
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
File: 06ruF4ixbgpxpCBqirjaxoB-6J8.cer (raw, json)
Hash identifier: fXRlm3pvjF0rEmrUMCNPf4Pk8RFz1Metuwe/M9+QJAU=
Subject key identifier: D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E1CBEC46FADEE82F345BA7EEAD109A23B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 15:12:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212386
IP: 176.119.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:be:c4:6f:ad:ee:82:f3:45:ba:7e:ea:d1:09:a2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 15:12:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:c8:20:ec:35:3c:12:95:f4:63:d3:3a:2f:
17:93:61:b0:e6:92:58:54:f8:cd:3f:d4:78:85:64:
c9:cb:ed:e3:e1:4a:ea:23:28:bf:97:93:b2:51:d9:
8f:1a:55:d1:7a:7d:b1:7f:a2:84:4e:27:54:58:75:
f8:9d:03:74:8b:69:04:0a:44:9e:69:a3:66:14:ea:
c1:c0:55:49:ba:28:21:57:04:4e:64:9c:8a:fa:04:
d5:e9:88:94:dc:12:a6:95:53:aa:b6:4f:0f:95:fd:
ea:a4:e9:10:41:9b:70:3d:ce:cd:41:f1:28:c1:47:
ad:26:29:51:5e:6d:06:ab:98:89:c4:b9:69:6a:2e:
e4:5c:8f:8b:41:1f:5b:a7:a3:77:c5:1f:ce:6d:9c:
13:ee:41:b4:42:7a:6d:7a:e0:e2:52:ce:7c:15:b5:
de:4a:4f:7d:3e:0f:b1:21:fc:e0:5c:52:85:c1:da:
aa:1d:62:47:4e:69:db:1b:22:d2:2d:6d:cb:c2:53:
a4:fd:2d:c2:f6:d1:cc:33:e1:e3:35:78:8d:48:7e:
00:71:4f:c8:0b:5b:b7:e0:9f:b2:c0:78:20:6c:7e:
aa:44:be:af:77:7b:05:46:39:f5:85:a1:90:63:35:
0d:a8:55:56:f3:8f:74:27:c3:25:1e:34:5e:01:65:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.199.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212386
Signature Algorithm: sha256WithRSAEncryption
84:fd:11:aa:52:5e:28:db:2b:09:67:0e:ff:5f:75:83:38:71:
1e:a7:f5:7a:7f:c6:27:34:47:b8:ce:89:de:b0:c3:28:e5:82:
65:b5:36:b9:5f:00:5e:cd:bc:35:2e:52:c9:f3:a4:24:76:dd:
53:e8:83:55:b3:b5:c0:ee:db:2d:98:ad:de:04:42:45:a6:9e:
38:e7:72:dd:fc:bc:1b:c5:c1:45:e1:04:40:10:22:58:81:61:
7f:f3:57:e2:c5:0c:29:a6:ab:47:2b:ed:c4:08:b5:b7:1e:1b:
08:7d:a4:93:30:e0:76:bd:75:25:a9:85:54:5d:74:cc:a0:57:
c1:ec:db:94:ab:4b:57:57:3c:7e:a6:c8:22:40:8c:a7:34:00:
21:85:8a:94:48:d7:aa:09:3d:5c:f1:d8:5d:5d:16:4a:9a:45:
ac:81:11:ee:16:87:c3:cf:52:76:bc:13:92:f8:ca:e1:7e:b2:
b5:b8:fc:5b:3e:a2:33:09:2a:11:88:c7:66:df:15:21:d6:60:
a1:b4:a3:e4:d0:68:75:bc:b2:72:67:aa:e5:3c:be:a2:a9:ba:
34:61:22:01:e4:9b:93:a9:e1:bd:44:74:23:13:12:9c:b6:b8:
e2:ea:3a:a6:d9:7e:b9:1f:9e:b9:f8:8e:6d:16:bb:5b:2c:eb:
5f:d3:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:56 2026 by rpki-client