Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
File: rfvxCf18BDkHbEGsADQUWxjyupU.cer (raw, json)
Hash identifier: JUZBsU0fXkLB9t4j8wTWwUFD4qsK24Na/FvWHwS6Zcw=
Subject key identifier: AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C27C57E2B4616B0BAB21FA0140ABF4B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 05:42:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218762
IP: 168.113.250.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:7c:57:e2:b4:61:6b:0b:ab:21:fa:01:40:ab:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 05:42:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:5e:5f:47:ed:c3:ec:57:fa:2e:21:70:8d:
3f:c5:94:1b:21:2b:ab:0f:e8:5b:ee:ef:41:e9:6d:
3d:fa:79:e6:00:21:46:6b:d0:2d:dd:34:47:ea:a1:
c2:d0:e4:5d:f9:95:c8:5b:06:06:4e:fd:2a:7d:4e:
82:9b:ab:85:23:85:0a:ea:58:3f:d9:72:86:97:95:
1c:88:6c:9f:04:27:15:1c:e1:15:66:5d:5b:58:5d:
ec:3a:e1:8c:91:1c:97:a7:5b:1e:4f:6b:84:24:ad:
4b:05:99:14:9f:75:be:b0:a8:38:a5:cd:f2:a8:22:
ef:3e:9c:35:13:de:2a:d8:d4:fc:ee:b7:1f:0e:c3:
58:eb:bc:91:a7:78:6c:e2:3c:9f:1f:8b:9b:5b:3a:
46:35:c3:e8:34:ef:b9:02:08:11:76:13:92:d0:eb:
88:76:79:1a:51:8c:64:3c:7e:cb:a7:6e:67:d4:3b:
76:75:68:04:9c:88:1e:d4:cb:79:91:7b:d1:5e:85:
20:a3:92:30:24:f9:13:d2:84:74:5c:ad:2f:f2:cc:
98:c5:d3:66:83:33:ac:ec:b4:50:ad:8c:63:d6:70:
2c:cb:08:8f:37:3a:ba:2d:35:ef:91:0a:82:81:21:
e9:22:05:f6:3d:cf:53:c4:d4:18:31:5a:37:61:85:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.113.250.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218762
Signature Algorithm: sha256WithRSAEncryption
a7:37:93:5a:6e:f3:f9:fa:b7:50:2b:72:43:4a:8c:d4:c3:31:
42:53:af:d6:07:26:21:9b:37:4c:14:70:9d:ae:5a:87:0d:5f:
04:79:24:9c:f8:64:11:6f:4e:e9:ec:db:88:14:f7:03:55:dc:
0b:d3:7b:a4:54:45:c1:03:6b:75:84:d8:72:69:e6:2d:a8:63:
e1:10:23:63:09:93:f7:19:69:07:36:83:20:bf:b3:9d:f1:df:
d9:6a:0c:ee:5f:8b:41:13:47:ae:8d:78:51:ba:3e:2f:ce:01:
21:3b:35:01:ed:02:c8:86:04:dc:bd:6b:00:30:9c:47:e7:9a:
18:8a:54:d0:17:f3:88:9c:ec:30:ff:5a:4b:7a:c1:53:8b:60:
15:ce:87:db:d3:fa:89:b2:ea:49:ec:82:95:32:bf:09:1f:65:
13:28:88:51:fd:b0:16:dd:df:c7:91:40:30:54:9b:53:c9:f4:
2a:46:1e:c6:7d:bb:0e:cf:16:f7:f5:9c:64:88:e8:35:32:05:
d0:fc:c1:8a:a3:7a:7d:42:16:4a:b8:fc:49:06:cb:d8:43:fa:
bf:f0:ed:b8:f1:b2:f7:4a:71:db:1e:05:5f:0e:b7:c3:03:8f:
6f:75:3e:e3:5d:17:5e:0a:9f:71:09:43:6f:ee:4e:86:0f:e0:
5c:df:77:e6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAaDCfFfitGFrC6sh+gFAq/S2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTIxMDU0MjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGZiZjEwOWZkN2MwNDM5MDc2YzQxYWMwMDM0MTQ1YjE4ZjJiYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfdeX0ftw+xX+i4hcI0/xZQbISur
D+hb7u9B6W09+nnmACFGa9At3TRH6qHC0ORd+ZXIWwYGTv0qfU6Cm6uFI4UK6lg/
2XKGl5UciGyfBCcVHOEVZl1bWF3sOuGMkRyXp1seT2uEJK1LBZkUn3W+sKg4pc3y
qCLvPpw1E94q2NT87rcfDsNY67yRp3hs4jyfH4ubWzpGNcPoNO+5AggRdhOS0OuI
dnkaUYxkPH7Lp25n1Dt2dWgEnIge1Mt5kXvRXoUgo5IwJPkT0oR0XK0v8syYxdNm
gzOs7LRQrYxj1nAsywiPNzq6LTXvkQqCgSHpIgX2Pc9TxNQYMVo3YYXywwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFK378Qn9fAQ5B2xBrAA0FFsY8rqVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzNkOWFl
Ni1kOTg2LTRmNzctYWE1Yy02NGNhMjIzNmUwZjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvM2Q5YWU2
LWQ5ODYtNGY3Ny1hYTVjLTY0Y2EyMjM2ZTBmOC8xL3JmdnhDZjE4QkRrSGJFR3NB
RFFVV3hqeXVwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAqHH6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNWijANBgkqhkiG9w0BAQsFAAOCAQEApzeTWm7z+fq3UCtyQ0qM1MMxQlOv1gcm
IZs3TBRwna5ahw1fBHkknPhkEW9O6ezbiBT3A1XcC9N7pFRFwQNrdYTYcmnmLahj
4RAjYwmT9xlpBzaDIL+znfHf2WoM7l+LQRNHro14Ubo+L84BITs1Ae0CyIYE3L1r
ADCcR+eaGIpU0BfziJzsMP9aS3rBU4tgFc6H29P6ibLqSeyClTK/CR9lEyiIUf2w
Ft3fx5FAMFSbU8n0KkYexn27Ds8W9/WcZIjoNTIF0PzBiqN6fUIWSrj8SQbL2EP6
v/DtuPGy90px2x4FXw63wwOPb3U+410XXgqfcQlDb+5Ohg/gXN935g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:13:40 2026 by rpki-client