Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
File: FseIv2PBqcecEUVP45bScWqh03g.cer (raw, json)
Hash identifier: uZLVq+34phlE3/dvkh30oF1h6hA1i97glW1ksIpiam4=
Subject key identifier: 16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC203E1921FC71739C4018CA14696D0A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 07:19:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201658
IP: 195.62.30.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:03:e1:92:1f:c7:17:39:c4:01:8c:a1:46:96:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 07:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:1e:84:9d:2c:12:27:50:5a:47:1d:5e:d0:
87:48:f7:3a:b2:69:00:0e:6e:67:fb:df:d3:ae:80:
43:d4:7e:2b:43:b2:e7:b0:c5:61:9b:2b:3f:c4:58:
ed:e5:19:77:a8:33:f8:14:67:e3:0c:2c:52:99:1f:
13:28:de:7e:f0:f9:2c:21:07:4c:d6:ed:12:31:67:
5d:3c:af:9d:ad:a3:aa:ac:fe:4c:32:12:f3:ff:77:
4e:05:57:25:b2:64:11:db:6d:0a:77:37:86:5b:c7:
11:9b:a6:ac:94:e2:cf:78:ee:a4:45:6b:58:d1:ec:
10:d4:ca:8a:45:ca:cb:a6:1b:1f:d5:f0:2c:ce:b5:
0f:26:46:31:de:a8:a7:4b:67:71:cc:0b:d1:1d:8f:
85:ea:a7:21:17:23:2d:14:11:3d:9c:8d:0b:c7:76:
20:28:47:a7:ef:67:6c:60:54:49:af:ed:e7:74:a2:
d3:e3:9b:8a:7f:02:85:10:25:5c:fd:c3:a5:1f:2a:
73:54:76:9c:1c:4a:08:eb:64:30:29:74:e5:41:12:
57:e1:5a:c2:3f:f0:35:f1:53:54:51:18:5e:87:e5:
c3:3b:d8:10:26:92:60:83:da:38:f1:3a:89:99:82:
f5:e9:08:f1:26:10:1a:8f:c2:91:56:e4:36:15:d4:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.30.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201658
Signature Algorithm: sha256WithRSAEncryption
14:2b:82:fe:67:5b:23:98:05:79:28:ef:80:28:85:fe:12:39:
22:81:6a:c3:38:c3:35:08:06:fb:00:1c:66:08:7a:73:b8:e9:
f1:48:d7:50:56:0a:91:c4:ba:80:b4:81:88:d5:19:92:a8:81:
41:51:e9:c8:56:0b:0f:ad:be:6a:e3:74:c9:eb:5c:8c:57:c0:
ec:c3:b4:22:73:91:cf:1e:9c:a8:69:a1:6f:40:c8:14:ee:5e:
86:19:24:9b:1f:d2:5a:a3:d9:48:71:5b:8c:b9:0b:d3:08:b1:
33:48:24:c6:02:d7:b0:45:5e:5c:32:0e:d3:b7:a7:82:75:3f:
ce:8e:df:cc:02:ec:d9:2a:8b:d5:9f:3a:c7:a8:01:d7:7b:8a:
43:83:22:40:ae:1d:a4:e4:fc:1b:f5:bf:b8:99:a2:57:f2:71:
6b:c4:b5:e1:16:02:0c:7b:6f:cd:28:e5:f4:6e:fc:d5:1d:c9:
78:9c:12:7b:63:38:4c:d1:1b:e7:8b:c5:01:e7:1f:32:9f:91:
75:2f:69:bf:9b:d9:0e:62:f8:69:33:71:62:e9:e1:38:31:f8:
91:23:ee:8f:96:7c:a3:d0:08:f6:4e:b9:66:0f:0f:ec:4a:b2:
f7:c3:a2:db:55:b3:ee:e2:ef:ea:d0:16:f0:42:65:b1:ce:50:
a7:f7:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:20 2026 by rpki-client