Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
File: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer (raw, json)
Hash identifier: tWzGFcb7Vd5Sirro1XM457RLXAM9mx33jb8IlMYcx9I=
Subject key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC0D017C8D0CD1955A867E65B258A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61145
IP: 185.8.112.0/22
IP: 194.38.12.0/22
IP: 2a03:38c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c0:d0:17:c8:d0:cd:19:55:a8:67:e6:5b:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db11520db30e58560013baee6106ca245f194a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:39:c2:3c:f8:d6:d0:01:5a:3c:49:04:23:
b5:ec:93:e7:36:d1:fc:28:ab:c5:28:45:67:7d:20:
16:3d:02:54:2d:27:76:f1:8b:cf:ee:65:45:3f:6b:
11:ca:a4:00:7f:a2:3d:7d:eb:47:38:97:ea:fd:77:
3c:a4:19:eb:2a:8e:b5:82:1a:92:23:96:0d:99:29:
36:e9:79:ba:86:b3:ba:04:16:81:a5:90:42:34:e8:
10:24:b0:19:62:4b:c1:2c:d8:eb:01:be:1d:f8:c3:
9a:ff:2d:17:e9:3e:64:ba:d2:cd:32:29:76:7d:3c:
2f:0c:6a:ad:a3:74:6d:fb:55:14:9f:26:8b:62:f3:
96:07:82:9b:95:80:0f:f4:03:92:c0:ea:45:58:bc:
39:b5:69:2f:f7:b6:b1:e8:cc:3a:11:a6:cf:3c:1d:
a9:fe:6d:41:0f:a8:c7:6c:8d:c4:f5:85:4e:39:c8:
00:e8:38:27:86:f5:bc:87:15:12:61:15:ee:c1:0b:
27:ce:8f:49:f9:8f:51:44:dc:81:3a:d0:ad:a8:a7:
eb:d6:f3:99:03:e0:9d:df:6b:df:3c:12:06:ae:dd:
4c:f3:b7:9d:15:75:5c:ee:af:c5:3c:71:51:bd:47:
9d:d8:04:fd:18:88:ed:3f:1f:0d:48:5e:d2:0b:5d:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.112.0/22
194.38.12.0/22
IPv6:
2a03:38c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61145
Signature Algorithm: sha256WithRSAEncryption
0a:0a:e8:86:06:db:0b:29:d4:4e:7e:37:77:97:32:77:d1:0f:
e2:95:38:7c:90:59:28:c9:83:01:83:c5:31:a4:a9:3a:27:0c:
48:7f:59:17:e4:c2:0d:a2:2a:a7:ef:2b:5f:f9:4c:51:59:e0:
ad:4a:a1:ac:51:1d:b5:7d:f0:3c:54:4a:0a:b8:c0:3b:ec:25:
3a:0c:56:a9:6b:f9:a8:ef:ce:08:2e:c6:07:63:bc:2f:c5:a3:
6c:cd:df:83:5a:97:25:5e:c8:50:4f:e3:fb:77:c7:81:49:e8:
ec:b1:2b:df:9c:00:22:07:cc:13:b1:08:b4:d2:9a:8f:f5:13:
42:74:3b:58:f5:72:4c:49:d5:d1:a5:dd:5c:c6:fb:2e:18:c0:
05:f4:a3:79:80:f8:ea:3d:64:d9:54:52:c7:d5:d0:6d:dd:a5:
84:df:18:4c:c6:ba:bf:58:53:84:c4:ce:62:18:23:61:2d:32:
0b:29:90:6b:70:85:c7:96:b7:59:e6:d5:d0:a2:a4:03:ae:a1:
cc:0a:d4:94:25:63:78:e5:c9:0e:97:54:46:4a:f4:b1:9a:7b:
2a:b8:dd:78:4b:54:11:cc:9d:66:86:20:83:0e:5b:36:7a:72:
76:27:83:4f:59:87:92:f1:9a:65:83:8a:d6:8f:02:23:ab:0b:
87:d0:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:04 2026 by rpki-client