Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
File: 8vQKwelzpu2pWuj5lPOipGwwGlE.cer (raw, json)
Hash identifier: 1CBW3o409WaRcs8Ykouz6JWkdjeX+OZSBlLpAEswmtg=
Subject key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F2324B933D9BBF25590A0B3D81EFBEB1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jul 2026 14:03:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31280
IP: 193.30.160.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:24:b9:33:d9:bb:f2:55:90:a0:b3:d8:1e:fb:eb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 14:03:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:d9:4c:ad:3b:e6:3a:2d:0f:26:2a:a3:9a:
ea:6b:5c:c3:34:ef:71:2a:96:39:9a:c1:64:5c:72:
c0:a3:3b:3b:35:4b:c8:6a:6d:99:f5:cf:65:ad:18:
b2:1a:30:61:9e:d5:ee:d0:72:88:5d:26:e6:a3:ae:
ea:c1:96:80:b1:75:41:8c:4e:71:5d:3f:b8:de:b9:
cc:88:e1:82:96:b6:f4:66:44:f8:0d:85:be:cf:33:
e1:eb:b6:eb:17:ea:43:33:47:68:28:bf:38:77:48:
96:7a:b8:8e:34:57:c2:67:5d:2b:f3:8f:76:0e:ed:
41:9d:49:49:df:90:ad:a0:5e:c4:76:b6:d5:94:c0:
bc:fe:d4:89:14:90:81:d5:53:27:af:f6:d4:27:2f:
74:99:7a:fa:dc:4c:dd:f7:a2:86:98:63:e0:da:f5:
b3:09:92:7c:7f:86:fe:ba:b3:58:bd:ac:0d:e1:af:
7e:19:22:6e:28:ea:d3:0e:c2:fb:67:1b:d4:12:58:
12:16:23:37:1b:45:7e:3a:09:64:a7:c3:1d:1e:3a:
94:24:72:56:42:60:3a:18:65:07:9b:bc:db:df:a1:
53:a2:ff:89:83:ac:f0:1a:a8:fc:27:8e:6d:a7:7f:
5b:5a:0e:5d:fd:82:52:26:67:a4:02:10:a0:12:e9:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31280
Signature Algorithm: sha256WithRSAEncryption
0d:04:4c:e8:24:11:0b:d5:74:46:65:6b:fd:b2:7b:de:2e:2e:
17:f9:23:d4:93:73:49:f5:a0:26:78:99:b6:a5:69:8f:54:37:
4c:96:ba:5d:13:f2:ab:1e:11:68:00:db:84:0f:3a:78:ec:9d:
41:b9:6b:7b:8a:e0:71:66:f9:7f:05:d7:6b:f1:2f:a1:93:2c:
ba:0d:a5:92:e0:f0:49:d6:3b:dd:d2:7e:8a:38:bb:21:7f:3e:
eb:1e:ca:f9:70:53:18:42:ef:8d:03:83:44:ce:f1:fe:e4:58:
e4:d9:7e:64:dd:2c:72:d4:f4:83:74:5b:09:80:11:f1:6a:ff:
2f:aa:35:bc:21:d9:2d:72:61:7c:07:45:3f:5e:6a:44:2b:fd:
36:b7:60:49:e4:5c:25:b9:3c:56:f6:1b:06:07:1b:40:42:5e:
0d:79:b0:c2:b3:e7:18:dc:c6:5c:8b:27:07:28:46:56:bd:f7:
07:74:03:01:b0:ef:d5:23:3a:3f:67:de:b8:35:8e:ef:90:4d:
6e:62:38:e6:2d:6a:bf:3d:3b:f1:0f:cd:e3:f0:68:2c:47:c3:
00:a6:eb:0e:cc:ed:49:33:29:ce:62:ac:68:8a:45:fb:10:c6:
03:89:4a:21:ba:84:94:75:02:22:69:c3:a7:83:27:32:d4:cd:
9e:5f:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:59 2026 by rpki-client