Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
File: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer (raw, json)
Hash identifier: ooeMaEUcFPdrGCxGqeWImOYvfzpZLQwruxnmcMtC/CY=
Subject key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECAB2E4C7CC6BA3766144DE9CE888A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212640
IP: 193.163.54.0/24
IP: 2a10:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:ab:2e:4c:7c:c6:ba:37:66:14:4d:e9:ce:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:69:2f:75:93:db:8c:6f:43:cb:15:18:5d:
f7:0c:89:81:51:ed:11:7a:36:97:b8:61:fa:f4:69:
37:a4:5a:e8:71:48:26:0a:2c:5a:41:05:29:f4:5f:
b6:61:37:51:4d:a2:0f:95:7b:e3:e2:0a:c3:34:d1:
83:52:64:95:06:56:88:f7:f7:62:74:aa:a5:bb:06:
b9:c7:aa:b5:2c:49:78:09:d4:8a:2e:d0:13:6b:bb:
2d:0a:50:18:21:b0:30:da:7e:6a:39:ae:34:9e:69:
e3:f5:b2:90:42:38:1e:7e:8e:ee:70:63:3a:0e:18:
ab:6e:af:5f:62:fe:3e:53:75:a7:97:88:38:eb:a0:
45:e2:13:07:83:d9:80:7b:14:12:f0:76:99:20:1f:
dd:d4:98:c8:a2:ac:09:31:53:4a:04:72:bf:e9:a1:
02:0f:b6:36:c0:9d:7c:b1:5d:24:d7:4a:d8:f9:4d:
03:f1:f2:8d:e3:24:24:27:f6:29:c3:31:51:bc:a2:
de:f7:57:72:9e:6f:b3:4d:28:9e:ea:00:ee:d4:36:
ee:6e:62:30:f8:63:78:ce:d9:87:41:c0:38:12:de:
1c:5f:01:5f:cb:14:17:5b:69:66:76:55:4c:92:bb:
df:65:db:d4:7e:96:59:34:a5:07:46:91:a7:b7:99:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.54.0/24
IPv6:
2a10:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212640
Signature Algorithm: sha256WithRSAEncryption
19:f1:8c:e4:6b:f8:ec:63:0c:b1:71:93:af:0e:14:e8:ed:25:
12:b6:07:29:8a:d3:92:af:d6:b4:91:c3:98:cb:74:b0:ab:07:
6b:41:db:7e:d3:e5:cc:29:14:54:82:4c:13:d5:59:ca:e1:97:
d6:85:94:65:d1:8e:05:23:45:35:0b:a4:27:23:0f:2c:b9:d4:
18:77:89:0b:97:35:7f:34:17:22:b0:de:74:1b:51:06:9b:a6:
bb:12:5b:e2:bb:78:d9:48:cd:be:92:ba:00:f4:fb:9a:f6:ae:
78:46:fe:e5:6c:a5:d7:ca:6c:38:9e:af:8a:0d:26:17:78:e9:
a1:9a:bf:ae:58:83:e4:2a:bf:64:13:54:7b:7c:e8:26:b9:a5:
56:c7:55:29:a4:4b:6b:7e:07:0f:83:ab:fd:82:12:f6:b6:5c:
5d:e4:33:ae:74:7d:6b:a7:1b:7f:67:8b:7e:67:cc:96:06:4a:
bf:6c:fc:e6:ef:00:d3:45:10:b9:cb:ed:c3:53:52:4f:cb:bf:
52:8c:a8:bb:1b:71:26:3b:c3:1d:96:41:00:fb:bf:b7:c2:c6:
d1:5e:c8:43:52:62:0c:2b:66:5b:2e:f3:e5:19:5b:ce:f8:5c:
24:65:97:fa:84:b4:68:33:ec:a2:0b:b0:41:6c:5f:ec:eb:91:
50:61:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:59 2026 by rpki-client