq6eR8V6li
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:20:30 2026 by rpki-client