Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
File: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer (raw, json)
Hash identifier: FhsbcnKVD8Ry+E/7X4pJjwnr5EVnSyJVzGX/fdsxMF8=
Subject key identifier: FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F922D62912FED830BD78A4509F46CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50743
IP: 91.205.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:22:d6:29:12:fe:d8:30:bd:78:a4:50:9f:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:74:27:fd:f6:c7:8b:58:2d:9c:08:dc:0d:
e5:2d:de:ea:5b:9f:a2:27:ee:e9:30:13:f1:37:b5:
d7:27:4b:cf:54:bd:28:79:e8:e3:4e:56:0b:f7:b1:
81:04:c7:56:47:13:8c:41:9e:78:89:2f:f5:8e:2a:
95:6b:45:3a:14:30:6f:fb:d4:11:30:38:21:4e:87:
76:a2:aa:fc:c6:b3:9f:c0:14:27:84:35:ab:4a:d9:
27:1b:d7:58:d5:b5:d2:cd:01:1d:cf:1d:69:1f:b7:
64:e5:09:9f:5b:2a:1f:24:47:fd:9b:d2:ce:af:a2:
c0:29:95:4a:8a:1a:66:72:b4:6d:33:f4:b9:c2:5c:
01:89:22:a6:67:68:6c:af:02:52:eb:14:2b:f5:0b:
d8:f5:39:54:1f:a7:b3:9d:d5:f4:e9:e9:bc:53:51:
f5:23:24:26:33:59:85:07:b7:16:8e:31:77:b7:c6:
cc:bd:45:e1:d4:81:69:d7:da:5b:9e:e4:3e:f6:35:
54:37:0c:ca:50:15:fa:0d:8e:ab:c9:b5:02:3e:3b:
6c:ac:9b:82:33:c7:46:c4:31:32:49:01:55:55:2a:
80:5f:f8:13:42:fe:9b:b3:1c:67:8a:37:48:81:c0:
31:f2:38:12:64:ee:89:30:e0:19:7b:b7:81:7c:b2:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50743
Signature Algorithm: sha256WithRSAEncryption
83:78:0b:d0:1e:60:b0:6d:91:d2:79:de:c9:1e:e5:53:f0:79:
c9:3f:3a:2f:b4:45:a2:5e:8c:3b:a6:21:bf:1f:12:f9:4f:bd:
8b:01:e7:99:b6:02:46:97:cd:a9:51:1e:f6:bb:7e:e1:ee:f4:
11:c5:fd:89:d7:2d:40:6c:e8:96:d8:f1:15:36:cc:7c:b6:4e:
85:e8:4d:64:4a:c4:40:2b:30:05:f4:02:f8:2e:89:f0:c0:58:
87:a4:31:2c:99:1f:36:a7:6f:f3:4d:37:67:1e:59:a2:99:c9:
39:38:46:ed:94:44:bf:6b:b7:4c:fe:74:80:d0:31:87:dc:58:
19:2a:7d:7f:72:0a:e9:ff:d7:2a:73:14:9f:46:4c:11:d6:1c:
63:90:70:d4:b6:df:7b:f9:45:27:5b:20:7e:76:40:12:86:f3:
c3:a3:4e:1d:f1:6d:53:e7:be:56:e6:ce:05:f1:80:10:11:8c:
1b:c4:5b:51:56:d7:26:70:00:ba:38:67:67:95:ad:2e:df:02:
91:12:a8:c3:e8:fc:79:e4:21:a3:04:2a:0a:46:34:18:24:ca:
0a:13:af:8a:99:83:b9:9a:2b:bf:1c:4e:25:29:b7:56:d5:5f:
cf:8b:c7:f6:9b:ac:d6:06:72:52:6e:07:36:19:ad:c0:11:be:
25:e2:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:36 2026 by rpki-client