Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer (raw, json)
Hash identifier: PVHsI9ZfYS2UK9K5B2SOPnH7c0u2L0DmpwZ4OcGTwUs=
Subject key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C12A156E7837A79E2645238C10A02AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50398
IP: 91.219.44.0/22
IP: 91.245.0.0 -- 91.245.4.255
IP: 91.245.6.0/23
IP: 2001:67c:1260::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:a1:56:e7:83:7a:79:e2:64:52:38:c1:0a:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:54:d2:42:86:2c:1e:ee:94:39:ab:66:2e:
2b:ef:e3:ab:72:ce:55:d5:7a:b2:b5:c1:57:4f:15:
3a:e8:97:b4:ac:a1:71:b1:58:99:0a:53:10:38:ea:
e7:33:b7:ec:a7:b1:de:1f:29:49:5d:49:19:7d:0d:
eb:55:07:78:8c:d8:ae:30:f2:8d:6a:59:d9:ae:f9:
9c:8f:5c:34:a4:89:20:e2:d9:ea:dc:5c:70:ff:c9:
fd:f1:d5:8a:2d:09:5c:2b:56:42:0e:ab:c2:b7:d3:
73:a8:41:c7:82:51:d0:89:6a:2e:a0:db:62:4e:74:
80:41:88:7e:1e:82:33:c2:c4:ed:be:1b:d5:16:9d:
df:8f:fa:37:34:2e:2d:0a:49:dc:a5:1c:3f:3f:9a:
3d:20:58:d0:55:4e:2c:78:a5:e2:9d:c4:78:36:d5:
56:41:26:16:d6:7c:11:7d:8a:f5:fb:52:9e:8e:70:
50:51:d4:68:99:a2:3c:4a:ee:2f:97:4b:9c:21:2c:
db:9f:ca:15:4e:d4:ea:22:1d:d3:52:ca:b9:c6:b2:
cc:77:f6:13:02:33:34:1f:ef:4c:2b:77:61:30:d9:
27:ec:a1:fa:e1:e6:c7:e9:a3:20:f8:1d:ef:66:1d:
23:6a:ad:30:cd:6a:f0:44:99:b6:ba:23:7b:06:57:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.44.0/22
91.245.0.0-91.245.4.255
91.245.6.0/23
IPv6:
2001:67c:1260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50398
Signature Algorithm: sha256WithRSAEncryption
4c:99:e0:b1:79:f2:1f:e0:34:79:8d:11:38:c9:54:a9:71:18:
38:ff:3e:5e:bb:af:5c:a4:c3:35:11:36:c1:f0:bc:ec:03:4e:
38:c9:a2:16:6f:33:b9:26:84:0d:d9:ab:fa:b1:99:ab:06:38:
5b:b6:f8:00:aa:a4:52:78:ef:8b:52:49:af:e5:fc:b7:ac:e1:
57:36:a0:c3:e8:cb:d4:3b:4c:b1:5b:5d:70:3f:a4:8b:22:bc:
82:37:64:02:11:0d:c2:b9:b2:6e:6f:be:79:e3:af:d8:fd:0c:
2d:93:3e:27:dc:ea:72:d9:c2:41:1f:2a:66:5d:a6:ad:28:d4:
8e:ee:a2:46:32:07:a6:fa:d1:97:eb:b4:c3:f2:8c:e4:ef:11:
66:c8:2c:ca:7d:20:e8:e9:de:de:d2:f7:2a:cf:07:b8:65:f8:
40:2e:8f:34:64:71:74:5b:39:bd:52:36:22:4c:4a:28:b0:c3:
ba:f4:81:a9:32:dd:03:cc:d6:b0:31:f8:26:33:6c:a3:74:b5:
4d:c7:77:b2:b7:6b:9c:50:0b:ef:59:8c:2f:f3:61:1e:86:a7:
a4:c9:ec:d1:b1:74:d6:c7:8b:a5:45:6d:61:6f:e0:65:c9:28:
a5:03:3e:79:0c:f9:85:94:95:cb:4c:0f:c6:0a:ab:aa:f0:ce:
e8:af:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:47 2026 by rpki-client