Certificate
$ rpki-client -vvvf ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
File: ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer (raw, json)
Hash identifier: KdEfNpZ/8eQGlDREbxLzokd0Gln+6bcQJ8JgfcXQLpk=
Subject key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 02025B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
CRL Distribution Point: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Manifest: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
caRepository: rsync://krill.rg.net/repo/rpki-beacons-ca/0/
Notify URL: https://krill.rg.net/rrdp/notification.xml
Certificate not before: Mon 02 Nov 2026 15:00:37 +0000
Certificate not after: Mon 01 Nov 2027 19:55:04 +0000
Subordinate resources: IP: 45.132.188.0/22
IP: 147.28.10.0/23
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 01:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131675 (0x2025b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Nov 2 15:00:37 2026 GMT
Not After : Nov 1 19:55:04 2027 GMT
Subject: CN=656E4422ABF129649200EB019A815F2B12236E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:ff:bc:05:cb:cc:5c:56:04:71:12:51:75:
e0:47:5d:64:4b:29:02:1f:1f:56:b9:7f:83:45:70:
db:37:95:d9:c0:6a:6a:f7:e7:f3:c9:e0:b3:b6:1d:
e8:ad:78:c1:70:fd:fd:11:78:92:ab:57:d2:69:1f:
7e:b4:de:6f:cf:23:85:7e:52:5a:9c:a5:04:26:fd:
5f:60:22:8e:6c:db:b7:c2:a4:b9:18:8f:f3:45:d9:
33:c9:24:e1:fc:47:d5:fd:c8:1e:e1:a6:07:cf:fc:
3a:f6:24:6a:cd:6d:2f:f7:04:ac:66:cd:5f:95:f4:
51:e7:7c:b3:84:ca:9f:1b:1f:87:7a:5f:ad:ca:c9:
43:0d:cd:0b:e9:4a:a8:a4:7e:44:57:04:70:75:92:
b7:98:20:5b:91:5c:5d:5f:03:b0:69:98:7c:8a:ac:
90:60:95:af:c2:95:9c:13:fc:61:69:04:db:2e:58:
72:54:d9:bb:11:9e:5d:51:7d:28:55:33:1f:87:10:
aa:92:5c:b3:b6:9c:c0:cc:a4:65:86:fa:d0:15:21:
08:ca:d4:68:3c:4b:f1:86:b0:ac:72:82:a5:65:02:
7b:64:33:00:81:1c:6e:71:68:42:69:51:b7:6b:34:
fa:3e:22:7f:ce:90:be:a4:15:a1:16:69:83:78:ce:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/
RPKI Manifest - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
RPKI Notify - URI:https://krill.rg.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/22
147.28.10.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:a8:39:4e:ff:78:7e:e8:b8:ca:77:dd:93:51:b6:fa:66:1c:
5c:24:86:4c:2c:08:19:9c:26:36:06:01:80:0c:e8:20:d5:ac:
c3:a6:0f:36:84:36:3e:03:ea:b8:95:ca:fc:d0:3d:d7:e5:d7:
bc:58:f5:d4:39:00:97:c5:51:71:9a:5c:03:32:28:79:63:62:
63:4b:36:84:01:d8:70:09:dd:e7:57:d4:4e:8d:a1:b8:b2:da:
20:b9:d2:00:17:9f:f8:53:a9:24:aa:d9:28:d2:7f:72:e3:61:
f3:49:7e:e0:b4:6a:28:2c:3c:8f:0b:6d:ff:a2:ef:09:1b:68:
8c:90:cb:00:0d:92:37:a7:38:3e:da:d1:a3:1a:0a:ae:06:2e:
f2:07:bf:a0:8b:56:23:d1:81:78:c3:5a:2e:ff:c2:a5:ce:9f:
7a:da:4e:92:e3:01:af:da:b8:91:e1:e6:74:45:23:75:37:7d:
ce:6c:3d:85:d0:c2:38:79:7e:6f:31:a0:2f:89:d5:4b:51:4e:
46:32:f6:da:43:2e:23:31:cb:1c:d7:6d:f3:ae:b0:03:37:81:
a1:b5:7c:58:63:8f:17:3a:80:4c:e8:0c:9c:e6:60:97:dc:ef:
01:29:59:d6:bf:a6:dd:70:e8:9f:4d:9a:5b:5f:95:b3:7c:40:
ad:97:74:98
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIDAgJbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjYxMTAy
MTUwMDM3WhcNMjcxMTAxMTk1NTA0WjAzMTEwLwYDVQQDEyg2NTZFNDQyMkFCRjEy
OTY0OTIwMEVCMDE5QTgxNUYyQjEyMjM2RTkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5KT/vAXLzFxWBHESUXXgR11kSykCHx9WuX+DRXDbN5XZwGpq
9+fzyeCzth3orXjBcP39EXiSq1fSaR9+tN5vzyOFflJanKUEJv1fYCKObNu3wqS5
GI/zRdkzySTh/EfV/cge4aYHz/w69iRqzW0v9wSsZs1flfRR53yzhMqfGx+Hel+t
yslDDc0L6UqopH5EVwRwdZK3mCBbkVxdXwOwaZh8iqyQYJWvwpWcE/xhaQTbLlhy
VNm7EZ5dUX0oVTMfhxCqklyztpzAzKRlhvrQFSEIytRoPEvxhrCscoKlZQJ7ZDMA
gRxucWhCaVG3azT6PiJ/zpC+pBWhFmmDeM5UdwIDAQABo4ICSTCCAkUwHQYDVR0O
BBYEFGVuRCKr8SlkkgDrAZqBXysSI26SMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA8GA1UdEwEB/wQFMAMBAf8wDgYD
VR0PAQH/BAQDAgEGMIHoBggrBgEFBQcBCwSB2zCB2DA4BggrBgEFBQcwBYYscnN5
bmM6Ly9rcmlsbC5yZy5uZXQvcmVwby9ycGtpLWJlYWNvbnMtY2EvMC8wZAYIKwYB
BQUHMAqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFjb25zLWNh
LzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5Mi5tZnQw
NgYIKwYBBQUHMA2GKmh0dHBzOi8va3JpbGwucmcubmV0L3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2EvAMEAZMcCjAN
BgkqhkiG9w0BAQsFAAOCAQEATKg5Tv94fui4ynfdk1G2+mYcXCSGTCwIGZwmNgYB
gAzoINWsw6YPNoQ2PgPquJXK/NA91+XXvFj11DkAl8VRcZpcAzIoeWNiY0s2hAHY
cAnd51fUTo2huLLaILnSABef+FOpJKrZKNJ/cuNh80l+4LRqKCw8jwtt/6LvCRto
jJDLAA2SN6c4PtrRoxoKrgYu8ge/oItWI9GBeMNaLv/Cpc6fetpOkuMBr9q4keHm
dEUjdTd9zmw9hdDCOHl+bzGgL4nVS1FORjL22kMuIzHLHNdt866wAzeBobV8WGOP
FzqATOgMnOZgl9zvASlZ1r+m3XDon02aW1+Vs3xArZd0mA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:27:05 2026 by rpki-client