Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer (raw, json)
Hash identifier: aQjje97i3eiGJP0OZwJStftbWBS9648Q2CkV19ahRwc=
Subject key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EBEA36B56891433E6765D2D12A9DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57609
IP: 193.222.58.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:be:a3:6b:56:89:14:33:e6:76:5d:2d:12:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:f3:28:b3:09:f5:b4:5c:75:85:ba:48:78:
9c:9a:7e:88:f2:9e:6e:64:84:83:74:39:8e:73:36:
99:5a:a3:08:21:a8:5f:3c:8d:12:e9:2f:e1:6a:1f:
90:0a:2b:c7:50:43:9b:01:1f:fc:21:7c:0a:6d:aa:
4d:0c:27:db:be:8d:43:c6:16:f4:c5:58:9d:12:38:
3f:d8:33:88:d0:20:f0:27:de:7b:92:c5:0b:0e:9a:
db:ad:a3:ab:2b:b8:97:c8:be:d4:06:46:41:08:72:
f7:0b:cd:34:5a:2e:1a:e6:fe:2c:71:65:41:e8:c2:
6c:09:fc:6e:30:48:19:a0:26:6a:f7:37:bf:f7:df:
10:c1:22:d2:ca:37:65:14:38:f9:34:29:81:37:a4:
ae:9e:b0:b2:8d:e6:03:d1:85:aa:44:d8:81:41:aa:
2c:fb:3b:0f:6b:b6:42:6b:5a:60:3e:b7:f1:2e:42:
73:8f:4b:b9:07:d4:63:25:1c:5c:ad:e7:a8:10:44:
06:4c:a1:43:0a:4d:20:c9:22:8c:01:21:14:4f:c1:
8b:94:f2:e4:28:07:5f:9d:6e:50:f4:ae:eb:74:aa:
53:c0:ff:37:4a:35:8d:66:cf:b9:7e:49:e9:b6:73:
3a:39:a0:37:d5:c1:fe:83:7e:0a:49:f0:68:01:2a:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.58.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57609
Signature Algorithm: sha256WithRSAEncryption
25:67:12:40:7c:a4:ae:b0:39:b8:ac:4a:ea:ee:e9:a2:8f:9d:
fa:84:30:4a:9e:fe:5e:22:ef:3d:93:4c:b5:e0:ef:58:e1:25:
b1:c3:d9:97:f9:89:59:d3:4f:5f:f4:d7:6a:a5:08:dd:2f:e7:
10:f7:03:d9:ae:24:99:3a:47:c3:7f:85:fb:1f:8c:69:14:69:
a1:d0:0a:cb:00:a1:24:98:47:25:bc:1f:d6:ba:58:d8:75:f8:
d8:a7:e1:e1:60:0a:13:14:07:20:05:a2:9c:22:94:e9:39:8c:
58:78:86:b7:a5:f2:fa:7c:ac:74:35:65:43:af:ab:b4:11:33:
2d:81:8e:d3:27:80:54:d9:d4:ca:2a:d5:ad:6c:ac:4a:24:9b:
97:bb:68:f8:79:de:5a:f4:72:d2:15:5d:45:3f:97:fb:d2:aa:
6f:78:92:ab:bc:2d:7a:5b:f1:d3:34:52:42:15:e8:f2:84:8b:
81:16:be:80:32:05:47:8a:fb:c1:65:89:b1:bf:44:29:81:b9:
4d:fb:60:d5:65:37:b5:dd:70:90:30:67:85:da:35:b2:20:f3:
15:16:7a:da:f4:59:a3:7e:1b:82:d4:23:03:9b:8a:42:6d:eb:
3e:cd:ef:cf:53:d5:57:91:07:8d:94:94:76:a2:d5:2a:a9:c6:
ef:6b:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:48 2026 by rpki-client