Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
File: ABPBwdy3CekDejQ29QJEZ98KY4w.cer (raw, json)
Hash identifier: Vq7SYR17SnFvUkLiQzY0xqM7r4D7JLKuIo0CQt4kMtw=
Subject key identifier: 00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBAE008D2BE0AE5AF1E8096207DB70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197991
IP: 5.144.144.0/21
IP: 149.126.32.0/20
IP: 178.132.56.0/21
IP: 185.198.100.0/22
IP: 2a0d:a5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:ae:00:8d:2b:e0:ae:5a:f1:e8:09:62:07:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:56:2d:85:3e:48:17:c8:df:0f:9a:65:da:
f4:5e:b0:a7:b6:ba:f2:06:18:e0:14:d3:3b:26:61:
de:be:b4:89:75:d6:73:96:38:f8:3f:f0:f7:fd:72:
31:0b:3b:aa:49:db:e8:c8:89:04:0f:f4:3b:cd:41:
59:57:a4:e8:e7:4f:32:1c:c6:86:0c:cd:d0:4f:c5:
69:7c:70:de:64:b7:73:5f:cd:2a:73:7c:9e:d3:12:
8e:43:cf:a7:8b:6a:4f:2d:1c:a0:6a:77:36:b6:51:
5f:76:e1:90:f2:7c:08:7c:15:5e:7c:2a:0f:4f:63:
36:60:39:4f:6f:2e:16:33:8e:a7:7d:bf:da:f0:f9:
7f:74:29:da:85:a1:8a:1f:ba:72:4c:33:7a:c2:d2:
e8:fb:19:7d:9a:b9:32:70:a6:20:75:3c:ca:9e:c2:
09:16:5a:50:b0:b1:51:cf:ad:37:d8:0e:7f:c3:7f:
fb:fe:f0:a3:fe:fb:d3:1e:83:d1:ef:69:2b:2e:6c:
ab:37:fa:af:9d:35:4b:26:69:dd:fb:01:64:4b:0c:
60:e3:31:65:38:ab:d9:e6:4a:33:f6:2f:2e:d1:1a:
0b:3e:90:2d:02:2f:df:2e:63:15:20:40:81:98:aa:
9e:65:d9:70:68:ee:67:71:96:1e:c4:1c:45:be:93:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.144.0/21
149.126.32.0/20
178.132.56.0/21
185.198.100.0/22
IPv6:
2a0d:a5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197991
Signature Algorithm: sha256WithRSAEncryption
1f:c8:7a:a1:8e:c3:0e:16:19:dc:17:eb:2b:a7:1c:b0:4b:ed:
3e:39:96:69:62:1b:3b:6d:e8:b5:83:d7:95:c4:da:0b:4e:66:
31:36:d8:fc:42:65:77:c0:71:29:56:ae:d9:08:0b:11:ff:3c:
c4:b0:46:88:7c:87:c4:3c:ad:c1:88:95:c7:ef:ab:aa:ba:f9:
8c:b2:e9:b3:00:29:73:61:25:87:c3:1a:6f:b0:e9:fa:69:a6:
f5:ce:09:c0:59:73:7a:53:5d:04:cb:21:be:bf:34:b6:70:4d:
dd:80:ed:e9:6e:d6:47:0f:2a:4d:c2:21:ed:3d:b8:48:91:9f:
2a:cd:04:c9:36:4e:12:22:ad:82:9f:e7:b7:1d:50:df:fd:93:
a2:3c:ca:e9:b9:fc:7e:e7:3c:a3:1f:b0:94:56:d0:ff:3e:68:
ac:49:59:49:3b:d4:ca:9f:bf:ab:a7:bd:3b:49:96:6c:2f:7d:
d4:0e:cc:2a:47:cc:2d:64:de:e7:21:ec:32:f6:bb:72:57:b1:
8d:70:45:c4:9c:42:e1:e2:ed:74:6b:76:25:b1:55:ee:9a:5b:
01:fa:49:a2:7a:0f:69:cb:d0:8d:f2:e8:4f:a2:1b:95:7e:c7:
d2:76:52:1b:c6:a1:b0:38:21:34:1e:66:71:f5:9c:5c:4d:d2:
02:b2:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:20 2026 by rpki-client