Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
File: Ib-nezzXgpM-XyVURdQorfvcoOE.cer (raw, json)
Hash identifier: X4nAROOZedZRKF+QaK8eU2ZgO7zpwzoW2GgGk1LDfPA=
Subject key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79102FD839FEC5F61F2682073F0FD239
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13302
IP: 185.166.16.0/22
IP: 2a02:17e8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:2f:d8:39:fe:c5:f6:1f:26:82:07:3f:0f:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:25:3e:e3:d9:30:b3:70:a0:e8:0d:57:43:
f5:2e:71:0d:97:1c:8a:1e:fa:54:a8:2b:12:50:be:
c2:a6:21:79:f4:95:a0:27:d3:d1:da:d0:22:61:4a:
00:0d:55:15:63:75:45:5b:65:83:97:e1:01:78:26:
93:54:da:1d:cf:25:57:8f:6c:c2:72:fb:16:fd:71:
5b:c0:dd:8a:d7:15:5a:a9:7f:e8:ba:23:27:80:3b:
51:e6:80:ee:8f:98:b7:eb:4b:05:fc:ae:35:77:9c:
e1:00:24:37:ef:04:04:32:ae:41:2b:4f:b0:47:ba:
63:d4:d1:db:fa:20:33:96:5a:af:2b:d4:7a:6c:7f:
76:6e:eb:52:65:c8:bb:f0:b1:61:75:3d:cc:60:b6:
86:af:29:49:49:4a:6e:81:b9:fa:22:d1:64:2d:ef:
e7:29:99:8c:c1:80:90:01:11:52:57:a0:10:af:c8:
75:16:d9:dc:bf:7b:fb:d4:b5:a7:df:f6:22:f7:ce:
44:39:13:70:ac:61:d8:cf:c2:75:9d:12:87:2a:73:
9d:4a:21:1b:e0:c5:de:cc:b0:33:b3:e8:3e:3b:b3:
75:20:12:f8:b7:63:18:f3:c9:a9:0c:c7:d5:58:d9:
67:35:55:c2:67:ad:b2:a4:e4:c6:7c:bf:e6:3a:82:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.16.0/22
IPv6:
2a02:17e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13302
Signature Algorithm: sha256WithRSAEncryption
5e:c7:ca:f1:31:ea:e2:01:3d:58:69:dd:b0:21:db:93:53:3f:
da:57:d3:5d:d5:41:6f:0f:c3:6b:91:5b:2e:a5:68:e6:9b:9a:
70:4f:d1:48:6d:e2:79:f1:23:27:d7:70:13:f6:b9:4a:ca:dc:
a1:cd:e2:80:cf:e1:a3:ab:8e:6d:cd:7b:09:7c:03:c2:d6:d3:
9c:71:87:67:80:2a:3d:ad:6a:1b:25:6b:15:de:01:a6:d0:e8:
6f:23:f2:61:5d:40:ec:fa:96:ba:51:c2:bf:bd:38:b6:84:4b:
d8:ef:fd:5f:db:fb:cc:ff:ef:ad:44:dc:e4:c4:1d:f4:22:f1:
66:4b:f5:8b:fc:f8:e3:14:69:c1:91:7b:eb:43:dd:6d:02:f3:
15:97:8c:d7:d8:6f:e4:50:03:43:1e:49:f0:b5:4c:86:c6:01:
e5:6b:99:79:8b:ec:85:7e:54:20:36:c7:f2:77:ba:b5:70:a7:
8d:f9:2b:fb:9b:7a:cc:7c:94:ca:93:51:fa:57:34:ba:e7:dc:
37:94:cc:94:9d:cf:7a:b3:bd:b8:37:d4:dc:64:ce:b4:38:0d:
28:e1:5b:c2:db:47:9b:31:f3:b1:ab:56:6b:f1:6d:ba:c4:37:
bb:7c:1c:81:16:7f:67:78:08:04:e5:b5:d4:2a:cb:f5:1e:61:
e7:bc:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:23 2026 by rpki-client