Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
File: xW93K_PEZBpxv39LxN4RyTrd_qY.cer (raw, json)
Hash identifier: VYqFrRTKUPNwSyUEDeLPCTHdpZH0bKSONadeYKmmWuQ=
Subject key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910D482D5ED2B4F9A10DF9975AD723F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210670
IP: 31.222.232.0/24
IP: 2a11:7f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:d4:82:d5:ed:2b:4f:9a:10:df:99:75:ad:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:44:a6:2b:dd:7a:79:53:9b:40:1e:7a:1a:
01:6f:e5:b8:9a:22:63:2e:e9:cf:de:cf:cc:c5:ab:
40:36:b5:9d:8c:f4:49:50:20:e9:f9:90:99:80:71:
2c:f7:25:8a:db:89:15:81:c5:99:8c:5d:6b:8e:7b:
97:d2:95:3a:ca:05:80:20:52:e4:5c:cf:1b:ca:ad:
66:10:7d:9b:95:b8:d0:c1:b4:06:80:dc:7e:0f:2c:
75:78:21:01:4b:ad:56:1b:3e:ec:09:8e:8e:77:36:
29:8e:e9:b4:c1:94:46:dd:de:4f:e6:e0:be:45:64:
0a:87:a6:dc:0b:04:ab:4b:0e:0a:41:60:81:01:29:
c1:ac:7a:45:67:44:11:4f:9b:af:69:97:d9:26:30:
40:70:5e:db:4b:fd:22:bd:29:c9:f0:ea:4b:63:4d:
f5:c5:09:5b:7b:94:b3:75:ec:76:fe:32:27:3f:b5:
18:9e:23:db:6a:f9:f4:d1:69:ee:e5:bd:78:8a:5f:
cc:53:01:2c:31:fb:5a:6e:d5:56:f0:e9:dc:2f:d6:
8e:4e:bd:77:e7:39:dc:a1:cb:0f:c9:8e:04:8d:c2:
1f:e4:77:aa:12:21:a8:73:cc:3d:10:e2:32:2c:6e:
54:c9:37:4c:13:87:21:06:c9:c9:3a:bf:f3:a7:30:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.232.0/24
IPv6:
2a11:7f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210670
Signature Algorithm: sha256WithRSAEncryption
13:7d:44:14:e2:69:f6:98:1d:3e:1f:04:d9:e6:c5:b3:5e:3c:
d8:48:2f:4a:88:c1:34:ee:47:f2:51:e4:0e:f0:fa:2e:dd:3b:
d9:fb:a1:d9:12:3c:2a:d8:74:25:37:c9:0b:bb:8c:12:20:76:
d0:29:67:20:77:b9:d4:de:73:ec:1e:f4:df:8c:3e:36:78:a8:
bb:f4:3c:31:02:27:ba:25:79:3f:e3:2e:fc:03:06:af:5e:6d:
61:81:f6:cd:90:2b:bf:ee:45:e3:4b:4a:6e:9d:4d:61:d3:01:
0b:ca:4a:99:32:ab:ab:be:de:d5:95:90:dc:f4:b7:b0:d7:00:
79:c8:86:f6:9d:f3:a0:86:ec:0a:4f:6a:a3:a7:77:2f:d5:98:
1c:4d:65:a5:f7:74:22:55:4a:0b:99:fe:48:3c:86:49:38:48:
90:4a:c4:77:2c:66:df:37:e4:c7:29:70:fd:ed:20:99:0b:c2:
6a:2e:b3:6d:f4:44:20:9b:72:ac:b2:d5:3c:35:a8:90:21:73:
cc:33:c7:39:46:8e:95:38:2b:0f:41:b2:01:72:d0:da:b1:a4:
80:5f:48:be:67:cb:63:19:92:a7:bd:8d:4d:ac:4b:5f:d9:9d:
ac:20:c8:b4:09:5a:a4:02:a8:fd:14:f9:cb:89:4d:8b:0c:43:
13:f8:34:3e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt5ENSC1e0rT5oQ35l1rXI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTZmNzcyYmYzYzQ2NDFhNzFiZjdmNGJjNGRlMTFjOTNhZGRmZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldEpivdenlTm0AeehoBb+W4miJj
LunP3s/MxatANrWdjPRJUCDp+ZCZgHEs9yWK24kVgcWZjF1rjnuX0pU6ygWAIFLk
XM8byq1mEH2blbjQwbQGgNx+Dyx1eCEBS61WGz7sCY6OdzYpjum0wZRG3d5P5uC+
RWQKh6bcCwSrSw4KQWCBASnBrHpFZ0QRT5uvaZfZJjBAcF7bS/0ivSnJ8OpLY031
xQlbe5Szdex2/jInP7UYniPbavn00Wnu5b14il/MUwEsMftabtVW8OncL9aOTr13
5zncocsPyY4EjcIf5HeqEiGoc8w9EOIyLG5UyTdME4chBsnJOr/zpzCs+QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMVvdyvzxGQacb9/S8TeEck63f6mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0Lzk5NmNm
NC02N2VhLTQxM2QtOTMxNy03ZWNhMjA1ZmFmY2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOTk2Y2Y0
LTY3ZWEtNDEzZC05MzE3LTdlY2EyMDVmYWZjYi8xL3hXOTNLX1BFWkJweHYzOUx4
TjRSeVRyZF9xWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAH97oMA0EAgACMAcDBQMqEX9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM27jANBgkqhkiG9w0BAQsFAAOCAQEAE31EFOJp9pgd
Ph8E2ebFs1482EgvSojBNO5H8lHkDvD6Lt072fuh2RI8Kth0JTfJC7uMEiB20Cln
IHe51N5z7B7034w+Nniou/Q8MQInuiV5P+Mu/AMGr15tYYH2zZArv+5F40tKbp1N
YdMBC8pKmTKrq77e1ZWQ3PS3sNcAeciG9p3zoIbsCk9qo6d3L9WYHE1lpfd0IlVK
C5n+SDyGSThIkErEdyxm3zfkxylw/e0gmQvCai6zbfREIJtyrLLVPDWokCFzzDPH
OUaOlTgrD0GyAXLQ2rGkgF9IvmfLYxmSp72NTaxLX9mdrCDItAlapAKo/RT5y4lN
iwxDE/g0Pg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:32 2026 by rpki-client