Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer (raw, json)
Hash identifier: sExwHnG1ifjwV4txCsOl7KaPY1tlPYyq6pt/QSgpa1E=
Subject key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2C712616BC0B4D96BABC085BDD042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207570
IP: 91.212.6.0/24
IP: 2a0a:740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:c7:12:61:6b:c0:b4:d9:6b:ab:c0:85:bd:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:21:7e:fd:89:c1:68:6e:0b:13:46:2a:eb:
3c:91:fc:a3:a9:8a:82:8f:43:98:8a:b0:bc:41:86:
0d:01:28:cf:4f:52:3b:55:d9:45:34:05:c3:aa:26:
fa:65:c0:ec:3c:2a:03:40:2a:8e:c8:ab:6d:85:8c:
43:06:de:12:53:4a:2f:37:cc:2d:2a:02:4e:c1:1e:
cc:89:ac:d3:4b:10:31:14:90:49:92:25:7a:64:93:
e2:c7:0b:22:77:12:56:65:1e:19:0c:a4:fb:cc:2f:
b5:b8:c5:61:79:e9:ab:21:43:bc:3b:9c:0a:1a:bd:
27:20:a2:04:d2:54:35:29:37:a7:bf:64:71:e6:a4:
3d:07:a0:fb:f8:fc:3d:a1:55:b0:27:4b:5d:c2:f4:
d7:a4:c7:a7:f4:f3:80:95:d9:2c:26:01:bc:a8:a5:
cd:84:60:0e:d4:2e:d4:25:ad:1e:39:63:ff:6e:7f:
b4:88:65:1f:9c:ba:91:bd:66:ff:2d:09:9e:9b:36:
d2:f6:43:df:2b:ec:94:9b:70:62:c8:29:78:04:7e:
17:9e:79:07:21:04:ce:f8:c1:bc:a2:ba:9c:89:a2:
c0:76:cf:c8:50:c8:25:6f:7b:45:db:6a:08:1b:9e:
2d:bc:72:39:32:d3:f7:32:72:12:47:87:d9:fe:36:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.6.0/24
IPv6:
2a0a:740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207570
Signature Algorithm: sha256WithRSAEncryption
14:f3:55:78:89:57:2f:74:91:d4:de:37:9d:bb:3b:49:12:9f:
8a:3e:7b:b8:4f:44:3c:80:85:12:1f:6f:c5:56:b1:26:b2:b1:
19:4e:65:34:a3:9d:42:23:07:60:06:8c:88:47:37:1c:be:5c:
dd:d4:63:ca:e0:bf:e9:91:d3:34:9d:19:52:b5:fa:4f:da:96:
03:59:07:e0:a7:c0:b0:f4:ca:41:f3:25:4b:15:1f:d1:c7:1f:
43:90:21:d8:36:b5:05:12:8e:14:9f:4e:5e:ce:31:1e:c8:6f:
9e:3b:81:21:81:c2:68:1e:ec:de:f8:3e:74:96:3b:41:3b:bc:
7a:a3:d3:77:a1:1d:1b:18:13:28:05:6c:c4:b7:93:0c:52:2c:
9c:c3:a4:46:aa:9a:5b:1e:56:92:04:b5:f3:62:4c:a2:cb:57:
ad:82:d8:48:69:b0:ca:26:79:d0:8c:5b:c4:03:e0:bd:b7:b7:
1f:ea:17:88:b5:d8:8d:c9:5e:c2:7a:95:ba:8b:40:11:88:47:
47:30:56:b5:e5:67:66:47:a9:66:9e:10:74:ce:49:7b:03:14:
62:a1:af:a5:49:11:ed:f7:30:e4:38:27:03:71:14:2a:39:9b:
c6:e3:d5:00:37:e1:c5:ad:85:30:e2:38:71:0a:10:c2:4c:9e:
03:52:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:16 2026 by rpki-client