Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
File: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer (raw, json)
Hash identifier: ocOOYFD36LShIAzy+Euv6fpD5IDsN/Bx6683K9r/w+o=
Subject key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A10C3FD9D9B8DFC1C708B20047F8A61587
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Oct 2026 13:27:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211474
IP: 185.119.207.0/24
IP: 2a05:a840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:3f:d9:d9:b8:df:c1:c7:08:b2:00:47:f8:a6:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 13:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:85:a2:73:f5:d1:2b:f3:34:e9:f3:98:d3:
e2:33:55:e3:c2:63:8a:1f:a0:a4:5f:38:e1:3f:b0:
06:7e:0a:c4:b3:1a:39:4c:26:b4:3b:cd:f7:5d:1c:
d3:99:92:6f:ed:92:02:5d:e4:90:12:3e:f1:97:b6:
1f:a4:e6:13:37:b7:33:8c:47:76:27:a4:53:c3:43:
41:4d:b4:d5:8e:08:a1:ba:35:5a:2b:49:a6:14:1d:
a0:0f:55:24:e4:93:c4:f8:b1:82:61:2e:58:38:9d:
58:94:98:d9:22:7a:00:2c:17:d3:3f:9a:25:b0:6f:
72:37:30:c3:88:6d:d9:35:56:e7:22:97:3a:55:7c:
8d:cc:31:d5:c6:16:a9:68:c4:02:6d:19:51:00:d7:
51:c6:14:9a:40:74:6f:1d:8d:30:8a:cd:f3:56:17:
b2:e1:60:20:a8:9f:5e:48:a2:5b:2c:80:b2:ed:ba:
49:bb:a3:ff:7b:81:a3:a4:00:d5:5c:f0:0c:d6:85:
c5:2c:0b:10:17:34:40:b6:21:75:bd:be:8c:f7:35:
02:e8:e8:be:ea:cc:d9:4c:75:ee:8e:fc:24:c3:9f:
38:f6:86:f9:64:57:a9:78:db:6f:2d:90:fb:33:f9:
b4:f1:b5:d8:b9:01:45:41:44:69:70:b0:ed:bc:0d:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.207.0/24
IPv6:
2a05:a840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211474
Signature Algorithm: sha256WithRSAEncryption
8e:d1:f8:d7:1d:05:37:26:46:d9:72:b0:5e:b9:73:ab:f2:ad:
44:d5:7b:08:48:fd:21:fe:68:3c:a0:0d:15:9f:17:b8:5d:d6:
9c:bd:74:f6:63:10:f8:2d:80:4f:97:52:0d:67:b4:5c:bb:4b:
5a:d5:a2:b9:45:62:96:34:9e:fc:b4:37:4d:28:ea:e2:00:9c:
9e:c7:60:40:0c:62:63:d3:8d:f1:5c:19:0a:96:70:2e:3e:7c:
0f:42:53:73:19:b8:f9:d8:8b:83:26:ba:3d:42:8e:59:f7:5c:
5a:79:ba:06:56:cc:7d:aa:a4:06:a6:e6:f6:cf:40:2a:e1:95:
7a:0e:93:2e:e0:73:74:af:f9:d1:90:cb:c7:22:a6:86:1c:1c:
b4:20:73:9a:bc:88:dd:81:72:76:6e:21:69:1f:a8:a9:92:a0:
c2:f8:9d:46:ff:07:ef:07:c7:e9:fc:49:f6:bb:d5:e8:c4:1b:
22:42:2d:50:d8:3c:11:e6:b1:9d:4d:9d:5d:10:55:50:99:09:
36:0c:c8:fc:9f:dd:6f:bc:b8:c8:14:6a:6d:0d:9c:83:8e:bb:
5e:8f:7d:55:ac:28:fe:d8:0b:3c:46:43:94:84:19:68:38:9e:
8d:27:84:b3:b3:75:59:10:53:3e:82:46:c0:16:95:d8:73:e7:
c5:b1:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:27:38 2026 by rpki-client