Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer (raw, json)
Hash identifier: jonCL1qQRZqUkM609YtDw5iom8u3PrHReout3bVJQI8=
Subject key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B37E2E6B6EEC326CD562411AAAC7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.223.247.0/24
IP: 2001:678:1b4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:37:e2:e6:b6:ee:c3:26:cd:56:24:11:aa:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:aa:34:5e:f4:e5:d2:96:ea:b8:2f:a2:97:
0d:c5:fa:2f:de:17:bb:97:62:af:e1:60:c2:35:72:
30:04:e1:ec:91:c7:c8:ee:a5:c2:95:02:78:26:62:
14:e6:94:f9:6d:5f:6f:e3:9a:8d:c6:a5:3b:24:e3:
39:a5:27:3b:88:c1:22:3c:c7:48:b2:a4:55:5c:e1:
8a:33:7a:a5:d7:06:fd:bd:93:9c:e3:db:28:28:ee:
25:5f:bf:52:c6:55:f2:16:b5:75:d8:cd:7d:16:dc:
b8:43:c8:b0:bf:4c:10:d8:99:c2:cd:04:7d:e7:a0:
30:28:4a:1a:d2:c3:39:58:ef:17:33:b0:21:38:36:
25:36:45:68:16:39:7a:4a:19:18:c0:fa:2a:c8:7b:
52:46:c4:66:42:01:a2:de:a8:81:5b:8c:bd:eb:16:
db:26:d9:b5:d1:50:5b:08:66:ca:77:db:a2:45:96:
2c:80:62:42:c9:02:96:8c:39:cf:55:2f:c6:72:f5:
ef:19:0b:8e:de:df:9b:51:00:0b:4c:32:76:fc:5b:
ca:72:52:ec:f7:74:8e:a2:21:0d:1f:df:a5:09:97:
85:cf:2e:15:43:5b:c9:ab:24:08:9e:82:7b:7f:05:
f5:62:f2:81:2c:54:a3:3d:7a:7f:10:6e:29:13:4a:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.247.0/24
IPv6:
2001:678:1b4::/48
Signature Algorithm: sha256WithRSAEncryption
50:ec:e2:ad:0e:aa:1a:40:ec:89:46:8b:cb:cb:e0:5c:db:82:
a4:c5:59:eb:28:54:1b:ff:c2:cc:22:a5:b2:54:33:79:b6:ef:
60:71:ed:8a:e6:b5:3a:26:c3:9b:2a:c9:55:2c:6f:18:66:46:
31:07:cd:c7:b5:52:81:d3:ee:cd:fc:71:52:f5:5c:78:43:d0:
98:dc:12:d1:94:db:90:32:e9:e0:17:90:cd:50:51:39:dd:13:
0b:5f:88:a2:d9:63:56:68:29:54:11:5f:e0:71:79:62:3a:3f:
a8:98:13:1d:0b:f8:6d:8d:d0:ca:c7:72:ad:8d:3d:37:8b:66:
15:91:9d:73:c7:cb:82:e7:4c:8a:cb:ff:0a:26:92:f6:7e:e8:
58:fc:ac:e2:17:20:09:d8:b9:15:bd:b8:6a:2c:30:e8:87:82:
b3:ba:90:45:57:87:ad:c6:d7:c4:74:60:b8:07:62:89:1e:8e:
05:50:56:c6:d5:64:27:bc:6e:cb:62:3b:d9:66:60:be:7a:25:
6c:04:8e:c7:30:85:96:5d:e1:20:bd:a3:6f:66:4f:c6:01:04:
7e:1b:c7:2d:f9:46:78:fb:59:3f:ae:f5:b5:de:04:50:0a:65:
a8:77:e4:e4:94:41:83:84:52:bc:b5:3a:ec:81:18:9f:be:76:
62:14:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:14:46 2026 by rpki-client