Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
File: DxgybgAap_xW-DUxMVN2-equCYg.cer (raw, json)
Hash identifier: MygQtA0zLM+53pWF081/rQ2MMoDWOlRITyhsUMP18zw=
Subject key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6BAB956CB923E727BBD56C0946F0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205134
IP: 91.216.171.0/24
IP: 2a12:d9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:ba:b9:56:cb:92:3e:72:7b:bd:56:c0:94:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:ad:4b:68:3b:d9:9d:b8:9c:b3:d6:b6:f9:
3a:8f:fe:cc:66:8d:bd:3a:c1:69:f7:83:4f:d4:99:
50:1d:a4:15:17:80:5a:ab:6e:56:e4:49:8f:52:18:
04:07:9c:0c:68:8f:12:73:eb:fe:1f:db:03:52:a6:
5f:0c:52:c4:c7:a5:06:dc:e2:0e:57:ff:69:b4:ab:
ea:72:80:e6:46:cd:5c:8a:81:85:4f:f4:84:70:f5:
0f:c1:c7:76:85:af:5a:88:a7:35:51:e3:11:f6:e5:
d7:79:60:cb:10:2d:a8:0e:7d:d9:89:69:7b:d6:70:
62:b1:3f:4a:b3:ec:9f:20:6c:dd:1d:2b:c7:21:30:
2a:c1:b5:5f:b5:31:3f:3c:7a:90:ee:be:f5:62:61:
ee:13:9e:d9:30:14:9e:eb:fa:69:00:92:1b:a4:c8:
e0:53:5c:63:6c:23:17:c4:9c:db:5f:e8:63:6a:b2:
cf:52:3f:21:83:fa:a3:69:fc:df:fd:ed:3f:a3:5d:
68:bc:e6:08:dd:df:55:b9:5a:78:1b:d2:95:be:ee:
e7:c6:9e:a5:81:b5:cc:21:ed:88:62:6d:25:21:5b:
13:ba:5e:9f:36:80:05:7b:69:c5:fc:b8:22:1a:9a:
c3:cf:ad:3d:2d:4e:53:af:ca:99:88:15:db:23:15:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.171.0/24
IPv6:
2a12:d9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205134
Signature Algorithm: sha256WithRSAEncryption
aa:b6:f2:b7:a9:a2:49:2f:7a:37:da:1e:d5:3d:c2:db:d8:89:
bf:aa:4b:a1:45:60:8d:68:63:1f:bf:ac:01:e9:28:9c:c2:83:
14:3c:80:36:71:14:b8:b7:62:7c:09:d1:19:92:29:13:13:20:
c6:bd:68:eb:65:fa:a9:f6:12:b5:31:e0:00:96:71:74:8f:8c:
9c:0a:b8:34:92:b1:c5:34:03:ea:7c:e3:40:40:51:f4:3a:8b:
5e:41:3f:5e:6c:62:81:ac:e8:e3:09:7c:1a:51:39:93:ea:ad:
42:4e:9c:5c:38:48:f7:e3:31:b1:32:cd:61:9f:6c:0e:b6:65:
83:c1:6f:07:74:13:49:ef:e4:57:a1:ea:56:c5:cb:77:cf:49:
80:34:87:f6:f1:52:68:1c:f6:89:fa:06:b2:9a:a5:14:e0:9b:
25:5e:62:5e:f6:2a:e2:38:73:e4:74:8d:13:f4:56:5c:10:f6:
3d:c1:c1:5c:18:c6:ba:ba:50:49:ba:59:a3:e7:94:51:bb:09:
16:ac:13:db:db:96:6c:27:d8:93:2e:24:08:0a:77:fc:66:9d:
d7:6f:d9:06:3b:a6:be:be:c0:43:84:0e:0e:65:bc:f4:55:03:
58:5c:d8:69:b1:29:cb:e4:ad:47:cc:b0:9d:06:af:6a:45:f7:
8d:63:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:35 2026 by rpki-client