Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer (raw, json)
Hash identifier: jAcDm/AhKFK50cHwj1YhL3GLAWhhShVI8+3zgqlGs+I=
Subject key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80834364AA1F22BBCA59A967D17DDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202288
IP: 91.244.245.0/24
IP: 2001:678:728::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:83:43:64:aa:1f:22:bb:ca:59:a9:67:d1:7d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8afbc64d593fc073c693143566310295de0a8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:b7:23:f1:37:26:cc:12:73:25:31:2c:5a:
75:d2:38:22:3f:9f:b8:c6:f8:cd:5a:e7:cd:ed:46:
3d:b1:43:bd:20:f1:4d:f2:5d:53:a3:91:95:f4:80:
f0:1c:86:3c:bd:a0:c6:fb:77:79:6c:a6:4d:da:38:
22:93:78:96:9e:3c:7e:36:de:10:5b:1c:9d:a6:81:
7b:db:07:91:dd:a7:2a:66:e0:45:18:a6:dc:9c:64:
ed:6c:2b:23:53:b8:ce:b3:ef:ac:a8:e3:72:9a:18:
01:2a:20:ac:72:46:fc:08:ab:d8:6f:27:ab:61:a6:
06:15:e9:0a:15:ce:49:9f:23:73:22:a3:02:8c:f4:
e7:70:5d:1f:b7:70:cc:dc:c6:e0:1d:50:1d:99:4b:
d2:d6:fe:27:d4:f2:b1:99:e8:8a:3a:55:d7:f7:4e:
78:6f:18:bb:db:89:ca:3e:fb:7b:0b:ae:f8:74:6a:
67:7f:4d:31:4a:38:86:16:9c:13:55:9e:51:b4:32:
1e:83:a3:c9:bf:1b:08:93:c7:0c:38:ec:d9:2a:f0:
04:ec:90:6b:6e:07:3d:ae:0c:f2:36:28:83:c7:18:
f9:9d:60:b1:f4:fe:a3:30:83:77:25:2f:93:f4:b7:
b5:a6:57:0d:51:a9:d8:68:4f:c1:b1:0a:77:7d:c3:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.245.0/24
IPv6:
2001:678:728::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202288
Signature Algorithm: sha256WithRSAEncryption
85:6d:dc:6a:2f:2f:27:82:49:b2:97:2d:30:f8:87:a3:35:fb:
2c:ee:c3:3c:f7:16:33:23:5e:9e:d5:dc:e4:31:d4:c9:9f:8f:
5b:90:28:a5:c1:71:8a:b2:49:39:5a:30:a6:d0:c2:95:b5:37:
bf:d8:7d:c2:95:43:32:79:1e:45:be:7e:4f:c2:7b:e1:8c:08:
32:53:66:08:40:2f:7a:48:69:db:c8:13:aa:35:bb:5b:7f:9a:
c4:4b:4b:1c:5d:93:a6:fd:a3:85:87:06:84:97:38:d3:e7:f6:
14:eb:dc:e4:4b:3e:e3:7e:ea:ec:7b:5f:6c:03:81:55:5c:61:
d8:5a:38:49:06:af:43:0b:d6:7e:1c:8b:d9:02:16:cc:78:42:
72:eb:c9:05:24:a1:2c:23:06:9a:bd:3c:6c:a1:e8:6c:47:07:
3f:d0:7e:0f:ce:95:f7:1c:aa:64:eb:d6:f5:90:a6:f1:38:65:
5e:8a:da:ae:14:1e:cb:00:b2:ff:9e:f8:52:fe:45:b2:5e:06:
4b:27:a2:14:1a:0a:70:64:2e:8f:1a:08:56:74:04:40:e7:49:
62:9d:ec:c8:25:40:af:9b:f8:77:08:98:c1:5b:97:44:a9:6b:
c2:d8:47:d0:23:ab:cc:60:6d:aa:2b:04:5a:de:44:9d:e0:b6:
59:12:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:53 2026 by rpki-client