Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
File: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer (raw, json)
Hash identifier: 6FcoMXjsfAy3HEfArXAglRGfmZjfntbV0Omt0RNNoE0=
Subject key identifier: D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAA1DBBD3837220355DACB5D07E057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201548
IP: 185.71.40.0/22
IP: 2a03:3760::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:a1:db:bd:38:37:22:03:55:da:cb:5d:07:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d316b921907d8845a50c71210ea3940810f77418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:e9:00:39:a0:a0:2b:86:8a:c8:22:93:09:
df:d0:a1:63:ee:57:2c:b5:c4:2e:ef:61:84:f8:cf:
30:d4:85:37:a3:30:5f:d4:cd:9d:0b:c1:23:74:82:
1f:84:a4:9e:2a:62:dd:63:68:b3:d4:c8:59:89:67:
8a:7a:12:f5:9a:45:96:f9:a6:55:6b:d7:f9:98:8a:
39:e0:3f:31:b9:8e:d6:d8:cd:a1:81:68:1d:62:06:
13:b1:85:e8:9f:9e:31:b2:cc:c5:3d:e8:98:4a:f0:
45:cf:61:02:cc:c2:8d:5e:96:77:a1:90:28:f3:be:
b5:47:93:be:4f:36:44:e6:ad:03:2b:94:84:0c:8d:
fb:31:36:a3:aa:84:e8:ef:44:23:33:a2:93:04:ee:
90:8b:8b:4f:8d:a6:71:70:59:70:46:8d:54:d1:75:
6f:a4:e8:49:2a:cc:bf:06:5f:ef:32:87:fb:8e:22:
d0:ed:2a:d6:1e:bc:26:bf:45:ba:68:7c:f6:4d:5d:
29:fc:d1:68:29:c7:c5:52:03:86:e5:d5:91:e2:27:
c1:eb:44:b5:01:0f:ef:54:29:df:e7:be:0a:2d:63:
10:01:d8:fa:9a:58:0b:27:bd:ce:4d:0e:ed:02:dc:
b5:dd:fd:5e:a1:7c:26:8b:a6:2b:84:fa:1b:8b:b1:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.40.0/22
IPv6:
2a03:3760::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201548
Signature Algorithm: sha256WithRSAEncryption
74:5c:02:1e:42:a7:cc:2e:e8:59:74:01:c8:ba:c2:79:d7:ee:
79:45:25:12:21:bb:37:e5:5e:d3:28:4d:3b:d6:f4:31:ee:db:
28:14:ec:e6:1a:9f:c3:9b:ea:d8:de:08:42:bb:9b:2f:8f:b0:
10:62:29:ad:8a:64:8e:37:0e:d0:36:1f:9d:9e:ad:6f:7e:09:
9a:34:1a:d8:09:e3:44:f1:c1:ec:d0:30:52:29:35:25:fd:58:
d4:95:ad:9a:51:46:b3:c4:84:ad:30:6f:62:92:37:f2:03:58:
85:39:7a:0a:0c:25:1b:26:2b:31:37:e8:64:63:6a:15:03:0d:
be:33:d4:07:4d:1b:ce:72:8e:a8:b7:f9:c7:05:3b:1a:2a:50:
0e:7c:13:d4:37:ab:21:31:65:71:57:fc:f2:2b:8e:40:c8:6b:
10:a0:f7:78:5c:5d:54:6d:e0:5e:d7:62:49:31:ab:11:35:ea:
4a:5e:09:95:51:3d:75:6f:36:be:7e:50:e2:cd:c8:ef:cb:f9:
17:e6:c2:9f:ed:b4:1f:22:e8:d4:1f:72:a7:e3:b1:a4:b1:68:
16:f3:83:20:0e:e6:31:cb:7c:1f:42:95:ee:44:cb:4a:d5:24:
aa:57:36:52:dc:4e:0b:99:84:b3:75:10:5d:48:fc:07:db:f1:
ea:28:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:24 2026 by rpki-client