Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.cer (raw, json)
Hash identifier: zwQLPlMlzBBviA6uW/+uVrUgJDsZOqOgYAP4BbX8gYc=
Subject key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD2B2B4E7B05DB1E2175B4ACF540837FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Mar 2026 13:04:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211170
IP: 193.42.22.0/24
IP: 2a09:3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:b2:b4:e7:b0:5d:b1:e2:17:5b:4a:cf:54:08:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 13:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:8f:a6:bc:a1:b3:d3:c9:36:2f:be:0a:1a:
27:81:01:bc:f7:7b:3d:41:53:1f:3d:07:91:52:4c:
58:53:de:a3:c0:95:8f:07:2e:92:8c:e5:6d:c9:fb:
c9:84:ca:ef:7a:d9:64:4c:c6:75:04:3e:f5:90:4f:
f1:91:59:68:e6:c4:72:20:09:ec:e7:82:3c:9a:13:
75:cb:77:0f:25:a9:bb:a6:57:dc:e2:a1:87:e4:15:
ca:3e:b4:b6:07:54:21:73:13:de:46:f3:08:c3:61:
9d:2f:88:69:40:e9:29:d7:e5:97:6d:bc:32:46:f1:
9a:74:bf:71:24:34:d3:5a:34:d2:f6:22:df:a0:e8:
c9:df:d7:86:e6:49:b9:77:12:e1:a3:9f:82:54:01:
22:cc:59:13:46:48:b6:0a:ce:5d:3e:4e:a7:f4:e5:
eb:db:11:1b:20:3e:02:60:b3:6f:d1:9d:20:9b:6f:
d5:72:96:33:06:36:d1:1c:be:9a:76:da:ba:39:af:
ed:d8:e6:14:c7:1b:c3:c8:d7:49:45:13:07:24:c6:
58:00:30:b4:49:90:47:b6:57:59:ab:e2:63:c1:02:
3c:ae:1c:9f:ea:b9:9b:97:ee:55:64:79:f3:e7:13:
43:69:c6:61:07:0a:84:98:cb:ec:05:d1:04:55:61:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.22.0/24
IPv6:
2a09:3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211170
Signature Algorithm: sha256WithRSAEncryption
64:28:25:62:5e:07:18:4f:55:aa:78:ec:c4:1a:f8:ac:3f:19:
34:5b:3e:a1:cd:3b:00:8b:08:cb:52:8a:e5:68:87:92:d4:a5:
9f:ba:3e:23:0b:e0:1b:6f:e1:74:e8:19:14:c1:bd:9f:9f:b2:
f6:87:e2:e2:bd:e1:68:76:b7:c7:0c:36:40:81:f0:8d:56:1c:
d5:13:52:75:70:e5:97:1e:73:2f:9a:94:32:89:f2:e7:00:87:
a5:d0:e3:1f:09:77:8f:1a:9a:7a:f2:c0:6e:56:d1:ff:2a:20:
8d:d4:9b:39:8b:3a:dd:5f:d3:bd:17:36:1f:b5:46:5a:51:28:
c5:d5:f5:70:0b:85:1d:df:ff:d7:86:5a:0e:d4:4a:1e:2f:16:
fb:2d:e6:01:f2:be:b2:ea:51:d4:e5:9a:16:70:0a:3a:a7:c0:
80:03:71:25:6a:e4:be:ac:cc:b9:ba:33:89:6b:27:a0:4a:95:
47:cf:dd:36:56:f1:11:12:15:d6:9a:98:76:5b:ed:64:29:99:
32:53:11:b1:5f:29:08:e4:99:a7:dc:c9:22:33:0b:aa:fc:55:
43:b7:a6:9b:50:27:33:59:6f:54:53:03:8f:98:7c:84:dc:3f:
a8:56:b7:02:4e:95:fb:86:85:c5:b9:1e:8f:84:ee:dd:65:ad:
ec:22:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:10 2026 by rpki-client