Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer (raw, json)
Hash identifier: /DA/3G9vWL+6SO5uuukhZSYdoezpQPxIswKmRk4TjtI=
Subject key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C136161EE6E5AAAAC0F72BC2C72C627
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:20:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29186
AS: 44897
AS: 49883
IP: 91.213.187.0/24
IP: 91.220.174.0/24
IP: 193.104.16.0/24
IP: 195.85.219.0/24
IP: 195.230.96.0/24
IP: 2001:678:abc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:61:61:ee:6e:5a:aa:ac:0f:72:bc:2c:72:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:3e:11:5b:6b:bd:a9:32:96:0c:43:b8:26:
b7:12:df:24:32:3b:e5:b4:65:90:9e:20:30:f7:8b:
7a:fa:da:cc:6b:59:ce:fc:c2:b4:be:87:06:94:4b:
05:5b:0d:4b:fe:32:9e:ff:1b:93:e2:ac:57:a1:17:
26:f3:22:5a:de:b8:f8:1d:4d:ab:60:7b:e3:13:12:
e8:5c:2e:62:90:8b:8e:98:39:1f:1e:ac:19:31:24:
cd:61:70:00:4f:bd:3b:d5:af:05:44:48:e0:28:79:
e0:44:9e:c5:23:a8:09:ed:77:a2:e1:4a:46:c6:d4:
19:0e:f4:c3:11:c6:eb:34:94:ea:26:4a:84:9d:0a:
c2:7d:dd:b6:3e:8c:be:6a:77:28:98:4f:38:ba:0a:
4f:b7:00:e8:89:b0:9d:4c:22:06:60:b0:75:cb:f1:
de:d7:69:2e:98:8e:64:f1:55:3c:fe:64:ed:e4:0a:
48:31:17:35:3e:0f:02:ea:9e:3c:20:cf:d9:fe:eb:
90:bd:02:db:3b:74:46:6b:48:ed:0a:45:76:89:e1:
0a:0a:6f:8e:a4:6e:f3:c3:28:82:99:34:87:2d:41:
a6:cf:c8:24:9e:5a:0e:90:f9:74:c4:cb:d0:4f:fd:
2b:03:8d:d3:e2:96:3a:e9:56:63:3e:0b:fc:44:bd:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.187.0/24
91.220.174.0/24
193.104.16.0/24
195.85.219.0/24
195.230.96.0/24
IPv6:
2001:678:abc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29186
44897
49883
Signature Algorithm: sha256WithRSAEncryption
a8:63:af:04:31:f3:33:51:5a:38:cf:c7:b6:70:34:8d:4f:72:
3d:1d:64:c9:71:ab:ef:56:43:74:28:1e:e4:b9:53:87:b4:74:
65:e2:54:ce:e5:6e:03:f8:7c:b3:c6:58:4c:67:0f:45:42:5a:
b6:3f:78:36:25:a8:9d:44:64:2e:3e:7a:c1:9a:34:ab:0b:02:
c2:6a:58:56:bb:aa:e8:7c:25:e9:e5:20:e6:b9:23:9e:5e:74:
7a:4f:f4:e9:e9:af:0a:f1:39:f8:a2:9a:df:51:b0:b3:c1:3d:
41:4f:9f:1f:34:7b:d6:27:be:ba:78:3f:30:fe:08:c7:09:db:
5a:4f:ba:d4:17:4f:ce:65:3e:44:df:8e:1d:28:d7:ea:da:a6:
13:6c:21:23:cd:53:3a:b5:4b:ba:62:f6:d3:95:bb:7a:a9:58:
d6:bf:93:7c:0e:61:52:e1:01:13:9a:cc:13:09:98:03:c3:75:
3e:02:79:a7:c6:6a:d0:8e:73:70:cf:1f:04:16:16:71:af:2e:
83:31:4b:fb:d4:9b:ff:ec:c2:b8:1a:33:c5:21:04:cc:75:3f:
7f:fa:9f:6e:b3:a3:22:17:e8:0f:b7:71:91:ae:ad:f6:93:ba:
86:bf:84:c2:63:91:65:f0:20:b3:d0:11:ab:e9:9f:2e:a5:33:
2e:c4:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:37 2026 by rpki-client