Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
File: FqwWDambNJSla1R8aKjiwJGGkbU.cer (raw, json)
Hash identifier: OONHh5Jm9VDQOR5MTcwvoWwfyU9EJQg820DsAfBU3ms=
Subject key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B783534ABD984440CE547A5A85B5E8B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62223
IP: 185.42.192.0/22
IP: 2a04:9100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:34:ab:d9:84:44:0c:e5:47:a5:a8:5b:5e:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:6f:ea:f1:df:36:36:e9:d4:1d:3a:57:71:
3b:24:56:48:96:6d:1f:ed:1e:30:28:d7:1b:53:98:
8f:04:a0:91:31:c0:42:cd:f8:40:f8:36:a0:18:0e:
f4:96:43:53:12:86:24:18:37:b3:57:71:25:7e:05:
bf:4b:cf:ee:01:ad:e1:29:41:f5:ec:15:ba:d5:01:
43:78:69:d0:ec:37:c2:06:d7:f8:28:54:81:8c:9e:
bd:0b:02:21:e9:f9:01:6c:a0:62:1f:10:1d:81:a5:
64:b8:25:ae:3d:1b:1d:4f:12:62:e2:1f:b9:ab:b5:
9f:e1:db:f7:e8:81:7f:36:8a:40:da:ae:3e:0b:73:
5d:25:ce:32:75:5c:46:92:74:f3:12:7d:28:49:e2:
70:e8:63:97:bc:4b:d4:f5:fe:17:20:10:24:21:25:
1d:40:c4:b5:67:b5:b2:2e:37:13:67:60:00:65:4f:
2a:c1:05:47:35:2f:fe:cb:b5:5b:fe:95:83:ec:02:
4c:6c:53:2b:3b:21:97:05:b4:5b:63:dd:21:16:a7:
fd:21:e9:79:0b:04:c1:74:8a:50:ea:0e:93:c1:35:
da:4a:6c:f9:ed:a7:78:21:48:bb:ca:ca:7e:95:b5:
c9:47:e7:ca:ef:34:04:8c:0c:2c:52:50:7c:76:99:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
IPv6:
2a04:9100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62223
Signature Algorithm: sha256WithRSAEncryption
72:e3:5e:99:48:6b:78:6e:ee:26:9c:b3:4c:99:dc:36:28:ef:
b3:0b:1b:d7:32:50:3b:6b:a6:85:ed:00:2e:63:c8:57:9d:20:
14:63:56:b3:b4:ef:c4:6f:41:0c:40:6f:b5:52:24:7a:16:7b:
28:46:58:11:be:8e:e9:e6:73:a3:03:6f:c7:0e:a1:d0:1e:48:
62:5c:14:16:92:80:a8:9f:05:1f:ed:28:6a:08:0e:a5:b0:29:
65:fb:2d:b1:75:e7:3e:82:90:e2:30:4a:be:98:7b:eb:72:1e:
aa:fa:3f:46:8c:d4:83:ea:3a:32:b3:fb:6e:cf:5f:69:22:c5:
5c:67:a1:2e:74:19:4b:6c:c8:7b:85:df:83:d3:c3:40:54:e5:
86:b9:b2:53:ba:bd:ce:87:6c:22:ea:a2:21:cd:7e:b7:f5:b2:
1b:5b:e5:8e:d0:98:99:ec:c7:a5:93:cc:fb:9d:95:f7:b5:bd:
3a:8c:15:ea:26:42:e3:4d:5a:65:9e:e7:17:18:4d:d8:9f:10:
eb:e0:c9:27:e0:dd:82:0c:62:2e:a8:15:62:b0:20:8b:41:cd:
95:87:27:c2:63:7b:90:bb:e4:52:cb:ef:7e:44:f8:c6:68:b5:
08:e9:39:be:01:17:59:e6:58:04:57:a2:94:52:a7:34:19:68:
12:12:07:1b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt4NTSr2YREDOVHpahbXouUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFjMTYwZGE5OWIzNDk0YTU2YjU0N2M2OGE4ZTJjMDkxODY5MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmZv6vHfNjbp1B06V3E7JFZIlm0f
7R4wKNcbU5iPBKCRMcBCzfhA+DagGA70lkNTEoYkGDezV3ElfgW/S8/uAa3hKUH1
7BW61QFDeGnQ7DfCBtf4KFSBjJ69CwIh6fkBbKBiHxAdgaVkuCWuPRsdTxJi4h+5
q7Wf4dv36IF/NopA2q4+C3NdJc4ydVxGknTzEn0oSeJw6GOXvEvU9f4XIBAkISUd
QMS1Z7WyLjcTZ2AAZU8qwQVHNS/+y7Vb/pWD7AJMbFMrOyGXBbRbY90hFqf9Iel5
CwTBdIpQ6g6TwTXaSmz57ad4IUi7ysp+lbXJR+fK7zQEjAwsUlB8dpnr5wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBasFg2pmzSUpWtUfGio4sCRhpG1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzBmNDk3
My02MGJmLTQzODYtOTdhNi0xZTY5MTI2ODlkZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMGY0OTcz
LTYwYmYtNDM4Ni05N2E2LTFlNjkxMjY4OWRkOC8xL0Zxd1dEYW1iTkpTbGExUjhh
S2ppd0pHR2tiVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSrAMA0EAgACMAcDBQMqBJEAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDzDzANBgkqhkiG9w0BAQsFAAOCAQEAcuNemUhreG7u
JpyzTJncNijvswsb1zJQO2umhe0ALmPIV50gFGNWs7TvxG9BDEBvtVIkehZ7KEZY
Eb6O6eZzowNvxw6h0B5IYlwUFpKAqJ8FH+0oaggOpbApZfstsXXnPoKQ4jBKvph7
63Ieqvo/RozUg+o6MrP7bs9faSLFXGehLnQZS2zIe4Xfg9PDQFTlhrmyU7q9zods
IuqiIc1+t/WyG1vljtCYmezHpZPM+52V97W9OowV6iZC401aZZ7nFxhN2J8Q6+DJ
J+DdggxiLqgVYrAgi0HNlYcnwmN7kLvkUsvvfkT4xmi1COk5vgEXWeZYBFeilFKn
NBloEhIHGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:04:05 2026 by rpki-client