Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer
File: 0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer (raw, json)
Hash identifier: AaNS8V5KSEcxclW4ZHhwYav9O7TTOdOPsnLuGgEwdaM=
Subject key identifier: D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9518F31EEA4DF3233D521A68BB1B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 178.217.248.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:51:8f:31:ee:a4:df:32:33:d5:21:a6:8b:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d26c280bcfcbce2e64bcbedcbfcebe561bea09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:da:a4:f1:99:e1:bd:1c:32:bc:37:b0:42:
61:d1:6c:46:4c:47:3d:77:a0:40:a9:82:40:1b:89:
3a:fe:a6:b4:59:ce:40:4d:4b:df:29:b8:0e:43:3e:
4a:64:d1:bc:f0:bd:8c:ac:8f:0a:d5:50:94:91:a8:
bb:af:e6:55:88:77:47:d0:24:ab:fe:af:76:90:58:
0b:80:8e:28:1a:c2:ca:62:8a:ba:70:4b:4c:f6:b9:
27:47:6b:91:2e:9c:f4:6b:31:c1:8b:42:61:d8:53:
a6:34:01:fe:b8:fd:e5:8e:a6:e2:e9:77:8b:fe:ee:
68:b1:b6:7a:70:1c:d6:95:41:1e:d2:c7:74:5b:64:
64:b1:6f:96:52:7e:4e:e8:2d:28:67:d7:87:35:0c:
45:68:a3:ec:8d:16:92:39:39:e5:ad:12:4e:d1:c0:
20:94:f3:8d:d2:7f:14:47:7d:cf:89:69:f8:2f:a6:
8c:ae:bb:a4:94:1f:6f:67:5e:02:be:bf:ea:47:a4:
3e:64:0a:15:c0:06:56:86:ec:f6:99:67:6c:44:00:
8b:b1:31:52:25:b3:db:82:51:fb:c8:01:57:3e:97:
90:2c:45:9a:80:f6:45:b3:1d:64:5a:82:9d:f9:3c:
d1:7f:62:82:4a:20:7b:67:24:95:3a:fd:f2:4c:0c:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:4a:bc:e5:36:b4:de:8e:74:f0:4e:4b:10:e7:10:46:4d:5d:
a6:2e:58:b8:63:1e:97:af:d8:34:53:2f:db:d4:eb:f2:39:d8:
cb:91:5a:c0:fd:b4:0c:7c:fd:a9:48:e7:eb:4f:81:70:d6:fe:
b3:4c:ae:6e:ed:5d:57:aa:5a:af:98:0a:b8:5e:55:f0:d9:95:
0b:6a:3f:77:bb:a6:c3:b0:21:e1:e6:67:4e:c7:47:ed:b4:58:
0b:a2:83:a1:ff:b6:1e:8a:ae:d1:16:dc:72:37:69:f9:75:6a:
ab:9a:f3:01:ee:03:71:a1:04:7a:ca:f0:1d:d5:51:55:34:62:
e8:ba:3f:6a:bf:b2:1d:6f:a6:1a:f7:5f:21:3f:71:37:0f:8c:
65:c4:24:b0:fe:2d:5c:0a:4a:0a:39:2e:bf:cd:ad:b2:26:05:
5e:c9:98:bd:91:26:a8:fa:86:22:d5:7d:df:4f:13:9c:a3:4d:
26:7c:97:64:14:a6:ef:59:ae:69:f2:44:5f:19:5a:3a:f9:76:
44:8e:50:71:71:03:28:0e:12:f2:bb:47:fc:b0:01:ac:1b:49:
58:6b:b3:f7:7e:60:03:c9:7e:a8:b6:94:84:ad:ca:20:44:57:
a1:96:76:84:97:5e:7c:06:db:28:97:37:3c:28:e7:35:a3:d8:
df:92:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:13 2026 by rpki-client