Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
File: 6h-diwo3ikLxlEBBkUVJTlRgQMc.cer (raw, json)
Hash identifier: 6gmstpc3dgaSNIPdL48JC3EgcTMak+WBfMJcbS6Unek=
Subject key identifier: EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA739EB14E95419EA648C8FB5A513B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21387
IP: 195.234.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:73:9e:b1:4e:95:41:9e:a6:48:c8:fb:5a:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1f9d8b0a378a42f19440419145494e546040c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:80:18:2b:10:04:9f:0b:75:0c:80:f6:5a:
7e:33:e6:c3:f9:e5:72:2a:58:ea:18:74:e2:8a:f8:
cc:88:bc:e1:ee:9c:c0:5b:92:62:c5:2f:19:ec:94:
83:1d:20:b9:d7:0d:8c:15:47:59:6e:c3:96:04:60:
b2:a0:03:47:20:52:c2:26:0f:67:8e:49:49:f0:0b:
83:df:92:6d:85:b5:77:71:09:9b:d3:e1:ec:97:a4:
8e:02:13:96:c2:e5:af:37:f1:aa:99:d7:a5:af:49:
5c:a2:42:f7:6f:f0:c8:15:2f:b9:c8:fc:46:6f:ec:
54:5d:93:66:ca:2a:22:6c:ff:99:66:dc:eb:29:6a:
fc:db:87:93:e8:c1:e1:08:37:6e:9b:b7:61:a9:10:
d5:72:2d:7c:9b:83:71:5b:21:b6:c5:5f:db:31:57:
a3:bc:9e:e5:90:4b:bd:e7:39:e0:bd:67:c3:8a:cd:
19:33:df:b2:52:65:08:10:f7:80:52:6d:52:f5:a9:
4b:90:b9:44:1b:50:e2:c9:f9:52:20:61:ca:61:02:
bd:08:69:97:c0:37:07:9f:13:ac:c0:b8:f1:c7:cb:
f5:7d:b9:62:85:d7:9a:65:4a:dd:9c:1d:af:d4:be:
a3:cf:9f:9f:8b:a0:ca:10:87:48:4c:b3:fb:52:ae:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.139.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21387
Signature Algorithm: sha256WithRSAEncryption
7b:4b:ea:30:c5:06:c4:c6:ae:c0:e8:49:40:6d:de:19:c0:dc:
f0:e1:60:72:84:af:76:ef:88:0a:5e:82:ef:e0:8b:af:7e:6e:
6e:a5:de:a9:8d:2b:00:31:e1:65:9b:e3:e1:ce:36:d0:72:58:
bb:0b:dc:9a:55:5c:8b:90:7d:8f:41:22:83:af:da:be:ba:ae:
4b:cc:a0:e6:ac:13:49:68:3d:04:04:a4:d4:1e:0c:98:6f:cb:
a3:00:15:5c:70:b5:22:9a:44:84:51:43:96:1b:61:30:c0:02:
ba:6f:e1:cc:b7:ee:52:0c:bd:6d:7b:f1:cf:3b:57:74:a8:30:
93:bf:99:f6:25:89:25:ff:12:62:54:dd:8a:a0:2e:94:e4:34:
10:56:28:0c:ed:1e:39:1d:bc:44:9e:c3:09:2c:2a:40:b3:06:
92:bb:f2:bb:bb:d3:9c:2e:77:66:51:42:8c:01:39:85:56:fc:
d7:85:5f:30:8a:3b:7f:d9:68:b1:1b:a2:a2:49:38:89:4d:bc:
d8:31:96:bc:b5:18:8c:48:e3:72:be:de:59:75:ee:43:bb:6b:
57:9e:b1:6c:05:d8:a8:9e:84:9c:05:50:1a:4d:8f:ab:07:56:
fd:a7:7a:e1:d6:d2:e4:5d:83:4f:03:0b:db:20:35:4e:55:2c:
36:ce:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:41 2026 by rpki-client