Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
File: FbWVJg9ywiJUesPjZ_LIh644o_w.cer (raw, json)
Hash identifier: tOTAcGKMOC6RKiAHbl0dqskklfWV02S1/5oVVvSOg9w=
Subject key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CECC57956348D4FF36E5D44ED5B9E45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205665
IP: 185.209.232.0/22
IP: 2a0b:8a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:c5:79:56:34:8d:4f:f3:6e:5d:44:ed:5b:9e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:7b:d8:02:3d:42:9d:00:8d:ca:ff:d1:8a:
2c:ce:83:de:57:e1:5b:0c:3b:a4:66:db:72:1c:a4:
f8:15:29:29:ef:e4:29:2b:4e:41:1a:96:8b:64:21:
88:2b:45:0e:80:aa:a6:7b:b8:a0:09:55:26:32:53:
5f:b5:87:a0:88:cb:b5:8f:3a:c9:6b:35:86:97:db:
96:23:9f:eb:45:5a:90:77:aa:c2:a0:c4:90:c5:e1:
d5:b5:8b:0f:45:53:2a:3c:df:91:31:54:27:40:67:
f8:85:f1:70:67:20:78:08:68:02:59:ee:6a:12:59:
b0:27:3a:ff:6d:e6:02:43:af:bb:ed:1d:eb:4a:35:
f1:05:21:6f:1b:09:09:80:8d:44:12:8c:e2:66:47:
0b:98:dc:b8:33:91:91:0d:e3:bb:cb:b4:a4:cc:46:
52:69:67:e5:26:45:fe:ca:2f:93:e1:f2:d9:e9:c2:
ef:b8:58:b3:f7:6b:93:cb:8d:f7:62:d8:ab:bd:35:
47:61:62:12:87:b4:9f:3e:37:39:76:bc:d8:af:40:
3a:bd:ad:de:90:43:d5:0c:58:64:e7:5f:f3:0f:53:
bd:47:fe:58:86:8e:29:b8:d4:83:b2:31:a7:70:5b:
e1:47:ba:0c:11:42:57:49:75:2d:51:1f:c7:9e:1e:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.232.0/22
IPv6:
2a0b:8a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205665
Signature Algorithm: sha256WithRSAEncryption
5b:2a:87:8a:0d:18:e0:54:f4:7b:a7:48:56:3e:81:89:e4:85:
76:0f:5a:34:8a:8b:73:78:dd:d3:c7:2e:2d:f1:f1:b5:97:17:
44:2f:05:e1:8c:77:b4:7d:f5:3f:40:1b:91:cd:d9:99:d1:5e:
62:3d:17:00:9b:f2:33:88:ed:09:0f:15:8e:03:c7:2e:de:fb:
84:e6:5c:d6:a4:19:8b:b4:aa:de:5c:cf:91:d7:a0:9b:1f:6e:
02:5d:94:48:d7:e1:72:dd:42:4e:0e:13:0d:3e:98:91:af:87:
02:05:c8:da:00:80:a6:c7:f8:39:67:19:c2:b8:87:ab:74:72:
07:32:dc:2b:76:a0:e4:bb:1f:00:82:77:17:45:27:6c:ec:05:
05:65:f8:0e:d1:6d:50:b4:a9:09:5c:42:d7:b6:57:3e:d9:ae:
43:39:6f:90:6c:30:8c:78:e1:a7:35:5b:49:62:f1:fe:04:ef:
88:27:d1:51:66:78:15:23:ef:1e:2c:5e:27:55:81:3e:c2:ea:
85:ab:d4:5f:d6:14:2d:c9:2b:50:8b:25:5f:cd:f9:7a:af:0d:
ad:cf:08:02:ec:b8:2c:58:51:d5:e3:d6:cc:34:07:44:b3:ba:
59:26:be:30:77:a0:17:d4:9c:c6:3c:35:a8:90:5e:f7:31:09:
f7:2c:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:02 2026 by rpki-client