Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer (raw, json)
Hash identifier: oMX/ITi8wpi/exJZ8wjirxnVFNhYzIVmHIcA6GsGqzg=
Subject key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EE49F8ABF9C72D6A6DAC45C0CE6EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43310
IP: 91.197.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:e4:9f:8a:bf:9c:72:d6:a6:da:c4:5c:0c:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=473469a966f4df3cf28171d87c74780fc472f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:48:69:cc:9f:62:92:ac:81:15:ae:c2:f6:
38:a7:27:c1:5b:7d:e4:5c:b6:ce:c1:1f:ec:08:ae:
18:48:48:fa:ec:22:ae:e0:70:a1:fe:a9:21:cc:e4:
b7:59:6a:98:b5:3f:9a:4e:0e:05:cd:cf:27:81:a7:
9b:e6:8c:28:13:be:89:b3:06:96:01:67:90:af:69:
80:1a:45:62:8c:38:e6:d2:38:6c:14:a7:b4:e9:ef:
28:a0:d1:83:14:91:05:42:1d:dd:c7:44:af:cc:98:
6c:5b:7d:93:bf:ca:d5:a7:51:99:45:73:31:7f:3e:
a0:f2:09:74:e1:c0:f2:fb:18:f8:39:10:81:e9:bd:
db:54:80:a2:10:a6:6e:d6:c6:0a:a7:58:fa:93:40:
a7:32:6f:35:6c:11:d6:e6:05:25:b6:be:8b:14:2d:
3f:2e:64:79:af:9e:fe:0a:13:c2:6e:e7:9e:b7:69:
91:bc:60:4e:e6:86:ea:81:12:79:52:e5:52:bb:08:
11:e6:29:7a:49:53:05:2a:fc:03:38:75:dc:7e:78:
a2:fb:ef:fe:ae:2f:40:f1:04:4e:40:6b:54:cb:df:
77:2c:9f:c6:80:d6:50:7b:6d:5c:e8:c9:41:ff:4c:
dc:ed:fb:41:c8:e0:a6:f6:e3:63:a1:58:35:ad:83:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43310
Signature Algorithm: sha256WithRSAEncryption
6e:08:41:0b:af:3a:dc:f6:75:c2:a8:03:65:48:26:27:d1:f9:
42:89:fc:a1:07:54:c7:df:1a:d2:ca:0a:57:24:94:58:da:5c:
96:39:c9:77:f9:d4:24:59:43:76:5b:96:f3:5a:4b:a2:03:31:
14:20:c0:53:b1:e5:b7:18:6d:c9:a7:77:54:03:ba:56:4f:57:
d4:98:5e:88:65:db:80:8a:2d:03:d6:d7:0a:7a:52:d3:f6:5c:
15:31:96:fb:06:53:c0:78:cc:d2:b8:35:38:6c:27:20:89:25:
6f:67:29:54:39:79:c6:b1:f9:25:57:d2:c7:a2:2b:a3:17:04:
5c:c3:d7:cb:cf:49:4c:ce:a6:70:4e:46:be:4f:f3:79:45:f0:
f8:61:9b:43:25:f1:58:58:0f:99:4b:46:e9:42:39:5f:4c:ff:
d9:6c:b0:82:c4:1d:d7:9e:f4:fa:c4:4e:6e:a4:52:a2:3d:e0:
e5:48:fb:f0:23:86:a0:44:1e:d6:74:fc:35:d5:18:84:c3:ef:
6c:b3:6f:5f:12:0d:bc:82:95:57:08:06:ff:93:9c:f1:35:72:
bd:c2:f9:29:09:49:6b:15:8b:bf:b8:8a:fc:88:cb:6d:e8:8e:
de:45:a6:00:76:45:3c:01:de:58:f0:e2:54:0f:37:fb:ae:58:
f8:61:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:20 2026 by rpki-client