Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.cer (raw, json)
Hash identifier: Eoa/dhGHHMCDuoFncgwiD5yexPO/NJMhDppUVE4Weys=
Subject key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A21A4BC78A9D005E0C024E05B654E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60045
IP: 146.0.56.0/23
IP: 185.15.204.0/22
IP: 194.247.170.0/23
IP: 2a02:fe40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:1a:4b:c7:8a:9d:00:5e:0c:02:4e:05:b6:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:af:fd:a2:77:bf:87:19:4b:48:7d:17:42:
1f:19:52:e2:44:40:c1:97:50:a8:fd:55:7e:a6:76:
54:48:09:f5:bf:cc:fb:f2:8c:74:5e:40:17:b9:8f:
30:7b:1e:1d:69:72:f6:8f:c2:4c:47:6d:2c:12:ca:
16:4e:35:b5:ec:33:10:8d:81:9f:57:0d:0d:f6:f7:
b1:d2:c1:6b:5d:91:ec:be:70:97:e8:8f:94:12:ba:
3a:77:15:e5:ac:92:7d:f5:aa:ae:f4:63:e4:76:d8:
07:58:b8:24:34:6f:8e:ff:df:a2:b0:79:9f:c5:6c:
82:d9:da:f8:d8:cd:18:d6:15:8c:02:65:bc:81:48:
92:b2:84:09:95:ec:13:b2:78:16:32:9b:65:18:f7:
ae:a0:84:c2:ab:e8:b6:6a:c7:8e:7a:98:10:bd:ca:
4c:9b:be:21:39:fa:6b:c8:0d:25:ea:34:19:c0:c0:
42:4a:3c:67:66:c1:e9:bc:75:03:3f:97:63:62:71:
1a:e3:91:36:44:59:37:60:02:1b:4b:a4:4b:5d:fe:
e9:72:e4:f7:db:b8:f1:63:1e:09:ae:dc:d1:1d:0e:
04:72:f8:e3:a9:e1:c1:8e:e5:d6:2e:ab:7d:a1:6a:
09:d4:9c:ad:0a:3c:ff:0d:42:2b:24:35:4b:21:13:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.56.0/23
185.15.204.0/22
194.247.170.0/23
IPv6:
2a02:fe40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60045
Signature Algorithm: sha256WithRSAEncryption
25:f9:48:b1:0a:34:7b:b3:c6:d1:7d:0d:4f:da:cf:e4:4b:da:
6b:26:9c:1c:e2:01:69:a1:bb:3e:c6:e2:5e:de:ca:f3:0e:21:
ab:8a:e6:99:a1:7a:5c:9e:cd:a7:56:96:cb:32:0d:87:2a:ac:
cf:db:8a:ae:da:6b:b4:33:f1:fa:8b:45:79:a0:c3:10:85:c1:
fc:51:f4:7a:ab:6e:6c:24:02:d2:9d:54:72:2d:ce:cb:e9:18:
a9:92:03:2c:74:7d:03:d9:a0:ba:bb:25:9f:77:d1:e6:ea:a7:
48:36:c1:a7:78:f6:04:16:5a:51:8a:51:a2:97:1a:7c:e6:80:
db:c5:2f:4f:5c:9d:5d:ec:51:b7:68:05:31:27:e0:da:2e:80:
c0:14:6b:39:59:a3:ec:4c:13:41:0b:31:83:6d:a9:ad:7c:75:
36:85:2c:49:fa:55:98:df:66:2e:08:35:5d:9a:33:43:e9:01:
fb:46:3f:c3:7f:19:da:9f:db:82:9c:f3:20:32:09:19:85:8f:
b4:5a:e3:d8:51:04:b4:7e:b7:4c:37:8b:fd:0e:90:60:06:ef:
b9:f5:72:0d:31:74:23:f2:56:45:85:f8:d6:10:4d:14:3a:8a:
da:8c:b7:fc:b6:65:4e:84:ac:0c:56:e6:70:e3:fa:f2:e0:a5:
39:53:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:09 2026 by rpki-client