Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/B5R7lbJKGebARG2aDQ4PRQ3zkUY.cer
File: B5R7lbJKGebARG2aDQ4PRQ3zkUY.cer (raw, json)
Hash identifier: pox/R9cnU8AJUKcnIl22B7OAmsiL9B7gfhExR1qqXyg=
Subject key identifier: 07:94:7B:95:B2:4A:19:E6:C0:44:6D:9A:0D:0E:0F:45:0D:F3:91:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A56B7722D26342BEDB3814A5FF839481
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/B5R7lbJKGebARG2aDQ4PRQ3zkUY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 14:14:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.198.127.0/24
IP: 91.200.164.0/22
IP: 91.216.3.0/24
IP: 185.46.84.0/22
IP: 2a01:81a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:6b:77:22:d2:63:42:be:db:38:14:a5:ff:83:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 14:14:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07947b95b24a19e6c0446d9a0d0e0f450df39146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a7:2b:2c:35:8f:59:dd:7e:3b:89:11:ce:da:
b6:3c:89:96:ac:61:88:79:03:2a:02:e2:8f:56:ba:
f0:3c:c1:ca:7d:90:44:17:e7:57:46:e6:26:11:31:
70:4f:8f:6b:74:e0:27:3e:70:07:55:3f:80:02:6b:
b0:bd:ea:58:47:64:c6:00:d2:af:b4:00:e6:a5:d5:
cb:ac:b5:3e:69:ad:88:fe:0e:66:a0:a5:18:7c:4f:
e9:b5:bc:10:57:a2:08:ec:3f:d8:7f:89:b1:22:10:
32:5b:b6:40:b1:78:2a:41:9e:be:f6:c3:c7:f9:06:
cf:64:25:bd:38:b7:94:42:ea:f5:01:3a:92:32:1c:
29:e5:a1:7b:07:32:fe:aa:0e:f1:45:97:92:e4:c3:
c7:27:6b:b4:28:cc:23:22:38:df:ec:77:cd:52:1b:
3c:0d:15:d2:6a:37:b4:11:57:63:4d:83:15:0d:61:
9a:26:58:62:31:50:39:e1:d0:3c:21:01:54:72:05:
d9:c9:23:36:26:a8:32:b1:39:50:81:53:d1:3e:48:
dd:54:e7:d4:e1:22:e6:10:82:22:14:6b:2f:00:b2:
7a:bf:0c:a4:cd:f4:7f:a4:17:47:63:67:32:30:bf:
ce:e7:5e:00:9a:1f:f0:63:fa:5e:dd:ea:0e:13:7d:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:7B:95:B2:4A:19:E6:C0:44:6D:9A:0D:0E:0F:45:0D:F3:91:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/B5R7lbJKGebARG2aDQ4PRQ3zkUY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.127.0/24
91.200.164.0/22
91.216.3.0/24
185.46.84.0/22
IPv6:
2a01:81a0::/32
Signature Algorithm: sha256WithRSAEncryption
14:80:97:e6:a5:91:72:7c:1c:37:2f:95:5a:4b:8a:6a:4c:ac:
a4:ab:ce:89:ec:f0:d3:c5:1c:ea:fe:d9:1c:aa:f7:8a:51:3c:
b5:11:29:24:0a:47:46:c6:11:9d:f3:34:e4:bc:04:b3:20:17:
e8:cf:3a:13:21:bf:2c:18:3b:65:14:33:82:1d:b6:4e:ea:c1:
fb:b6:ee:86:eb:66:7e:e6:88:b9:c2:f6:0f:a5:1e:1d:f3:36:
40:90:30:e8:fe:ef:8c:3e:a2:b8:7f:c9:7b:bc:08:bf:1a:15:
a4:96:3b:40:5b:ff:45:f6:15:3a:ab:5e:bb:8b:63:63:4e:8c:
e4:32:9e:53:2a:b0:91:58:91:25:e5:18:34:24:ec:8b:c9:00:
7b:2f:3c:40:fa:b5:82:73:cd:1d:5f:9b:91:1b:f7:85:4b:d0:
67:49:f1:7b:4a:51:e4:34:02:9c:21:e5:6f:f7:3d:2f:ae:82:
2d:92:9e:65:6d:4a:74:8f:6d:da:e5:80:81:eb:e7:50:5d:7a:
dc:ef:53:1a:50:1d:9e:0d:39:7b:a1:b9:c1:7c:1b:16:3a:95:
e6:a5:ab:56:b3:5b:71:08:76:b0:fb:8b:8b:53:0d:57:6b:20:
ad:a1:c5:f4:37:1c:db:c4:c8:e6:fa:82:0e:28:5c:4a:65:0e:
f4:2f:ad:f3
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAaCla3ci0mNCvts4FKX/g5SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE1MTQxNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzk0N2I5NWIyNGExOWU2YzA0NDZkOWEwZDBlMGY0NTBkZjM5MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8acrLDWPWd1+O4kRztq2PImWrGGI
eQMqAuKPVrrwPMHKfZBEF+dXRuYmETFwT49rdOAnPnAHVT+AAmuwvepYR2TGANKv
tADmpdXLrLU+aa2I/g5moKUYfE/ptbwQV6II7D/Yf4mxIhAyW7ZAsXgqQZ6+9sPH
+QbPZCW9OLeUQur1ATqSMhwp5aF7BzL+qg7xRZeS5MPHJ2u0KMwjIjjf7HfNUhs8
DRXSaje0EVdjTYMVDWGaJlhiMVA54dA8IQFUcgXZySM2JqgysTlQgVPRPkjdVOfU
4SLmEIIiFGsvALJ6vwykzfR/pBdHY2cyML/O514Amh/wY/pe3eoOE32QmQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFAeUe5WyShnmwERtmg0OD0UN85FGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzVlMzkz
OS1jN2U1LTRkNjktOTMzOC03YjVkZWRkMzQ5NGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNWUzOTM5
LWM3ZTUtNGQ2OS05MzM4LTdiNWRlZGQzNDk0Yy8xL0I1UjdsYkpLR2ViQVJHMmFE
UTRQUlEzemtVWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQAW8Z/AwQCW8ikAwQAW9gDAwQCuS5UMA0EAgAC
MAcDBQAqAYGgMA0GCSqGSIb3DQEBCwUAA4IBAQAUgJfmpZFyfBw3L5VaS4pqTKyk
q86J7PDTxRzq/tkcqveKUTy1ESkkCkdGxhGd8zTkvASzIBfozzoTIb8sGDtlFDOC
HbZO6sH7tu6G62Z+5oi5wvYPpR4d8zZAkDDo/u+MPqK4f8l7vAi/GhWkljtAW/9F
9hU6q167i2NjTozkMp5TKrCRWJEl5Rg0JOyLyQB7LzxA+rWCc80dX5uRG/eFS9Bn
SfF7SlHkNAKcIeVv9z0vroItkp5lbUp0j23a5YCB6+dQXXrc71MaUB2eDTl7obnB
fBsWOpXmpatWs1txCHaw+4uLUw1XayCtocX0NxzbxMjm+oIOKFxKZQ70L63z
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:16 2026 by rpki-client