Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
File: tRidnqgtX7tm1sEfGHYzR2A04N4.cer (raw, json)
Hash identifier: ZIwCPES5HhwK+Di1Y5TWecwkGSpXG/cKCjLqoiT035g=
Subject key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C7A7529C11692C1F099FD01B4405EBD99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Feb 2026 09:50:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210574
IP: 46.36.201.0/24
IP: 2a11:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:75:29:c1:16:92:c1:f0:99:fd:01:b4:40:5e:bd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 09:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:da:3e:95:96:b7:80:03:2d:e7:55:bb:f9:
7a:37:18:7c:8f:d0:19:46:98:98:1b:28:0c:0f:3a:
b1:08:6a:28:3b:d6:2d:0f:e7:61:79:81:08:42:86:
a6:e2:53:bf:48:b9:30:f8:c7:b7:12:e8:8c:db:8b:
01:e9:4d:cb:f4:29:cb:6e:84:d5:b5:59:4c:32:92:
a9:61:a6:66:0c:54:56:ae:ec:76:7e:cf:78:d1:91:
d4:40:4b:43:b1:c7:ea:39:89:f5:1c:c4:57:9e:9d:
92:38:7c:a9:27:fe:5a:7c:d0:b8:e5:79:7d:da:85:
1d:2f:38:ce:c0:49:1f:9b:d0:27:30:29:f7:cc:4c:
98:ae:fe:b7:96:39:31:c1:c4:bf:6e:08:07:89:66:
2a:2f:4b:8e:3a:df:4b:37:47:24:0a:be:3a:52:65:
58:6f:29:27:c0:8c:bb:c7:da:65:5f:9e:43:ae:a0:
f5:cb:c4:df:fa:f4:0e:e1:7e:37:46:64:27:85:43:
dd:07:18:9c:4f:b7:7d:a4:a4:13:35:18:84:81:b0:
8e:14:e5:88:13:f2:ea:51:71:f9:d3:b4:6b:b9:c6:
12:a4:eb:73:66:79:a3:24:df:24:a8:4a:00:18:e9:
2c:b7:97:e7:42:d2:bf:c9:bc:9f:4b:6c:be:7a:d8:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.201.0/24
IPv6:
2a11:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210574
Signature Algorithm: sha256WithRSAEncryption
83:a2:72:66:14:0b:54:dd:81:bb:35:57:40:22:02:d3:36:69:
39:da:0a:5f:9a:50:41:65:a3:88:25:15:e2:94:45:cc:80:87:
38:8c:29:26:11:60:64:a6:c0:e6:20:d2:04:1d:ca:7d:16:e2:
83:65:ea:8d:54:e7:a7:88:6e:20:ab:6a:c5:b0:49:57:5a:e2:
8b:cc:3d:7d:fd:c0:41:2c:07:78:97:c1:af:00:9d:9b:a9:ad:
0f:d1:7f:53:08:60:14:72:72:f2:39:b9:08:09:a0:52:64:9f:
7b:4d:ae:9a:5d:bb:af:5c:b5:47:f7:3a:be:d7:35:43:24:9d:
ca:12:54:0a:3e:dd:41:3d:0b:06:fe:bd:b6:73:e5:30:27:77:
52:c2:17:4e:01:6c:d8:17:11:5c:0f:38:78:6d:89:cd:01:e2:
cf:1e:3e:3a:5f:e6:97:fe:b5:02:4c:4a:e1:14:ae:d1:63:7a:
f6:19:51:61:a4:ac:28:39:70:53:78:0b:7f:51:9a:57:a9:96:
fd:ec:98:ae:5d:7b:f2:12:e8:ea:2f:c1:02:b5:f2:de:6b:c4:
e3:9a:cd:26:18:84:09:52:93:8b:9d:c5:8f:5f:04:11:28:4d:
09:89:30:6d:0f:6b:76:10:58:94:02:b3:bf:43:23:35:c0:07:
0c:9f:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:56 2026 by rpki-client