Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.cer (raw, json)
Hash identifier: ffXQuKZ4lRTPBKMkVP0OK3viEUDv/bSBJc7Mzc1ya0o=
Subject key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E91FBBD535BA7CA6B22CEFB80D9ADEB0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jun 2026 09:34:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59455
IP: 46.17.208.0/21
IP: 185.23.52.0/22
IP: 185.33.192.0/22
IP: 185.98.108.0/22
IP: 2a04:2340::/29
IP: 2a05:7940::/29
IP: 2a07:5e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:fb:bd:53:5b:a7:ca:6b:22:ce:fb:80:d9:ad:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 09:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:23:48:89:ea:bb:46:26:23:5c:08:b0:a3:
ee:f5:81:da:aa:11:21:4c:81:06:d5:cd:8f:86:54:
9f:7f:8d:f7:fc:a5:85:ec:08:27:85:40:02:a0:3c:
ef:dc:78:18:2f:ff:d4:e7:16:4a:11:7d:45:a3:70:
85:be:1f:23:52:ef:07:c6:ff:b3:5b:15:de:07:42:
9a:fb:9a:28:a8:f8:ad:ad:2c:2f:58:31:84:dc:42:
ee:ff:3e:4d:31:99:c6:bc:71:74:8d:00:64:dd:32:
4e:81:8d:bc:61:6d:2f:85:08:d1:18:66:9a:18:bb:
94:48:c4:5b:85:cb:7a:a8:97:99:84:87:84:6f:09:
87:52:df:72:8e:81:a2:0b:52:a4:07:39:71:59:41:
9c:91:9b:3c:2f:94:a5:41:18:9d:c2:2e:57:eb:cc:
94:99:8f:6b:de:8c:37:fb:09:cc:2f:c8:8b:7f:ac:
34:3a:df:af:ea:f9:41:3b:ac:46:df:cf:0e:e6:0d:
ad:30:2e:4e:65:75:ab:b6:63:4d:09:ad:f9:59:a5:
c7:55:9d:34:d2:39:70:b1:4c:a3:ad:25:34:f6:21:
9f:4b:86:f6:a4:95:e1:e1:11:00:a0:3b:ea:75:6a:
d9:ed:5e:13:e6:5e:b2:90:3a:b7:7d:c4:b6:78:70:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.98.108.0/22
IPv6:
2a04:2340::/29
2a05:7940::/29
2a07:5e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59455
Signature Algorithm: sha256WithRSAEncryption
8b:69:57:a6:86:9b:fd:8a:3e:59:3d:cf:24:c5:4f:9c:6b:b6:
80:e2:8f:d1:fa:dd:3e:32:96:8d:e3:db:0e:c2:7d:7f:64:7c:
e9:c8:bf:e1:6d:5c:48:9d:86:3e:63:35:26:b5:b7:1f:62:28:
5e:60:bf:28:37:0c:1f:04:af:6d:7b:65:f2:70:06:e4:b6:e6:
6f:b9:b8:77:bb:a9:88:f2:3c:56:3c:1d:f9:d4:b5:04:8d:21:
1a:9b:6a:c5:db:b7:8d:c8:1f:45:43:b0:ad:d4:86:d5:9e:6e:
4f:80:1d:d4:c1:99:d3:03:7d:1b:1d:84:d0:00:5e:16:c4:da:
5f:fb:e8:84:f2:01:77:03:fe:f2:3f:89:19:c0:7a:0e:9b:be:
00:8b:40:67:b9:d1:2c:a7:fd:db:0c:2b:90:e4:a4:2a:ad:9f:
cc:56:d4:37:0e:b5:9c:03:8f:2b:90:fe:0d:75:34:ac:74:eb:
2b:95:fc:b7:0b:5c:f9:ed:04:72:62:55:c6:55:e3:31:89:4f:
07:fa:c7:71:17:5c:67:8a:67:7a:c7:46:49:cf:8b:85:7b:00:
0e:b9:89:bb:eb:6a:02:94:60:39:3d:c3:66:7b:56:8b:7a:64:
dd:3c:6a:ec:1a:ff:a2:13:46:15:87:e3:2d:8e:a6:59:69:8b:
cc:ad:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:47 2026 by rpki-client