Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
File: 0jhBasikxn8MHXSqHFwe_SmC3Zg.cer (raw, json)
Hash identifier: zkqkmRfyvL5AEHa5gVgF7WWimGe6mfJ+wBJJuY8BjUk=
Subject key identifier: D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F98E605D2046198EBE12CF07339FFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.216.48.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:8e:60:5d:20:46:19:8e:be:12:cf:07:33:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:98:cb:25:98:6a:42:f0:d4:6a:45:b0:e9:
ff:26:e1:e2:d2:ef:f3:1e:97:c7:ec:62:5d:f8:6b:
a8:37:07:e5:4d:72:f1:ad:2d:bf:39:f0:65:fa:d3:
39:85:3b:12:dc:bb:de:84:4e:67:52:fe:d2:0b:44:
e7:cd:6e:fa:0d:4c:aa:61:5e:a9:1f:e0:7a:e1:e7:
b4:64:44:64:8e:55:4e:8f:0a:c3:40:c6:43:98:fc:
76:c0:05:e0:8f:e2:e1:48:8b:89:ce:f8:b4:2f:4f:
79:15:17:f3:9c:3d:ea:c4:14:61:84:aa:c4:9f:b6:
2b:25:c4:a1:6d:ba:69:30:59:05:2b:2b:ba:1c:fb:
61:e1:75:66:b0:7c:1d:72:15:51:ef:ff:83:e7:75:
c3:69:57:ac:e2:f8:72:56:19:2e:02:13:84:58:43:
38:72:3e:69:f8:52:67:7f:c6:15:7a:44:a4:47:d0:
59:50:c6:d7:0c:e8:9e:ee:d1:fc:21:5a:55:fa:2f:
82:36:9f:75:2d:6d:a8:95:39:aa:34:03:b9:e4:14:
d3:03:4d:7f:58:3b:23:d5:ca:7a:72:6b:86:8f:6b:
79:0f:ab:80:dc:05:19:2d:6e:9c:be:c3:ee:9e:84:
99:e3:cf:fe:63:0c:a9:59:cb:33:6c:3b:7a:03:ad:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.48.0/24
Signature Algorithm: sha256WithRSAEncryption
86:76:cc:6f:db:ee:80:1d:d6:76:16:b7:2b:f9:74:69:bd:7b:
90:2b:40:aa:89:8e:16:7f:0d:81:76:9e:9b:42:b4:d9:f6:68:
37:71:b5:c3:48:ac:04:96:a3:18:48:e9:d9:b3:2d:66:1c:e5:
1d:c1:b4:d2:6c:6b:81:5b:65:b8:91:74:74:70:ca:62:59:63:
e4:df:18:d2:35:7b:31:01:b7:44:9f:c3:48:8a:c7:56:0f:5d:
8b:45:ea:96:8f:a8:51:fe:3d:d2:28:65:d3:ed:34:2b:8d:cc:
74:44:a8:89:76:d0:8b:60:dc:1a:de:6c:9f:02:28:84:c7:9b:
43:57:25:b9:c9:aa:62:e3:0f:81:57:b9:e3:24:e4:74:c3:10:
70:78:be:9e:0b:6b:b2:fe:f1:21:50:96:d6:d9:da:9e:b8:f4:
01:14:ef:23:da:37:cb:9d:d5:ed:28:59:dc:43:48:8c:a7:85:
a9:c3:7b:7c:35:0b:81:12:46:7d:54:dc:2e:58:69:a6:e5:56:
87:9d:60:9c:42:b9:fa:67:b2:86:22:57:1d:d7:98:36:8e:08:
16:2c:4c:1e:3d:0e:8d:fe:3f:fc:98:23:14:a6:d5:93:95:2d:
43:fa:96:3f:9a:28:a5:0b:28:67:db:3a:3d:e8:ca:62:3a:b3:
f3:fb:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:33 2026 by rpki-client