Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
File: 1-10-EU-84s8PkgQxxWp8c9_aWn4.cer (raw, json)
Hash identifier: suyOR6BCaVVaYtXBUkjL4RUpDs/eWUz7Dg3jz370kAE=
Subject key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EACBB669FA83A2129CD76E98BE4C3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57032
IP: 2.57.239.0/24
IP: 185.119.192.0/22
IP: 2a12:9bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:cb:b6:69:fa:83:a2:12:9c:d7:6e:98:be:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:56:50:81:67:b5:3c:08:aa:f5:87:16:95:
c5:a3:d9:8d:97:5c:bf:6e:7a:8c:70:a3:2d:4b:a8:
ba:c7:83:0a:28:1c:da:4a:24:f5:14:69:9e:f2:3e:
65:a4:81:89:cd:19:93:d9:20:a9:02:33:83:46:b1:
10:d1:31:95:08:ce:da:4f:14:fc:75:49:43:0c:14:
5e:dd:6b:be:97:d2:28:ab:ac:07:40:09:eb:c9:a5:
0f:43:c0:6e:84:1d:06:9c:57:8f:1e:d8:21:37:a6:
02:df:7f:9a:59:ee:1c:e6:ef:45:d6:f3:2b:3c:e7:
e3:64:60:82:99:88:65:e8:fa:81:67:5f:a0:c4:25:
71:ea:be:7f:82:0a:ec:ed:3e:64:7a:19:08:b3:7b:
c2:02:54:7f:5a:28:89:83:3c:23:b3:a9:27:09:1e:
77:e2:d5:a8:2c:56:c3:00:c5:33:4e:06:17:84:c1:
c5:71:b5:5a:1b:7b:12:71:ae:fd:91:55:fd:2c:5f:
98:d5:41:37:d0:89:04:29:d8:81:cf:40:6c:d9:d4:
09:c9:f8:0e:51:45:e7:7a:34:2e:bd:02:80:02:72:
d4:0e:48:d3:0b:76:c9:68:c0:6d:fa:87:7a:3a:17:
17:ed:00:4b:11:3e:db:4b:a9:f6:13:fd:e5:39:e8:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.239.0/24
185.119.192.0/22
IPv6:
2a12:9bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57032
Signature Algorithm: sha256WithRSAEncryption
13:63:ed:bb:f8:c6:15:b1:88:bd:f9:02:eb:ff:ce:6b:e1:5c:
c6:cd:3c:8d:6b:c0:63:bd:51:0f:17:8c:cf:a5:03:ff:24:3f:
d5:76:54:b2:0f:33:f5:a0:3b:28:7a:9e:94:68:ee:3d:f3:92:
cb:52:8a:22:8e:dd:2c:59:13:f4:c9:a5:3a:0a:0a:e0:37:4f:
5b:2f:82:9b:53:bd:4a:c7:4f:c4:a7:a6:73:b8:77:17:fb:b8:
8b:96:6b:55:50:90:a0:01:f5:81:be:b8:d5:fc:76:54:88:fb:
ea:96:d3:ad:88:55:31:8d:8e:60:f1:e8:7f:55:32:76:31:52:
7e:d9:db:e0:b8:37:b2:5b:59:0e:17:8f:2e:1a:96:c5:9e:a2:
53:56:5f:78:42:d6:22:91:ee:74:f9:d9:64:cd:53:c9:69:8b:
7f:e3:18:1a:e0:24:40:d3:85:61:5d:9f:f3:6a:26:93:03:5d:
f6:e3:6e:6f:b6:7b:c2:d8:b8:77:e0:24:9b:2d:61:94:18:0a:
1d:0f:b0:bf:01:5a:97:b6:e2:b9:bc:50:54:a8:94:a7:38:31:
44:01:41:6c:87:ca:41:c9:ba:10:01:65:06:21:c0:a5:03:ec:
4f:01:42:85:e1:19:db:07:82:3f:0b:63:f6:a5:65:a8:d8:e3:
ec:c0:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:55 2026 by rpki-client