Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.cer (raw, json)
Hash identifier: BUD+Rrz7U00MddaYKpBNgteIjot7JPI3ZXhCbKbqjqI=
Subject key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2643E79344D435DAF095428CBA600
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206983
IP: 193.228.175.0/24
IP: 193.228.181.0/24
IP: 193.228.185.0 -- 193.228.186.255
IP: 2a0f:9c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:64:3e:79:34:4d:43:5d:af:09:54:28:cb:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:96:59:71:d2:c1:ba:67:de:58:e4:4f:fb:
2e:04:86:ba:86:bf:60:4e:33:3e:09:8f:86:c0:eb:
26:99:cc:ca:7d:d9:ca:9b:2a:38:1a:94:da:4b:67:
b7:1f:bd:9a:35:ea:d0:3e:5e:70:89:ab:12:6b:88:
c8:26:48:e4:48:20:dc:36:7a:a6:66:1b:ff:7b:a3:
83:bf:ca:96:87:df:33:de:25:cc:1d:6b:1a:7d:05:
ff:2c:47:bb:0a:53:69:52:9b:7c:a2:f5:d8:f5:73:
dc:c5:a7:c9:86:34:02:84:88:87:be:9f:ca:1d:00:
c5:ca:20:ce:7e:88:13:89:a8:6f:13:5e:cf:12:cd:
1c:38:48:3f:41:14:0a:e2:c1:82:8f:4b:0d:67:46:
5a:c5:c7:28:8a:72:be:94:28:c3:5c:90:4d:2d:74:
05:4d:d9:53:a2:de:09:60:bc:dd:87:ce:84:10:7f:
1f:90:fc:b8:9a:a5:46:3d:f8:21:b5:f6:28:ef:75:
32:29:a6:74:77:ea:79:b8:39:e4:23:6b:1d:c1:12:
5f:44:f3:f7:e2:fb:74:af:24:1d:2d:97:01:6a:6d:
a1:58:9a:29:d8:2c:08:12:d2:73:40:27:51:40:8b:
f7:ae:07:e0:78:24:f4:29:c3:07:3b:a4:92:0e:99:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.175.0/24
193.228.181.0/24
193.228.185.0-193.228.186.255
IPv6:
2a0f:9c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206983
Signature Algorithm: sha256WithRSAEncryption
34:f8:bf:77:07:0c:8c:75:fa:95:e9:81:cb:95:8f:29:25:0d:
b2:b0:19:86:2b:0b:b1:1f:6c:21:fc:e7:35:6d:d7:2f:32:c1:
8d:ce:ad:b1:cf:5b:f1:88:87:fc:b8:7a:64:11:ec:75:f0:d9:
6e:79:af:f8:58:db:a6:16:b7:99:28:ce:0e:cf:23:b4:b0:da:
f8:bc:45:20:20:88:b2:ec:fe:40:d9:b8:6b:0e:c1:97:3b:c2:
89:80:0a:f0:b1:26:ee:8b:f2:2c:a3:bc:ba:c7:30:32:dc:39:
ec:f8:77:c4:8b:a9:3f:3e:44:45:59:db:0f:30:c9:99:16:d8:
24:ce:f3:19:03:78:b8:40:00:16:2a:c7:43:e0:d0:a8:27:68:
38:0a:49:2f:9f:c8:cf:85:3e:26:4f:b9:78:aa:79:af:63:d1:
43:e0:bd:53:d7:ab:82:8f:9b:79:00:f5:14:d6:ee:a5:90:30:
20:91:f0:21:fa:d4:89:5c:02:ff:1c:cd:53:c0:f0:74:47:f9:
2f:05:a1:a4:64:ca:a5:d5:16:60:8a:49:43:12:7f:c2:a9:eb:
1d:65:a4:3d:65:34:78:b2:63:76:35:d6:c9:83:70:67:b3:90:
8f:e2:fb:98:d7:fe:25:02:75:96:7b:e0:b7:16:5f:a0:bc:d9:
47:ab:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:02 2026 by rpki-client