Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer (raw, json)
Hash identifier: 1ht6HhXc9wyyl2XriJkfiPp/zxSh+c4SRa9VEXoa6zw=
Subject key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4FF8DE35F47857E20039A0D96AE56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198320
IP: 130.255.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:ff:8d:e3:5f:47:85:7e:20:03:9a:0d:96:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:5d:1d:b9:06:07:f0:21:17:8b:d1:27:97:
b3:ff:50:be:02:ad:cc:da:b3:bf:6b:53:68:a9:3f:
fd:98:7b:3e:22:62:e6:74:13:a4:6e:2b:6d:0a:8c:
8f:7d:4d:4a:6e:6a:16:c8:80:9b:8c:95:52:6a:3f:
d9:e6:df:02:7e:07:00:f0:4f:11:1b:39:76:87:96:
8f:4d:ff:cb:bd:4c:21:14:e0:17:18:48:9b:72:60:
f0:0e:3c:96:e5:c6:43:e2:67:5e:c0:25:3b:11:eb:
e0:03:52:82:9d:cf:49:80:a5:58:35:3f:7b:a5:ac:
04:c4:bf:ef:80:d0:84:6c:10:3e:f9:b0:50:9f:0e:
82:30:e9:b2:8a:57:67:45:81:e5:4f:5b:6c:52:21:
fc:16:ab:28:24:4c:7f:03:5d:30:6e:c5:91:94:e7:
06:01:df:cb:a8:ea:14:a3:c8:de:f1:a1:9f:e1:be:
5d:0d:52:31:80:0b:f1:cb:0c:39:3f:64:25:21:19:
9b:5e:95:fd:21:2c:55:4c:23:5d:3b:7c:9b:5d:fd:
b0:67:98:c3:85:12:25:ea:e7:e6:45:02:0f:34:98:
be:0c:a9:fc:08:74:27:ba:36:58:f6:4e:d6:87:2c:
35:b0:e9:6c:e6:d6:24:1a:19:e9:22:34:c7:0b:f5:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198320
Signature Algorithm: sha256WithRSAEncryption
7a:cb:c3:21:02:ec:7b:68:3a:28:66:6a:5d:dc:03:cb:67:9e:
c8:c9:27:d6:0f:b1:54:bd:25:cc:88:2b:b5:b3:28:a0:9e:a4:
cb:88:53:20:2d:b4:39:64:76:b9:f3:6e:1f:94:ac:78:39:0b:
8f:78:af:d1:d4:ec:f1:a6:9a:7e:2a:c4:27:77:93:9b:8b:1a:
a7:a7:dd:2a:33:bd:f8:ba:41:18:5f:ed:27:36:eb:8a:07:1c:
66:25:69:1c:ad:b6:bd:11:c0:87:ee:93:91:c7:e3:33:0f:21:
3d:d0:52:01:3a:df:8b:99:ce:f7:f6:4c:d8:be:4c:f2:d3:ef:
25:90:18:ee:ca:86:1e:61:09:07:26:af:a6:4f:04:81:29:0b:
34:2e:51:a3:1d:3e:0d:c5:e9:69:32:ed:37:e9:59:6c:4c:7e:
e8:ec:6d:e0:37:13:42:74:ab:b6:22:4f:43:68:31:c4:b8:e8:
4c:f7:c0:ea:c0:75:f1:87:97:0a:8b:f9:aa:a3:89:83:90:34:
05:e7:c1:75:8b:be:34:fc:3a:92:11:5a:b9:53:c0:e8:a9:4c:
08:ea:34:40:49:19:0a:99:d2:7b:dd:00:70:49:83:f2:df:8c:
7e:6c:16:a4:04:f2:39:b3:17:c6:b4:da:78:6e:f6:79:b7:ce:
f0:68:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:45 2026 by rpki-client