Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer (raw, json)
Hash identifier: REjXbTYirL2YqAM58JSSMSKUmD3XAMxTEBE91R9o7Hs=
Subject key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F835FADDE9D44AB5AE82722F4AD3419
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 28738
IP: 78.153.128.0 -- 78.153.136.255
IP: 78.153.139.0 -- 78.153.146.255
IP: 78.153.148.0 -- 78.153.159.255
IP: 109.237.96.0/21
IP: 109.237.105.0 -- 109.237.111.255
IP: 2a01:adc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:5f:ad:de:9d:44:ab:5a:e8:27:22:f4:ad:34:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22a44566764ebb511683cb6228fa91997b559379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:36:3b:af:a9:14:c3:80:2b:65:d1:0c:78:
c1:2c:5a:2b:4e:8f:8e:be:92:27:62:e1:e6:2e:77:
a2:fd:bd:68:3b:e1:4d:ee:51:83:3f:ee:91:be:f9:
27:04:3b:63:fa:c1:66:82:1b:fe:49:ab:02:b9:a8:
01:82:c4:1a:0e:21:09:5a:06:3a:b9:91:d2:ba:93:
10:82:4e:36:e3:5e:e1:8f:cc:20:2d:fb:7f:99:c8:
72:50:4f:f9:b2:36:dd:0c:23:dc:63:9f:22:c1:07:
89:75:f3:5d:97:be:86:d3:e1:5b:fc:1d:c2:47:99:
9e:71:ff:24:4c:24:0d:f2:1b:60:e7:7d:90:26:a9:
ab:02:04:ce:28:20:ae:9f:d1:ce:34:1a:ce:8e:71:
72:3d:a4:c9:a4:1e:4b:9a:af:39:1e:a0:d4:89:ee:
47:e7:11:cf:c3:ec:ee:b4:29:be:13:d7:14:e8:01:
22:84:8b:dd:bf:51:b2:ef:95:2f:27:64:f0:14:04:
e2:84:d7:4f:72:6f:75:eb:3e:76:6d:d1:2c:4d:8d:
e9:04:49:a8:3b:56:5f:99:47:6e:cb:99:0d:58:74:
68:9f:fe:73:42:23:61:43:46:65:b3:94:3d:28:1a:
fc:1b:af:4c:f1:6c:eb:a3:9d:cd:63:4d:30:b0:2c:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.128.0-78.153.136.255
78.153.139.0-78.153.146.255
78.153.148.0-78.153.159.255
109.237.96.0/21
109.237.105.0-109.237.111.255
IPv6:
2a01:adc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28738
Signature Algorithm: sha256WithRSAEncryption
03:01:59:b1:37:59:74:e5:d2:11:be:81:1f:28:09:08:38:d3:
c7:6d:33:84:63:b3:f8:10:8d:cb:ea:98:d3:fc:79:56:2c:d6:
d5:f7:82:e1:af:ba:7e:36:45:67:b0:0a:18:a3:2f:c5:1b:f7:
31:51:fc:f4:d2:e7:19:b6:87:01:0f:8b:98:c7:30:b2:53:26:
82:d8:3b:92:65:cf:c4:c4:a3:55:24:bb:02:d2:0d:3a:33:3f:
c6:1a:24:25:8c:53:1a:49:65:44:1d:4b:cd:6e:6e:96:9c:e6:
f4:87:0b:3e:43:ca:9c:4e:86:5d:88:ea:34:ee:e0:06:8b:4b:
66:ca:ae:77:4c:59:20:1a:23:94:8a:f4:84:5b:8c:40:8b:28:
a3:a9:76:1d:1f:10:3a:bf:96:39:79:00:bf:81:be:12:0f:b1:
4a:2b:93:c6:8d:fd:60:1e:12:f8:62:86:1e:29:4e:01:b6:6a:
dc:09:48:56:e4:40:5e:37:81:87:b4:4c:6f:fe:27:41:91:69:
5a:87:51:67:f7:3e:ce:8a:94:ca:89:3a:55:4a:44:9c:ee:19:
c8:f8:ae:66:09:89:fb:0e:ba:eb:91:3e:89:e9:e0:a1:1d:c3:
ee:60:59:1b:77:96:e6:c7:24:f8:d1:e9:46:d0:23:bd:7e:bc:
9a:17:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:23 2026 by rpki-client