Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer (raw, json)
Hash identifier: DJJIaBzR8zSqoP6rTe7nM7ZVCkKVKOHqkSHUC206uxU=
Subject key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C70DBEF69AD4FA605DE5B56252C001
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205189
IP: 185.226.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:0d:be:f6:9a:d4:fa:60:5d:e5:b5:62:52:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1683805319d8485584dc39cf5381583fb6431d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:56:a2:a6:69:2b:b6:a8:ee:72:57:a8:2a:
d1:1b:83:a5:4d:2a:76:f4:84:37:c5:e3:ef:af:2f:
f3:04:7a:29:bc:b7:55:21:b3:dc:2e:88:a3:83:d2:
4a:c9:11:1f:e2:68:12:c0:55:0d:ea:9e:68:e9:cf:
e1:24:07:97:ad:fd:52:e5:a2:e0:18:90:8a:62:d9:
56:32:e8:d4:80:0b:51:c7:18:74:ac:c6:28:68:5f:
e5:06:33:3f:ae:3d:ed:e0:24:62:f9:e5:cc:a8:f1:
5f:68:7c:92:e1:0e:1e:6a:e1:83:95:d1:3a:34:b3:
88:df:38:ee:df:23:b2:c2:a1:a6:71:23:80:93:a0:
ea:4b:40:d3:a6:ba:2e:b6:65:bd:7c:99:70:ac:ec:
c9:32:d4:da:c4:8c:82:63:9a:b0:41:36:e2:ac:07:
20:33:28:cc:05:78:98:d1:c8:06:88:00:93:ce:9b:
e5:0b:cd:44:0e:6e:82:60:cb:40:da:62:df:ce:76:
77:1e:1f:17:d7:4b:d6:49:a5:43:14:50:ad:14:54:
16:b7:e2:8b:f4:6a:71:f8:0e:1c:13:79:5e:31:b7:
57:51:ec:a7:10:92:ec:b6:80:45:96:53:93:50:bc:
ef:8f:6d:14:77:d2:02:85:f3:f7:44:4d:c6:b6:52:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205189
Signature Algorithm: sha256WithRSAEncryption
73:1b:a0:c2:3b:a0:c6:24:5c:68:ea:d9:31:40:17:db:28:81:
ee:03:b9:e8:6a:6e:1a:85:1e:66:e2:c7:95:6d:79:a5:5d:ce:
22:0e:3d:cc:ec:1f:9d:b8:5f:b7:a3:7d:c8:a1:52:63:88:8b:
16:4a:bf:86:7b:bd:29:9a:58:4c:9c:01:cd:77:a9:c3:a9:15:
ff:b2:1f:e3:f0:7e:ca:95:2f:96:27:19:59:06:4c:42:94:17:
e7:45:90:61:58:1d:fd:21:e6:48:97:b9:02:be:f0:8a:57:72:
63:90:ed:89:b9:5f:b7:ba:26:cf:81:1d:b5:ce:36:bd:a8:25:
b0:6c:3b:c8:73:c4:c4:8e:89:c3:bd:77:0c:35:6c:ea:d3:ca:
7a:48:af:47:5c:d8:38:78:ff:fe:bd:1a:09:28:99:d1:19:b7:
ee:b8:95:5a:35:71:1c:1d:18:b3:9c:f6:f3:e7:3e:13:ec:fd:
f6:fa:ce:ba:bb:5b:68:98:46:e3:82:e4:98:6a:e5:29:1e:79:
83:00:7f:61:56:4f:91:38:bc:22:f8:2c:f1:ca:e8:13:a6:12:
56:17:91:8c:58:2d:92:73:3f:46:6f:60:58:9f:f1:46:33:5b:
2a:4f:d3:ef:fa:cf:6f:da:b7:06:61:3e:22:5c:35:e1:69:5d:
7d:67:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:00:07 2026 by rpki-client