Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer (raw, json)
Hash identifier: zHV2Jg5W/MXAgf9+/ZtOio8gvQyntjeSPg2nDvE0nok=
Subject key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1B7EF362E8557C71A3BB046DB72A9E69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 16:19:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29264
AS: 51366
AS: 136417
IP: 45.86.40.0/22
IP: 103.88.163.0/24
IP: 185.86.252.0/22
IP: 194.4.232.0 -- 194.4.247.255
IP: 194.153.108.0/24
IP: 2a05:bd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:7e:f3:62:e8:55:7c:71:a3:bb:04:6d:b7:2a:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 16:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b48584effa051f0cbc39c319163e4f2338604982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:cc:1a:a1:e7:fa:50:6f:a9:0b:0a:d5:68:
74:fd:d3:b5:b2:47:6d:b1:97:b6:23:6f:ec:55:e7:
1b:0d:0f:ef:4e:74:58:85:74:bf:7d:a9:c2:e1:1d:
db:54:ad:6d:da:70:86:90:54:9a:65:85:81:e5:cf:
ea:81:66:5f:0a:6e:91:3c:c8:5a:d5:69:7a:fc:09:
ce:44:9f:e4:25:91:03:fd:a3:c8:3d:8b:45:a4:25:
78:67:d4:f6:be:44:61:5e:5f:5d:d0:e3:5b:78:46:
29:2e:88:55:dc:f9:65:07:d9:64:df:94:6f:ef:8e:
90:5b:ac:97:26:4f:62:1e:a4:2b:b7:7a:3b:b4:8c:
4e:02:e9:1c:dd:79:c9:23:1c:af:e2:17:09:44:55:
f0:db:69:f0:1a:57:0e:64:b1:1e:db:ee:51:43:6f:
ff:b0:42:75:61:58:c1:2b:38:84:85:db:e4:4c:eb:
7c:fc:30:18:29:22:97:35:95:7f:a7:07:48:33:83:
98:1f:45:05:37:77:ac:c4:44:7e:86:e6:62:d8:d1:
82:dd:9b:8f:20:71:fd:42:60:ff:ca:3a:35:9f:07:
cd:b3:5b:74:58:19:84:88:03:c1:e6:90:01:f8:fc:
6e:6a:9e:39:71:58:4f:72:07:c0:45:94:0d:53:84:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.40.0/22
103.88.163.0/24
185.86.252.0/22
194.4.232.0-194.4.247.255
194.153.108.0/24
IPv6:
2a05:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29264
51366
136417
Signature Algorithm: sha256WithRSAEncryption
98:b5:b5:83:90:aa:a7:36:d2:b4:f6:d1:6d:05:4e:ca:ae:c7:
ac:7c:49:a4:c7:36:f3:f9:e7:98:c1:b1:ec:33:dc:b8:79:d3:
08:df:3b:df:14:f2:f8:a0:ec:53:8c:cf:76:4e:12:d9:d8:81:
23:ae:f0:46:2e:96:dc:3a:7d:29:b7:5d:92:6c:76:ee:f6:3e:
c8:82:02:f1:a1:64:bb:61:4a:94:76:5b:11:20:73:a5:c6:35:
3f:12:da:21:67:2f:82:f2:6c:d9:b2:d0:36:21:af:b7:32:bb:
8d:2f:76:4d:e7:f1:d6:05:4e:49:b7:38:73:94:1c:7d:69:a7:
5b:bc:0b:ed:2f:7b:ec:11:68:07:6a:5b:b9:a4:26:93:3c:b5:
e6:db:57:4b:1d:3e:1b:31:55:f8:7b:fe:85:35:e1:77:59:58:
e4:10:4f:b0:71:67:9a:bf:c5:e5:72:f3:8e:d2:93:45:9e:58:
8c:0f:a9:35:2f:7b:ee:b2:56:2d:45:36:81:48:74:75:3e:d9:
1a:28:10:d6:c2:0f:03:9e:2b:cb:5e:c3:97:27:91:ea:1d:b7:
58:10:33:6c:c2:27:d4:6f:4d:0c:02:e3:f7:56:78:7b:63:36:
a6:12:1f:cd:30:93:1e:b3:2c:eb:8e:19:c8:bd:02:fd:19:bf:
10:c2:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:09 2026 by rpki-client