Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.cer (raw, json)
Hash identifier: Dm8H3E+w54P8gdmnkEOnmKJBEi2DrSk0UngjLbUXGVo=
Subject key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ECF7B95E07E52A0CA3F0A7DDA913FC573
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 08:10:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205222
AS: 213473
IP: 77.83.88.0/22
IP: 77.92.160.0/21
IP: 77.92.180.0/22
IP: 91.220.94.0/24
IP: 185.225.56.0/22
IP: 2a14:e500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:7b:95:e0:7e:52:a0:ca:3f:0a:7d:da:91:3f:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 08:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:56:80:55:68:b8:eb:ba:5d:dd:f5:8a:75:
3b:b0:d0:2c:bc:1c:1a:d3:7e:8d:89:02:68:23:2f:
cf:d5:5e:20:c1:91:08:83:a5:75:f2:b0:da:54:57:
cd:3a:56:b3:a9:be:be:79:c6:78:6c:4f:8b:92:45:
d0:9f:2e:85:cd:a9:6d:0d:19:06:a1:f4:dd:f0:25:
51:47:9e:51:22:98:c2:43:91:77:da:bd:35:d9:33:
d8:50:58:0b:61:1b:12:51:1f:4e:36:94:be:dc:a3:
86:63:86:89:c0:46:09:13:26:3a:c2:73:f1:25:c9:
66:fb:cd:af:f8:ec:a0:e2:f7:08:74:7a:2f:dc:60:
f1:f7:29:b1:4f:31:26:1f:12:a2:0a:64:f8:b0:96:
52:a3:aa:64:d5:a2:7f:79:e5:c2:9b:f1:37:98:27:
c4:6e:10:b1:54:28:cd:6d:15:bc:3b:5d:18:41:30:
54:3e:d6:f0:a0:5b:e9:9a:49:03:ef:5d:23:b5:78:
99:56:97:2f:96:b7:74:bd:d2:77:63:5c:da:09:e7:
f5:bb:db:d0:99:68:8f:a0:24:de:c1:66:7e:4d:6a:
36:96:1d:99:a0:ab:5f:75:0b:aa:35:2b:3d:d2:54:
de:57:9c:85:7b:fb:1e:27:d9:ae:40:06:99:90:fc:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.88.0/22
77.92.160.0/21
77.92.180.0/22
91.220.94.0/24
185.225.56.0/22
IPv6:
2a14:e500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205222
213473
Signature Algorithm: sha256WithRSAEncryption
9b:3d:46:02:92:c9:fa:19:4f:5c:82:2a:f8:8e:ad:c7:70:d8:
9a:95:f1:e8:6b:fb:b4:fe:f1:3d:e6:3a:b9:a0:3b:16:cd:bf:
99:ec:8c:f0:45:2e:2f:0c:92:c5:88:4b:34:bf:10:b0:00:16:
47:c4:e1:bd:44:1b:ff:0d:d3:00:57:58:1d:25:79:95:75:66:
98:c9:f2:8d:0a:0b:0b:48:93:c7:64:c7:1f:b6:43:70:44:3d:
60:cc:5d:73:85:42:8f:63:40:0b:f0:20:e4:b1:6a:14:43:ac:
ff:24:c9:20:40:97:cd:f8:25:2a:41:08:1f:be:91:25:9c:62:
eb:96:4c:27:fe:0f:10:ec:2a:2e:95:05:ba:0b:3c:99:17:11:
6b:ec:08:32:cb:0b:6f:11:a8:1d:45:c8:09:93:b5:6c:6a:4b:
ce:2b:fd:3d:6d:f0:c5:80:55:3d:2f:60:76:7e:ff:a5:a8:0d:
1f:63:79:a5:aa:9d:68:6e:7f:20:12:91:20:7c:c9:a7:ce:3b:
62:68:ce:f6:d6:d5:61:77:75:cb:e4:75:b7:b4:f6:25:19:6f:
3d:5d:00:a5:b4:96:15:c4:b8:86:fd:a9:46:e2:63:46:59:b3:
07:11:d4:05:76:2f:2e:94:88:08:5b:9f:31:af:40:dc:d1:92:
b6:01:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:11:07 2026 by rpki-client