Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2VFujumVLOUiG4Ek0IAJJKcaB3A.cer
File: 2VFujumVLOUiG4Ek0IAJJKcaB3A.cer (raw, json)
Hash identifier: tgAgvoiaOQB213pGq68gVPrGu2cdfuEcoGvq9X5XNvI=
Subject key identifier: D9:51:6E:8E:E9:95:2C:E5:22:1B:81:24:D0:80:09:24:A7:1A:07:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A182602094DD0363B325F311F19298479E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/a49e26-c93a-44c3-aa0d-4cedfb53c0aa/1/2VFujumVLOUiG4Ek0IAJJKcaB3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/a49e26-c93a-44c3-aa0d-4cedfb53c0aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 11:58:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219086
IP: 2.152.79.0/24
IP: 2a0b:1140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:60:20:94:dd:03:63:b3:25:f3:11:f1:92:98:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 11:58:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9516e8ee9952ce5221b8124d0800924a71a0770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:25:37:be:c3:3e:62:07:8d:e8:77:c0:2a:
6c:8c:ef:9a:a8:0d:e2:90:9a:07:48:1a:4d:ae:59:
39:8d:0a:05:43:7c:6b:1a:06:0f:11:27:ca:a7:1c:
e3:31:94:ae:1d:0a:9f:39:44:55:77:ad:a4:88:74:
d9:31:64:3b:2e:f3:ae:51:3e:82:f1:04:fb:a3:6d:
46:b0:d3:56:48:50:ea:14:f9:30:f3:d6:4b:97:65:
da:6b:d0:8e:46:5b:ff:7c:dc:ab:37:e9:6a:36:12:
0b:44:43:eb:fd:39:52:ae:8b:c3:90:d8:7f:ce:f3:
95:7c:f7:fb:cd:57:74:73:b1:7f:ee:df:8d:6e:8a:
6c:1b:90:dc:99:cd:1c:d5:c9:2a:98:f5:a4:14:49:
5e:40:51:09:9f:20:69:e4:0c:0d:c5:5c:03:c2:b3:
4a:0a:2f:46:44:4c:2f:c4:c9:09:b3:d4:b4:8e:8d:
56:2f:65:c4:4b:88:ad:bf:c7:10:f8:f7:35:f6:f7:
3c:85:66:13:70:3f:8a:ef:a3:1c:2b:2d:d7:ad:1d:
de:97:1e:2d:fb:d9:81:b1:6e:0f:f6:44:25:bb:5e:
2d:a7:42:6a:5b:94:d2:e4:d2:4b:97:ab:66:99:98:
94:47:07:73:e1:57:f6:01:44:57:30:cc:ed:17:d1:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:6E:8E:E9:95:2C:E5:22:1B:81:24:D0:80:09:24:A7:1A:07:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a49e26-c93a-44c3-aa0d-4cedfb53c0aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a49e26-c93a-44c3-aa0d-4cedfb53c0aa/1/2VFujumVLOUiG4Ek0IAJJKcaB3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.79.0/24
IPv6:
2a0b:1140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219086
Signature Algorithm: sha256WithRSAEncryption
72:35:b1:0c:0d:d0:62:2e:24:f0:3c:b5:eb:7c:4b:69:7f:e4:
6c:3d:8a:2a:7c:70:05:41:8b:f9:26:1c:9e:18:94:99:4a:8a:
67:0b:8a:a6:df:4c:7b:e6:ec:d9:2c:47:6c:e5:23:4e:5c:cc:
b4:ad:07:99:45:de:9b:5d:62:9b:6a:e6:b7:fe:78:d0:16:16:
97:5b:a7:17:49:45:a9:b3:03:e3:0d:38:32:dd:b8:bf:ee:d3:
0e:aa:e7:10:23:c8:53:de:62:3b:90:a4:3b:0e:54:6b:2a:1a:
15:be:5f:8a:0f:2f:0a:ff:d0:d2:9d:32:07:d3:02:82:ef:a2:
38:83:81:c0:ce:ae:1c:18:4e:02:23:24:16:64:c2:93:2f:93:
86:3b:3e:84:48:d7:15:a1:f0:6e:cc:63:83:ec:05:cf:8e:e6:
43:45:e0:f9:94:dc:18:0c:21:fd:5d:e7:59:d3:aa:07:2c:35:
9e:b9:c6:95:91:d6:a5:45:bb:c3:3a:7d:4c:55:4b:15:83:ac:
0f:bb:b9:35:cb:a8:e3:2b:57:18:a2:35:3d:25:49:e6:d0:2b:
2f:eb:b0:b7:14:68:2d:94:17:28:62:dd:ac:4f:78:28:69:92:
f5:47:fd:60:df:bd:a0:1c:b9:14:ae:42:f7:8b:ab:20:b2:48:
d4:99:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:16:48 2026 by rpki-client