Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.cer (raw, json)
Hash identifier: xlrMCxYjj+7eJCJpIkEPZ9w4iro2Bn4qXdPhao6H65M=
Subject key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC8E805AA5E13BDE5944FC8E8139038
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211734
IP: 185.147.136.0/22
IP: 2a07:3780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:e8:05:aa:5e:13:bd:e5:94:4f:c8:e8:13:90:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:56:a2:ac:bd:bc:05:5e:90:32:27:48:a5:
85:6e:a8:e4:39:61:a9:a2:f9:89:c0:e2:b5:45:12:
0b:00:11:4d:54:78:9a:cb:1a:b5:74:ce:9c:5d:4e:
6d:41:be:90:5d:ac:25:a8:31:b1:bf:62:44:da:50:
50:63:d4:9f:cd:f7:3b:62:a8:49:15:b7:ed:16:8b:
fd:ff:50:a9:a8:1a:96:71:8c:74:ab:7a:82:14:a2:
a1:15:c2:f2:da:4b:fd:cc:37:ed:43:e8:11:28:c5:
11:09:43:ab:f9:72:23:7e:ca:5c:38:99:5f:c1:cc:
f1:da:a8:c7:e8:33:b3:b7:a1:6d:91:9c:ad:5f:2e:
ba:44:bb:11:eb:b2:aa:5d:a6:5b:7e:4b:f5:3c:45:
e5:a5:42:55:07:12:6e:3e:9a:14:6b:03:12:fd:cc:
6a:b4:bc:9d:d2:ea:86:66:c1:ae:dc:9e:74:0a:9f:
0e:e4:c6:00:dd:e4:fb:b2:54:c1:97:34:0a:41:29:
b9:18:e8:0b:77:62:4e:c3:1d:fc:71:a4:eb:7c:50:
77:d0:ca:1a:68:6b:a6:30:48:37:a5:6c:ae:fa:fe:
f9:67:99:cc:4c:fd:74:c3:94:98:a6:32:54:a5:73:
93:9f:db:94:d6:3a:98:52:85:e5:fb:02:0f:a6:38:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.136.0/22
IPv6:
2a07:3780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211734
Signature Algorithm: sha256WithRSAEncryption
9c:f3:c3:c2:78:2f:a1:8c:a4:36:85:53:62:1d:e9:22:76:fc:
92:61:c0:a4:47:38:d4:e3:36:81:ac:10:68:94:e4:e4:20:ec:
ba:a4:6c:31:00:40:1f:66:e2:f6:b5:8f:2a:cc:e5:32:b5:27:
ac:81:a5:e1:bb:5b:35:e3:4f:d8:d3:ac:4e:19:48:5b:38:33:
99:f8:76:c5:52:3d:c5:6c:72:dc:dd:bf:d8:30:12:47:a6:3f:
7b:98:16:04:8e:af:a3:8e:6e:59:b8:2e:98:7c:93:37:99:c9:
82:c2:66:e2:d4:fe:a3:15:d9:3a:7a:9c:00:34:80:e0:fd:3f:
2f:34:05:c2:6b:3a:d3:51:9c:59:04:33:df:9d:b2:17:6c:7a:
1a:a7:99:49:e6:a2:e0:dc:80:c1:9d:49:d1:1a:f3:c1:6e:d2:
3d:11:b4:1a:a6:e1:72:9d:a1:c0:df:09:e1:3c:7e:cf:7a:f7:
f5:04:08:35:4f:83:6e:25:0b:fe:bd:56:9c:62:78:0d:bd:25:
c1:ae:3c:0b:77:0d:f9:f8:e9:ee:21:d5:54:10:f8:97:b0:28:
f0:19:32:6f:24:ef:85:81:bc:fb:81:b1:83:2f:0a:b1:f4:0d:
48:12:37:12:7e:00:b8:d1:2d:e7:5b:85:39:97:ac:71:09:fe:
56:7d:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:26:28 2026 by rpki-client