Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
File: XR-BeSG87Mrq4pwm0iXksxVoUtM.cer (raw, json)
Hash identifier: qhHSExPegC4vOGEn/S+7RSf3InCdyFmU6PtCdj2YKJM=
Subject key identifier: 5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA54215BD573DA3B67E05C0A473C7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215037
IP: 81.177.208.0/22
IP: 194.117.65.0/24
IP: 2a0d:100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:54:21:5b:d5:73:da:3b:67:e0:5c:0a:47:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:30:73:45:4f:86:d2:5f:66:80:a7:42:66:03:
dd:78:b9:b1:72:ae:24:55:43:72:76:90:e8:52:88:
01:f8:50:43:20:23:df:91:d2:2c:8a:1c:9f:1c:4d:
59:55:27:2b:7c:b8:46:37:c4:0d:64:e0:a0:00:7a:
99:4f:91:99:5c:87:34:5d:ef:80:ea:d3:0f:47:d0:
a7:be:c8:56:d4:c9:22:4a:5d:d9:63:5d:7e:7f:0f:
8d:fb:b7:73:5e:02:96:76:da:ce:a6:b7:f0:e0:74:
1d:e0:92:a3:60:f7:dc:cf:35:12:52:6f:e5:36:e7:
7c:05:32:a2:d6:fe:94:69:3f:ad:6b:be:ac:c8:22:
9a:54:f1:d9:c8:fb:45:6e:b1:66:27:71:16:3c:d6:
68:8a:cc:88:49:6a:89:cc:80:56:b8:f9:15:be:22:
22:1a:9f:ee:5a:5d:94:19:5a:aa:93:1d:be:04:b3:
89:82:16:5f:45:1a:5f:f9:d8:e3:8b:88:1b:bf:a7:
86:f5:bb:df:62:ae:3e:3c:f6:89:a4:4a:8b:9e:0b:
a3:40:7d:99:b7:04:ad:6a:31:3a:0c:55:27:1f:36:
17:04:ac:3d:0b:25:7e:2b:33:98:02:6d:39:25:26:
09:ef:ec:ca:b1:04:65:7a:4d:55:cf:64:33:5e:7d:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.208.0/22
194.117.65.0/24
IPv6:
2a0d:100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215037
Signature Algorithm: sha256WithRSAEncryption
72:0c:b9:d6:3b:27:61:fa:89:f8:8b:b4:98:b5:56:a8:90:85:
eb:dc:8c:e1:0c:12:89:0a:4b:77:41:80:e7:7e:3b:51:ff:cf:
4a:35:19:13:df:14:55:e5:ab:2b:72:04:76:c4:d2:d2:8d:62:
e1:59:18:60:b5:a5:c2:6f:d0:67:7a:b8:f3:6e:46:95:f1:a5:
e4:27:ce:31:54:80:2d:5c:98:5f:69:39:72:33:50:51:ad:b1:
11:39:f7:24:ff:72:f6:b1:27:50:f3:cd:d2:03:29:2c:a3:83:
dd:16:7b:a3:98:36:e4:06:34:75:75:79:0f:fa:69:5e:0a:c0:
b9:2b:9a:56:d7:c3:ca:5b:1e:9e:05:d8:fa:af:d9:a7:ab:27:
f0:56:b9:e8:6e:3e:a9:bd:06:ab:51:61:1d:88:f8:ac:87:2f:
ba:28:5d:20:ef:d6:13:e9:e1:c3:c9:f7:4e:2d:7a:c0:84:cc:
ec:27:83:88:9f:bf:7c:12:2d:9d:97:77:59:71:de:fb:4b:a3:
11:b6:9d:41:f8:ad:a4:41:2f:f4:c0:ef:9c:a7:f5:ca:38:09:
e3:81:90:53:9f:95:a0:0e:19:0b:ea:8c:5b:05:96:f9:59:b1:
2a:ec:7b:00:76:95:30:19:0c:9f:dd:a0:03:64:fb:8b:14:79:
19:d6:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:02 2026 by rpki-client