Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/B85gbCME5yxBxNKPtHD1vPyxs1k.cer
File: B85gbCME5yxBxNKPtHD1vPyxs1k.cer (raw, json)
Hash identifier: CqfFMmv1hv1AFQnFRBGl64xePueUrt/pRWvmsGFaDNw=
Subject key identifier: 07:CE:60:6C:23:04:E7:2C:41:C4:D2:8F:B4:70:F5:BC:FC:B1:B3:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1542A89AD42538916A08D91B108DD9F97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/d3a3a2-0b12-47cb-9296-687d10fe010d/1/B85gbCME5yxBxNKPtHD1vPyxs1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/d3a3a2-0b12-47cb-9296-687d10fe010d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Oct 2026 12:37:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218610
IP: 45.158.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:2a:89:ad:42:53:89:16:a0:8d:91:b1:08:dd:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 19 12:37:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07ce606c2304e72c41c4d28fb470f5bcfcb1b359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:3d:5a:b5:88:4d:b0:e7:3d:79:24:e0:01:
49:ba:b1:30:15:79:de:d0:7f:a8:a7:64:68:5d:e6:
bb:97:eb:62:4e:30:84:04:13:b5:43:21:1c:f9:ea:
15:6c:3c:a4:37:8b:6e:78:53:68:63:5e:67:e4:6a:
e1:dc:de:ad:e2:57:86:73:cc:c9:9c:e9:f7:fa:13:
65:9f:e3:7f:da:57:f0:dd:0a:17:6d:1c:61:7a:16:
22:60:36:d5:ca:4e:47:e3:d0:c2:2e:7b:18:91:19:
06:68:f7:39:88:74:c5:6b:cc:05:a2:53:6b:7a:61:
90:0e:1e:01:65:97:5c:ca:80:3c:e2:45:7b:28:ee:
76:cf:dc:6d:13:9e:af:8e:22:7d:ac:8a:20:33:63:
57:91:19:e8:9a:32:84:0b:c7:b0:76:17:43:a7:dc:
07:84:14:3f:f0:e3:66:32:1b:e0:1e:67:58:a3:f9:
bd:b3:e0:d2:21:05:d8:59:db:9f:5d:71:3b:87:ef:
9e:0b:f1:d4:01:13:85:6a:7e:31:f1:1f:07:c2:f7:
23:68:f3:93:a8:ee:53:50:0d:da:29:1d:a7:d7:c9:
91:d6:cd:15:0e:20:f0:bf:53:2b:14:57:1b:ee:4f:
17:8f:87:79:13:da:d4:43:fa:70:0b:d5:09:27:5c:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:60:6C:23:04:E7:2C:41:C4:D2:8F:B4:70:F5:BC:FC:B1:B3:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d3a3a2-0b12-47cb-9296-687d10fe010d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d3a3a2-0b12-47cb-9296-687d10fe010d/1/B85gbCME5yxBxNKPtHD1vPyxs1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.96.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218610
Signature Algorithm: sha256WithRSAEncryption
8f:b2:aa:83:6c:2b:c7:1d:6c:5a:ca:ad:f3:51:e1:f7:46:7b:
40:93:30:dd:d8:a1:b0:a1:da:22:f3:99:f8:af:15:fa:c6:e4:
2e:53:35:32:c9:5d:aa:f0:43:dd:fd:f2:d0:b2:4c:8a:be:5f:
14:99:19:25:fb:aa:f2:6f:15:a6:8c:af:07:80:ee:06:a5:56:
ea:76:39:b9:46:38:24:9c:79:d2:e5:cb:50:67:92:4c:e3:72:
50:64:2a:43:43:6b:1b:23:78:23:44:e0:6d:e6:9d:c6:b3:a4:
d6:69:e0:74:7f:1a:f7:90:13:b6:19:d1:f1:8e:35:10:a6:e6:
02:55:2e:31:8b:ab:80:ff:fa:41:63:14:d0:44:e3:00:67:05:
29:9b:69:34:fc:a9:83:ec:aa:4b:69:a5:95:e4:35:8e:21:c1:
d0:d0:2b:8b:50:3e:58:72:08:e6:15:72:8d:4c:5b:9b:54:6e:
64:73:cd:d0:86:a2:9d:49:03:06:41:c3:59:f2:61:82:68:8e:
d0:cf:f4:7f:b2:41:9d:d6:f9:61:a6:dc:6f:cb:34:a3:3c:f8:
4d:f9:0e:1d:53:91:2f:1e:45:e7:75:78:bc:07:78:f6:75:0f:
61:cf:4f:cc:56:eb:17:7a:fc:b7:bc:86:7b:72:30:24:01:87:
06:4a:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:16:19 2026 by rpki-client