Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
File: riXqr5GhZiyW---d5MX6Hh0IdJc.cer (raw, json)
Hash identifier: 9F9Z1WjhnMke0cA//qG7S9W7HL5H5cM0cYTmAVhP680=
Subject key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C4749326D65DD13CD45227DCACAE2493E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 11:21:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31044
IP: 195.47.219.0/24
IP: 195.149.114.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:49:32:6d:65:dd:13:cd:45:22:7d:ca:ca:e2:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 11:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:fe:78:8a:ec:72:c5:7b:05:5d:fc:fc:08:
9c:bc:97:04:a4:9c:3f:5a:9e:1b:b9:b9:08:a7:8a:
c8:51:4a:54:18:1a:4f:0a:0d:40:4a:a9:44:39:fe:
ff:7f:08:a0:9e:6e:69:c2:fc:44:c5:ae:32:98:e0:
86:44:74:2d:3a:22:5c:e2:a1:7d:0f:02:68:db:c3:
73:87:0f:69:d1:a1:11:06:d8:5c:40:22:df:36:96:
5d:3d:06:43:cf:0e:d2:f7:4e:2b:a8:9b:d5:40:f5:
da:81:ab:21:2d:63:15:b1:d3:ba:81:68:3d:aa:2d:
88:cd:25:3b:4f:1f:1e:dc:98:08:77:d0:ef:79:80:
32:77:5c:62:41:86:ae:d1:72:69:02:ef:1d:99:a3:
72:44:36:24:0e:f6:3d:9a:81:23:fd:9d:99:ea:11:
4e:6a:66:d1:73:cc:d1:25:e2:e6:f9:bc:ff:77:a5:
f3:9d:51:3f:86:49:5d:ae:59:16:ab:ea:67:3a:7e:
81:2a:74:6a:d8:e2:0a:58:4a:03:28:2b:74:e1:fd:
15:4f:45:1f:45:6f:b2:19:8a:25:ee:8d:f3:9f:5f:
4b:5c:85:35:40:db:60:47:59:0b:ac:4a:25:e9:67:
98:fb:da:8b:6e:af:d1:e4:9c:85:f0:2c:60:15:f8:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.219.0/24
195.149.114.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31044
Signature Algorithm: sha256WithRSAEncryption
1f:ac:b8:97:f2:b0:22:3e:95:f5:2d:ad:df:4b:ec:57:d6:ff:
37:74:b0:17:b8:98:21:a7:88:a3:25:50:eb:7c:4b:e2:59:4a:
06:ef:e3:4f:9a:9c:45:00:bc:8b:98:42:b4:e4:27:c3:2a:73:
7b:6e:6b:14:46:2a:f7:1d:da:bf:09:6a:f5:d9:1d:50:ce:e5:
19:c8:10:65:08:58:27:91:4d:69:28:00:35:21:ef:e7:0a:d9:
f8:2c:7e:f9:09:90:03:e9:49:08:b7:60:47:45:2a:ad:8e:05:
25:49:87:d8:f0:ee:a1:52:e6:7d:61:e4:29:e5:94:5e:4a:64:
45:86:42:35:c4:c8:0b:60:11:61:c8:98:44:e3:75:f2:29:85:
fc:d0:38:fd:81:5b:30:bc:11:64:38:2d:dc:da:9a:cf:60:02:
90:2a:72:3c:a5:de:91:d9:27:69:bd:2a:79:08:0c:e9:45:b7:
5c:55:24:85:0e:19:95:ee:d2:bb:7d:2b:74:55:69:83:1f:d3:
8e:c4:52:67:2c:b8:dc:87:80:96:1e:f6:7c:a1:c6:92:5c:1d:
94:13:22:ff:4a:1e:26:53:c7:81:fa:85:c6:a8:12:83:aa:a4:
0d:c2:bc:b5:66:ca:59:d2:15:70:24:64:cf:c2:0e:8a:40:c1:
ab:fa:ea:85
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZxHSTJtZd0TzUUifcrK4kk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjEwMTEyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTI1ZWFhZjkxYTE2NjJjOTZmYmVmOWRlNGM1ZmExZTFkMDg3NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6f+eIrscsV7BV38/AicvJcEpJw/
Wp4bubkIp4rIUUpUGBpPCg1ASqlEOf7/fwignm5pwvxExa4ymOCGRHQtOiJc4qF9
DwJo28Nzhw9p0aERBthcQCLfNpZdPQZDzw7S904rqJvVQPXagashLWMVsdO6gWg9
qi2IzSU7Tx8e3JgId9DveYAyd1xiQYau0XJpAu8dmaNyRDYkDvY9moEj/Z2Z6hFO
ambRc8zRJeLm+bz/d6XznVE/hkldrlkWq+pnOn6BKnRq2OIKWEoDKCt04f0VT0Uf
RW+yGYol7o3zn19LXIU1QNtgR1kLrEol6WeY+9qLbq/R5JyF8CxgFfjtBQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFK4l6q+RoWYslvvvneTF+h4dCHSXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzg1M2Iz
OC1lZTQ3LTQwNGMtYTM5OS1jYzFhN2NjYWI3MDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvODUzYjM4
LWVlNDctNDA0Yy1hMzk5LWNjMWE3Y2NhYjcwMi8xL3JpWHFyNUdoWml5Vy0tLWQ1
TVg2SGgwSWRKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwy/bAwQAw5VyMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAnlEMA0GCSqGSIb3DQEBCwUAA4IBAQAfrLiX8rAiPpX1La3fS+xX1v83
dLAXuJghp4ijJVDrfEviWUoG7+NPmpxFALyLmEK05CfDKnN7bmsURir3Hdq/CWr1
2R1QzuUZyBBlCFgnkU1pKAA1Ie/nCtn4LH75CZAD6UkIt2BHRSqtjgUlSYfY8O6h
UuZ9YeQp5ZReSmRFhkI1xMgLYBFhyJhE43XyKYX80Dj9gVswvBFkOC3c2prPYAKQ
KnI8pd6R2SdpvSp5CAzpRbdcVSSFDhmV7tK7fSt0VWmDH9OOxFJnLLjch4CWHvZ8
ocaSXB2UEyL/Sh4mU8eB+oXGqBKDqqQNwry1ZspZ0hVwJGTPwg6KQMGr+uqF
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:43 2026 by rpki-client