Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.cer (raw, json)
Hash identifier: hmw55fskaYHqC0oLaYX0ljDjzcTVaA9B1433BnWA360=
Subject key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD731FC72A7215B90C39495F6D81A234D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 10:01:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48631
IP: 178.22.8.0/21
IP: 194.62.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:31:fc:72:a7:21:5b:90:c3:94:95:f6:d8:1a:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 10:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:65:71:22:66:37:ed:60:54:57:15:72:90:
3f:da:ce:fd:52:db:f1:5a:66:2b:44:10:53:b5:7c:
08:f5:25:10:d2:67:af:53:c4:1e:6e:be:a9:86:88:
1a:cf:ee:7f:ba:59:0f:d5:d1:75:b6:58:7f:9c:78:
ee:33:df:fe:83:3d:4e:7c:20:f3:24:99:a5:f5:2d:
b2:d3:9e:00:61:ca:7c:7e:8b:a2:3c:aa:19:86:b3:
85:a8:a7:51:5a:eb:30:c9:b9:dd:b5:18:1b:15:07:
1f:a0:b4:00:ff:03:5b:d1:90:1a:50:df:9c:a7:2e:
51:db:0c:26:89:14:30:c5:84:4b:4a:bb:38:02:8c:
30:47:c8:4d:74:12:a0:a8:4d:c7:e9:4a:8f:58:a7:
3d:cf:84:ef:ad:49:25:a3:10:c6:da:5e:25:72:76:
22:a5:9b:46:ee:19:7d:c0:8d:19:62:a6:d1:5b:a6:
57:d2:ab:82:bf:1f:75:3d:a4:85:f5:f5:ac:6d:11:
d1:0b:db:70:64:fc:41:c6:f1:41:bb:25:bf:12:39:
0f:6f:94:d9:69:e5:55:6f:87:f0:cc:a4:39:a7:73:
29:00:9b:03:86:0f:4a:57:66:f8:95:0e:7c:f6:4e:
a0:94:93:a9:0b:69:27:b1:c2:9e:1f:69:fe:f0:dd:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.8.0/21
194.62.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48631
Signature Algorithm: sha256WithRSAEncryption
22:31:c5:04:ee:fd:fb:f4:cf:ec:85:08:43:ff:11:83:9b:73:
50:a7:b0:5d:18:ff:4c:ce:98:ba:cb:7d:af:f1:5c:85:01:43:
62:82:0e:cb:f1:58:d6:c1:26:9f:33:34:73:d5:48:30:c6:46:
fc:d2:23:d5:82:87:9d:e2:8f:ba:13:91:fc:91:3d:9d:ca:36:
12:0b:e1:67:57:a2:ee:ff:c4:27:aa:8e:a6:58:8c:2a:9d:8b:
fc:78:67:66:97:98:93:24:d8:98:d7:26:2d:6e:a1:2c:ee:f5:
f3:25:fb:6f:57:19:ea:d3:40:e4:6f:7b:21:40:af:d8:99:38:
0c:71:26:31:57:8c:a8:26:07:c5:be:40:a0:cf:4e:22:fe:a3:
3c:55:49:e8:18:5c:49:5c:c9:29:bb:73:a2:05:08:e7:10:49:
48:98:81:99:df:b5:05:8c:73:df:94:9b:02:9f:60:48:37:86:
3e:98:56:d7:4a:a3:f4:0d:47:ee:2d:d9:8f:66:de:92:db:73:
d5:ad:f6:2f:0a:20:a6:a9:1e:28:68:ff:7a:6f:e3:cd:75:87:
d7:df:77:81:0d:7a:b1:44:6f:78:fe:9e:02:6a:38:86:c6:01:
82:fb:06:d6:bc:1d:cc:37:19:73:99:5e:51:94:39:17:63:d2:
51:d8:6f:12
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZzXMfxypyFbkMOUlfbYGiNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzEwMTAwMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDIzZmE4MmM0NzUyODZkYjYwNzE0ZjYwMzYxYTBmMWNhYzIzZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8llcSJmN+1gVFcVcpA/2s79Utvx
WmYrRBBTtXwI9SUQ0mevU8Qebr6phogaz+5/ulkP1dF1tlh/nHjuM9/+gz1OfCDz
JJml9S2y054AYcp8fouiPKoZhrOFqKdRWuswybndtRgbFQcfoLQA/wNb0ZAaUN+c
py5R2wwmiRQwxYRLSrs4AowwR8hNdBKgqE3H6UqPWKc9z4TvrUkloxDG2l4lcnYi
pZtG7hl9wI0ZYqbRW6ZX0quCvx91PaSF9fWsbRHRC9twZPxBxvFBuyW/EjkPb5TZ
aeVVb4fwzKQ5p3MpAJsDhg9KV2b4lQ589k6glJOpC2knscKeH2n+8N1YQwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFF0j+oLEdShttgcU9gNhoPHKwj0jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2JmY2U4
ZC0wMTQ3LTQ3ZWEtYTI3OS1iOGY1NzA4ZjIzNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYmZjZThk
LTAxNDctNDdlYS1hMjc5LWI4ZjU3MDhmMjM2OS8xL1hTUDZnc1IxS0cyMkJ4VDJB
MkdnOGNyQ1BTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDshYIAwQCwj6MMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwC99zANBgkqhkiG9w0BAQsFAAOCAQEAIjHFBO79+/TP7IUIQ/8Rg5tz
UKewXRj/TM6Yust9r/FchQFDYoIOy/FY1sEmnzM0c9VIMMZG/NIj1YKHneKPuhOR
/JE9nco2EgvhZ1ei7v/EJ6qOpliMKp2L/HhnZpeYkyTYmNcmLW6hLO718yX7b1cZ
6tNA5G97IUCv2Jk4DHEmMVeMqCYHxb5AoM9OIv6jPFVJ6BhcSVzJKbtzogUI5xBJ
SJiBmd+1BYxz35SbAp9gSDeGPphW10qj9A1H7i3Zj2bekttz1a32LwogpqkeKGj/
em/jzXWH1993gQ16sURveP6eAmo4hsYBgvsG1rwdzDcZc5leUZQ5F2PSUdhvEg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:50:28 2026 by rpki-client