Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
File: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer (raw, json)
Hash identifier: cxNzOyNSzGbReZcwNeC9hgV/VmOCzfAlHG2YZqvBryU=
Subject key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D8FDC2BEE5D862AB2B9ED28D16CAE3287
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Apr 2026 06:37:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203133
IP: 185.217.216.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:dc:2b:ee:5d:86:2a:b2:b9:ed:28:d1:6c:ae:32:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 06:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:cb:6b:6f:6b:82:f3:af:b6:bf:74:54:1e:
cd:a9:2f:d4:d8:74:21:ad:ed:cb:e0:9f:bd:01:80:
79:61:11:bf:b2:50:85:18:e7:f4:c4:db:6f:b5:6c:
cb:e8:cf:96:93:40:4f:ed:ed:87:e4:24:e6:1f:13:
94:26:9d:68:4e:3e:80:c7:44:b6:7a:eb:e4:5b:4f:
1b:68:44:ed:e6:14:4c:44:4e:6a:d5:a8:16:91:55:
d8:aa:e3:67:9f:ac:b5:17:b2:10:ef:80:3e:34:b8:
ab:41:db:82:04:df:a4:f4:db:0a:3c:a7:10:92:1b:
17:03:bd:35:c2:97:c7:3b:1a:0f:80:d9:f7:f0:91:
82:c0:9d:5e:f7:5e:8d:c0:a1:22:08:08:d5:83:1b:
2b:7b:70:ea:08:41:4b:52:93:8d:de:19:00:23:86:
7c:96:05:f4:38:83:1d:a7:66:81:68:c3:c3:9a:ce:
25:15:5a:51:35:bb:3a:d7:94:86:00:a8:db:f8:f9:
cc:58:c0:45:2a:b7:68:61:e2:97:dc:ef:83:ed:fe:
a1:19:6e:e7:f6:35:6d:c6:27:8f:d4:ab:29:62:05:
7e:e3:ea:97:93:de:18:f1:41:5d:93:52:00:32:d6:
63:e9:60:ad:32:59:72:ad:8a:46:d8:46:c2:73:cc:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.216.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203133
Signature Algorithm: sha256WithRSAEncryption
33:af:f3:1f:83:f3:91:26:40:f9:bb:a8:6e:44:aa:cb:37:67:
16:d1:f7:63:2e:32:17:9e:7e:50:a5:01:fa:1a:02:7d:5b:70:
d3:a7:b7:33:ce:43:d6:d5:5e:b1:d5:74:bc:d1:24:45:b4:e1:
9c:41:25:80:b1:89:72:dd:3a:0b:4d:f1:38:95:2f:8c:f6:6d:
b9:ea:ad:75:bd:de:b7:80:eb:cf:30:c5:d3:4b:20:ec:60:38:
2e:8a:95:d9:7c:cf:d1:87:59:76:6d:4e:7f:81:1a:b0:a4:33:
17:74:c5:15:5f:c7:b8:a8:18:f4:16:de:21:47:9a:ba:64:34:
ee:5d:38:ca:09:68:68:de:17:61:41:33:60:52:1a:de:d9:ea:
3a:74:07:f6:af:7c:c8:e1:ac:a5:0a:2d:6c:22:94:60:d8:1f:
c7:42:42:84:3f:b9:5c:d7:2f:7e:30:01:70:47:34:4d:aa:4c:
6f:fe:6c:38:90:78:9f:81:2e:17:3a:5b:43:94:6e:c8:a7:ab:
7b:d0:62:8b:dd:3c:c0:65:20:59:74:90:40:d9:56:96:1b:79:
09:78:2f:18:38:72:41:4b:f2:bf:47:59:ce:21:e8:14:00:1f:
31:ea:da:00:86:25:6e:81:60:38:77:2c:96:1c:6d:32:44:fc:
94:be:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:12:44 2026 by rpki-client