Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.cer (raw, json)
Hash identifier: uInmQ6mXZ15f5+/JaESxmlqScXr9cxWfLns5ir1D9bs=
Subject key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF70339275232E1674992C4CFB2FDF81B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 14:18:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201501
IP: 204.236.0.0/19
IP: 2a0f:4a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:03:39:27:52:32:e1:67:49:92:c4:cf:b2:fd:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:4b:dd:22:3b:e6:0e:de:0f:4c:5d:65:10:
34:a7:c0:fa:39:27:03:1b:e1:65:28:77:01:13:f3:
23:00:6a:60:a1:ce:bc:96:d8:7b:00:e2:16:fa:15:
b1:e2:3a:dc:51:ba:6b:0f:3c:33:70:ad:55:5b:5f:
9f:68:bb:0f:4a:7b:4a:e2:07:d0:c9:66:59:2f:ae:
97:4e:ce:e3:9d:d8:13:25:49:8b:3f:80:2e:ae:b0:
cf:76:b6:41:41:a8:1e:d6:80:8f:ec:17:99:30:60:
32:87:b5:c9:65:82:ed:b9:6a:75:b6:4f:8e:5f:48:
f1:8f:9b:c5:6a:c6:cb:56:e4:a9:1d:bb:76:79:6c:
b7:b5:d9:c9:ca:61:31:3b:ea:6d:0c:d9:c9:38:a4:
a1:b9:2d:2a:1b:38:4c:ad:ad:7e:7b:39:1a:75:58:
d8:6c:f9:21:f2:a0:5d:71:fb:a3:f2:5d:9e:c8:56:
b3:16:e3:be:72:58:cf:09:50:0b:45:b5:0b:95:01:
3f:8d:2c:b2:9a:df:f3:2f:fb:31:85:b8:3e:4f:f3:
e7:6c:c0:1f:31:1b:d3:00:e5:3f:8f:6a:5e:0e:ea:
be:35:e7:e9:d6:e1:c7:a7:9c:d3:18:72:1f:9b:25:
cc:87:61:38:eb:f9:0a:10:25:f0:70:b2:13:db:53:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.0.0/19
IPv6:
2a0f:4a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201501
Signature Algorithm: sha256WithRSAEncryption
25:1e:4a:39:4a:60:c9:e7:99:00:26:d0:15:1e:5e:a1:f3:68:
8d:44:7f:2e:6c:bc:ef:19:fb:17:35:26:a8:82:b6:c0:bb:8f:
f9:19:d7:e7:70:19:cf:c3:49:14:da:c3:4d:d6:0e:70:57:b7:
d6:1a:ec:f2:d4:ae:ec:e9:89:04:66:62:c5:ec:80:fb:1d:c4:
16:d3:95:aa:0e:7d:1a:c4:02:44:ac:c1:9e:f2:16:20:fa:df:
16:d9:b2:41:07:55:ca:5e:f4:0b:f2:1d:10:2b:aa:a5:b6:bc:
2a:cc:6d:a5:bc:21:b3:0d:39:97:b4:7a:23:80:a0:70:0c:59:
a0:05:65:a8:fe:f4:6b:7c:08:41:fe:3a:7b:68:30:18:c6:e4:
1f:31:27:4c:cc:e7:3e:bc:24:50:f0:79:6b:10:4b:96:21:f9:
4e:6f:c9:d4:ca:49:cf:6b:0a:3a:16:ce:91:a4:ec:43:99:93:
b6:a8:e2:3c:e8:22:65:4b:9a:e4:71:2a:6a:56:4c:72:55:2f:
0e:5e:9b:1c:b1:22:0f:91:83:eb:b2:89:c3:a3:a2:e6:f0:8a:
5b:14:93:0f:69:d0:a4:f8:59:6e:7b:f8:6e:a4:28:d8:37:54:
7f:ad:f4:f2:33:07:cf:9b:94:41:1a:88:91:e0:eb:c7:12:6f:
c2:c8:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:27 2026 by rpki-client