Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.cer (raw, json)
Hash identifier: nlX/p4ZBFEUeuZ/8i+zeXb8q8qKPbiUAVkwNF6VcWgA=
Subject key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A19C3BF77EEB7CE9103BDB3E68F29734FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Nov 2026 12:28:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214937
IP: 14.102.90.0/24
IP: 66.220.47.0/24
IP: 79.170.199.0/24
IP: 86.54.81.0/24
IP: 91.246.43.0/24
IP: 159.200.222.0/23
IP: 192.100.68.0/24
IP: 195.248.90.0/24
IP: 213.177.174.0/24
IP: 2a0b:d500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:3b:f7:7e:eb:7c:e9:10:3b:db:3e:68:f2:97:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 2 12:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:de:8e:24:b1:0f:c4:29:00:01:a1:40:76:
94:f8:b1:31:60:0f:e3:34:28:69:be:da:3e:0f:bf:
48:73:52:d9:65:8c:d5:32:d4:ac:9d:e4:c3:b6:bf:
97:02:7f:1d:4e:44:d6:df:00:5c:7c:f3:bc:32:a5:
39:ea:fa:1c:d7:0b:33:9b:95:13:b0:14:76:3b:d3:
1d:e4:1a:4c:6f:77:3c:8f:0d:1e:73:63:2a:ef:2c:
9d:e7:4c:3a:7c:a1:1c:9c:40:af:bb:42:32:84:24:
93:c9:00:27:c3:cd:3c:34:3a:4d:d6:41:c2:d4:2d:
51:5e:69:5b:f2:62:ad:e7:27:c9:92:d3:86:b7:1f:
c7:ff:cf:b6:11:ed:ed:63:4a:51:8b:4b:35:9f:5a:
e1:c7:0a:ef:2e:a2:c5:03:a7:aa:e4:5b:18:a7:7e:
f3:02:53:6b:5f:e0:cb:9b:28:41:fb:9d:f3:fe:b7:
c6:6d:3c:b7:29:4c:a8:a8:1f:1b:1a:8b:67:c7:67:
98:8b:91:b8:c2:4a:be:45:35:ab:0e:82:ee:7d:12:
0c:54:93:61:7c:1a:78:dd:cf:58:3b:6c:55:ef:3e:
3d:d3:34:55:04:bf:d3:61:6f:28:85:e8:21:1b:89:
25:a7:dd:10:92:bb:68:3d:8d:8e:ec:ef:87:49:a8:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.90.0/24
66.220.47.0/24
79.170.199.0/24
86.54.81.0/24
91.246.43.0/24
159.200.222.0/23
192.100.68.0/24
195.248.90.0/24
213.177.174.0/24
IPv6:
2a0b:d500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214937
Signature Algorithm: sha256WithRSAEncryption
2f:41:3d:85:22:06:be:fa:30:04:7e:35:3b:b6:25:47:17:40:
f7:23:f6:87:e9:c8:69:d7:ac:ee:c4:12:0b:7c:63:b8:ba:36:
f1:5e:72:be:fe:4b:69:04:d1:12:0a:51:f6:f0:75:df:8d:90:
23:eb:48:91:77:c7:dd:24:17:43:33:fe:9b:44:05:a8:b1:23:
13:a2:1b:a0:30:b6:02:82:97:65:c3:de:ee:b8:d2:b2:2f:38:
bf:60:f8:9c:61:24:71:8f:92:de:01:79:16:6e:b0:b3:d4:4b:
aa:63:6b:76:94:8f:bf:19:88:83:01:9d:ba:11:71:38:c6:97:
b1:9c:bb:44:91:05:cf:66:da:cf:b8:ba:82:b5:3a:0f:c9:29:
5e:12:fd:0a:e7:d7:cf:9f:94:fb:56:c3:1e:2e:ec:eb:e3:79:
26:d3:d8:bd:24:bf:50:a6:02:bf:bc:63:12:4a:81:fe:54:d5:
fb:56:d7:fa:ac:03:7b:1c:ca:06:00:b5:8d:52:6b:87:ad:ff:
bf:f6:eb:09:01:a8:52:21:d9:be:cd:9a:10:74:27:40:b8:3b:
c6:f1:d8:23:3a:2e:01:a8:ac:6b:ab:31:6b:4f:46:79:82:da:
02:70:e5:56:b1:d7:8f:0c:96:ed:76:fd:44:6c:d6:8d:42:56:
83:c2:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:50:48 2026 by rpki-client