Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
File: 2geeQ_xybhZVyKdVVPX7wYsgRUU.cer (raw, json)
Hash identifier: ZH2COWXpktMratferWul5OJl9+mC5ISPEjNnknD4HfE=
Subject key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9785676104DE9BBDB355D0C9F7432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34785
IP: 80.80.240.0/20
IP: 185.72.136.0/22
IP: 193.186.72.0 -- 193.186.87.255
IP: 193.228.112.0 -- 193.228.122.255
IP: 2a01:af80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:78:56:76:10:4d:e9:bb:db:35:5d:0c:9f:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:65:da:9c:a2:2a:a8:1c:1f:9b:04:9e:2c:24:
8a:02:e0:69:be:f8:fb:62:da:78:0d:ad:ea:49:2b:
e9:2b:d1:b8:63:32:6a:e2:bf:ff:2c:50:e7:54:90:
7f:9e:85:17:e9:73:e5:0e:a5:bb:c7:fc:74:f8:54:
90:cc:21:b0:e1:7c:00:95:7c:4c:65:42:d7:ee:b3:
fc:3b:e6:5d:c6:d5:68:b2:f7:1d:5c:41:26:84:3a:
2f:c9:35:10:be:e0:0e:03:b1:a5:29:65:9c:70:c0:
d8:47:32:80:81:c3:8e:8e:90:e4:7f:fd:9c:57:d2:
c7:0f:bc:1e:36:4e:e0:7b:85:77:2e:83:e6:9f:95:
28:92:ab:63:af:4a:c8:6a:5b:89:33:10:e2:e2:2f:
c1:cb:13:dd:04:53:95:89:5a:86:05:a2:5b:83:58:
71:d0:94:46:a8:24:b7:b0:75:2c:27:c7:c3:38:22:
52:ae:61:c4:bf:86:fa:67:e5:cd:8b:03:0c:21:21:
e7:3f:d0:dd:b9:2a:5b:f7:9f:9f:e6:ae:f6:b9:ce:
a4:8c:30:39:4e:c8:80:6b:b2:af:d3:2b:38:86:f8:
e0:41:99:42:46:f9:59:2e:97:d9:48:90:a6:c9:77:
51:70:d0:a0:73:1d:c4:eb:28:6b:8a:ec:18:82:12:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.240.0/20
185.72.136.0/22
193.186.72.0-193.186.87.255
193.228.112.0-193.228.122.255
IPv6:
2a01:af80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34785
Signature Algorithm: sha256WithRSAEncryption
4f:ce:50:eb:34:95:31:b2:ef:0b:4b:7f:41:4d:4d:4e:64:6a:
6c:25:d8:dc:f0:cd:62:fc:3c:32:fd:6d:98:c9:46:3b:11:4d:
ce:d5:57:3b:18:6b:10:4f:3b:2e:64:8e:49:6f:f7:0c:a3:9d:
ad:9a:f4:83:23:a3:07:2e:ff:07:24:a9:0e:36:70:95:86:7f:
26:d0:3b:f9:b2:d3:95:f0:0e:49:66:e0:69:96:17:a8:05:72:
c0:3f:57:27:cf:44:9c:65:9c:74:57:d0:d7:05:6d:04:c4:7b:
32:a4:19:2c:26:5a:ec:87:96:d5:ae:96:5f:f7:27:04:b2:90:
35:21:ae:e6:0c:db:68:a0:ba:9f:17:5b:c7:c2:6f:7c:41:a0:
82:9f:21:ef:e1:c4:36:1a:fc:ea:2d:82:e6:3b:34:7c:92:05:
80:a8:c7:09:13:35:ee:f6:94:34:b7:3d:e5:84:58:92:84:c8:
bb:9a:33:af:8d:fd:19:2e:4f:64:9e:b8:9d:83:39:06:c1:ee:
e4:33:5f:0a:5a:e1:2a:80:a6:76:31:57:0b:dc:7e:62:d0:ce:
69:9f:2c:2a:a4:4b:6e:59:bf:7b:72:ad:b0:e1:b0:75:ae:d0:
d6:d0:57:8c:f3:9e:b9:3a:5c:0a:d3:e4:12:b6:73:63:44:30:
2c:e4:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:05 2026 by rpki-client