Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
File: Bag948ZgIx8iMPHCcA4gUFobz1c.cer (raw, json)
Hash identifier: PL6nVAlkMZkJS8pJ3Kyx4FriUdoXTRpLj/2IwDQ24js=
Subject key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE11B4DC203BC7A1D5F404B7805065
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25264
IP: 185.105.184.0/22
IP: 2a06:3940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:11:b4:dc:20:3b:c7:a1:d5:f4:04:b7:80:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:2b:c4:b4:10:74:f0:2d:61:ec:25:cb:cc:
3c:11:ed:f1:99:26:49:88:5e:b1:56:fa:ad:9c:e5:
41:47:2f:12:12:cd:1b:d5:48:af:92:10:69:bb:b2:
23:5d:a7:dd:b5:01:b2:b1:69:52:7c:f4:54:4f:69:
50:81:89:1a:eb:cc:6a:a4:af:7d:ea:2c:c0:90:1d:
f8:67:f2:37:a7:9c:02:d7:39:06:92:c6:3e:d1:04:
47:7f:8c:82:b0:d1:4e:19:3c:56:0f:7b:6d:2c:2a:
87:db:27:6a:cf:7a:5b:f8:02:74:97:68:56:d9:9b:
f0:95:26:7e:a4:63:40:cb:4c:69:61:60:ff:43:66:
df:3c:ee:b8:4a:57:51:98:82:49:ba:8c:4e:39:38:
91:07:ea:3f:34:fb:47:e9:d5:27:b3:1e:94:03:a5:
65:ca:d8:06:a8:08:21:31:53:b9:25:8a:9d:ed:b7:
04:1c:ce:31:c6:8e:76:82:e8:74:f6:19:c5:98:7d:
2f:80:19:53:50:31:17:30:37:88:97:30:0a:b1:eb:
62:3b:e3:96:c6:49:fc:71:8f:f7:9c:5f:17:9d:be:
13:01:eb:62:0e:39:98:c0:27:11:bc:59:d7:67:84:
11:1c:0e:93:0f:ae:b8:85:e7:8b:1f:f7:fb:70:e0:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.184.0/22
IPv6:
2a06:3940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25264
Signature Algorithm: sha256WithRSAEncryption
7c:15:c2:f8:c1:25:04:00:08:6d:f5:21:dc:f3:cf:13:9e:eb:
92:e3:84:eb:aa:79:85:b7:f6:ef:6f:ef:6e:41:eb:1e:2b:d5:
70:46:e3:a8:1a:99:07:0f:b9:6e:68:1b:58:d0:0d:a3:aa:2c:
a8:77:82:03:36:54:08:dc:3c:29:1b:92:e4:80:ea:28:b3:76:
f1:74:f7:b5:59:40:7f:79:ed:45:bf:10:5e:20:1b:f0:1d:8f:
7b:be:2f:4b:f7:1f:f1:33:06:3c:cd:cb:33:7c:03:db:af:c1:
11:e4:a7:88:05:21:86:28:c8:af:4b:b5:33:61:7f:16:24:a1:
85:21:46:21:95:e5:16:fc:19:52:64:72:96:75:da:35:10:8e:
d0:f0:07:b3:d2:57:88:67:b8:03:a7:b6:d3:ae:af:2e:0e:4a:
e0:ea:f8:7e:d5:90:9c:2c:6a:e2:26:0d:da:90:e8:fb:73:46:
0b:f1:18:a0:76:ea:c2:16:3b:b4:1f:5f:1f:f4:2c:d1:9e:24:
dc:0c:c1:60:86:db:d4:65:b7:ec:57:50:35:15:e6:d1:b6:ef:
07:63:5c:52:b2:69:f5:d6:26:1c:1d:0c:3b:28:a1:ab:42:8a:
b2:a9:b1:c8:17:fb:6c:c7:e9:e5:4d:94:67:b0:3a:3d:0f:e0:
a1:0f:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:59 2026 by rpki-client