Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v5aJ0mM8sZFwKk5L480LMov9iDs.cer
File: v5aJ0mM8sZFwKk5L480LMov9iDs.cer (raw, json)
Hash identifier: 8R6HegiAM6X0CgMdARpl17ZfHF0/jQCYvEjJ35jqAUA=
Subject key identifier: BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D249F85CE3683361EA199F1291A074BCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 10:52:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 164.5.232.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:9f:85:ce:36:83:36:1e:a1:99:f1:29:1a:07:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 10:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf9689d2633cb191702a4e4be3cd0b328bfd883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:69:6c:26:a5:d9:69:e7:e5:0b:7d:71:53:
94:e4:16:52:98:2a:e9:e4:b4:8e:60:0e:1a:6c:38:
c8:9c:6e:6a:42:e3:a7:09:37:f6:3f:08:8a:76:8b:
23:a7:5d:5e:ad:48:26:f0:3f:4b:0f:26:fa:aa:2c:
17:74:0b:15:5f:f3:74:66:35:9f:87:02:54:33:e3:
47:c4:2b:99:b1:2c:60:ee:b8:1f:df:05:9c:96:e3:
69:1e:43:9e:cf:87:b3:25:8d:a6:cf:31:ca:e3:15:
d5:4a:39:6a:74:d5:85:da:a6:5a:b1:84:1e:47:c1:
93:9f:92:52:87:87:c7:3f:7f:87:e4:c7:68:ff:61:
7d:58:bb:22:f4:be:66:df:1e:e2:bb:37:1e:13:4a:
c9:bb:e2:61:80:32:2d:0b:9d:21:38:c5:b9:9b:56:
e4:7e:23:c7:54:f8:aa:fc:f7:76:32:08:6c:b0:73:
4a:db:43:b5:f3:90:8b:bf:54:0c:a3:0d:b3:b4:5e:
06:87:df:8a:fc:64:75:42:27:24:a9:9a:9c:95:64:
5a:0f:c5:70:ca:00:d6:d3:4d:6f:9d:8f:79:92:1a:
c9:b9:5b:9d:ac:b4:e0:26:f3:90:b6:13:3a:ad:e8:
c5:4d:4b:64:96:41:be:ab:c5:9f:1a:cb:ba:8d:90:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:89:D2:63:3C:B1:91:70:2A:4E:4B:E3:CD:0B:32:8B:FD:88:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/v5aJ0mM8sZFwKk5L480LMov9iDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.232.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:37:22:02:6c:10:5b:65:bb:46:58:95:7e:48:6b:b0:2a:66:
02:cd:8f:82:2e:95:49:5d:aa:ad:0e:d9:ec:bc:5a:08:4c:fe:
80:c2:39:16:d0:25:b2:4d:51:62:b6:a0:2c:bd:6c:dc:f7:db:
30:e6:00:a6:bd:67:e9:f6:22:5b:01:d5:19:dc:7c:f7:b6:ed:
89:3e:59:15:65:90:9b:db:06:fe:63:41:9a:aa:cf:6d:11:95:
db:49:bb:10:8b:bf:a4:f9:b7:69:2e:d5:4f:b1:4d:36:5e:55:
fe:de:be:cb:23:84:ce:2c:40:b7:70:c1:23:b6:17:56:eb:06:
25:3c:4c:73:e2:71:1a:e3:8e:e8:c2:85:04:24:38:88:82:a9:
57:64:6e:60:b9:33:c3:00:da:35:81:ae:68:24:5d:68:3e:78:
7a:29:38:23:9c:0b:5f:06:43:38:35:6c:28:83:2b:a3:ef:e9:
c2:8a:5a:d2:d8:f4:0d:44:e1:58:cc:17:34:35:9f:55:70:4f:
b8:38:a7:ce:61:b8:04:d8:ac:59:45:41:7b:77:12:78:7e:a7:
0d:76:1e:f8:44:f4:5a:9e:1c:b5:37:0d:87:74:e0:44:ee:6a:
c2:ad:db:c4:08:ba:44:be:21:9c:b7:d1:e6:7f:f4:17:d2:d7:
3c:34:97:5f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ0kn4XONoM2HqGZ8SkaB0vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI1MTA1MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjk2ODlkMjYzM2NiMTkxNzAyYTRlNGJlM2NkMGIzMjhiZmQ4ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7RpbCal2Wnn5Qt9cVOU5BZSmCrp
5LSOYA4abDjInG5qQuOnCTf2PwiKdosjp11erUgm8D9LDyb6qiwXdAsVX/N0ZjWf
hwJUM+NHxCuZsSxg7rgf3wWcluNpHkOez4ezJY2mzzHK4xXVSjlqdNWF2qZasYQe
R8GTn5JSh4fHP3+H5Mdo/2F9WLsi9L5m3x7iuzceE0rJu+JhgDItC50hOMW5m1bk
fiPHVPiq/Pd2MghssHNK20O185CLv1QMow2ztF4Gh9+K/GR1QickqZqclWRaD8Vw
ygDW001vnY95khrJuVudrLTgJvOQthM6rejFTUtklkG+q8WfGsu6jZApsQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL+WidJjPLGRcCpOS+PNCzKL/Yg7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1Lzg0NWEw
YS0yYTI2LTRiYjgtOTdlMy05NTJiYTZmNzU1MTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvODQ1YTBh
LTJhMjYtNGJiOC05N2UzLTk1MmJhNmY3NTUxMy8xL3Y1YUowbU04c1pGd0trNUw0
ODBMTW92OWlEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBpAXoMA0GCSqGSIb3DQEBCwUAA4IBAQCLNyIC
bBBbZbtGWJV+SGuwKmYCzY+CLpVJXaqtDtnsvFoITP6AwjkW0CWyTVFitqAsvWzc
99sw5gCmvWfp9iJbAdUZ3Hz3tu2JPlkVZZCb2wb+Y0Gaqs9tEZXbSbsQi7+k+bdp
LtVPsU02XlX+3r7LI4TOLEC3cMEjthdW6wYlPExz4nEa447owoUEJDiIgqlXZG5g
uTPDANo1ga5oJF1oPnh6KTgjnAtfBkM4NWwogyuj7+nCilrS2PQNROFYzBc0NZ9V
cE+4OKfOYbgE2KxZRUF7dxJ4fqcNdh74RPRanhy1Nw2HdOBE7mrCrdvECLpEviGc
t9Hmf/QX0tc8NJdf
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:25 2026 by rpki-client