Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
File: C155jbbo9XxfSkRRUJAd7oqW1eU.cer (raw, json)
Hash identifier: Yu1VEnej9/23j54GsD6e0fzT3wLzDI87oneSUikYTlU=
Subject key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECAC3B97236E9D5067213FF0FBDC80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34024
IP: 91.199.235.0/24
IP: 193.26.26.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:ac:3b:97:23:6e:9d:50:67:21:3f:f0:fb:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:e5:bf:78:3c:5a:c0:19:ca:30:60:04:9c:
99:2f:93:20:b5:a5:d9:56:0b:05:c0:26:c8:e8:7a:
8c:35:aa:88:a7:33:50:1f:38:5e:30:e5:32:1b:dd:
8e:e0:9f:73:16:6d:c3:c3:bc:0f:08:16:70:62:19:
52:9b:3a:7a:ba:71:d0:01:64:72:99:cc:89:7a:4a:
a8:6b:10:0f:f6:64:3f:d3:e3:f0:dc:64:7d:d1:39:
52:19:b7:10:53:3e:e5:e7:b9:42:a1:70:cb:8f:89:
7e:a7:48:64:e8:58:b8:54:ee:19:9a:02:43:b4:f5:
4e:d6:37:3b:6c:b9:b1:ba:e9:c7:0c:81:16:00:aa:
b5:97:d0:a9:0d:e2:dc:44:3c:7e:c8:65:e3:dc:c5:
e1:d0:18:aa:01:04:24:4b:46:cd:30:9d:91:3d:c8:
9d:4d:51:64:2c:30:de:3d:81:e0:f5:0d:63:06:db:
7b:5d:56:01:75:67:78:b9:63:51:11:4c:a9:a8:92:
3d:b9:e3:fe:05:ce:c2:ec:cf:1c:94:a6:e0:13:9e:
af:95:ac:bd:b4:26:25:3b:6d:f0:e4:d0:1f:44:2d:
58:17:d1:5a:d6:d4:be:e1:17:46:8b:47:96:2b:fb:
de:3c:24:76:76:bb:8a:1e:4c:6d:7f:85:7a:10:17:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.235.0/24
193.26.26.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34024
Signature Algorithm: sha256WithRSAEncryption
3d:80:9f:2c:25:a5:50:f1:c6:b0:57:de:62:df:92:c3:ec:cb:
b9:c3:cd:e0:be:27:8d:6b:a0:4c:0f:04:0f:2d:9a:7b:63:57:
55:08:4a:15:cd:6a:fc:be:a9:8b:2e:cf:ae:45:66:86:16:76:
b1:e9:00:9f:7e:2c:64:2e:aa:57:95:8f:a4:d5:ef:9f:07:ab:
b4:9e:97:b3:8f:1e:a2:28:81:68:81:f0:f0:93:37:31:12:47:
7a:a2:b6:6f:73:6a:86:02:e8:b4:bb:da:54:b2:2c:15:bb:39:
fe:b2:e8:86:73:4c:55:fc:7a:91:ea:0b:2b:59:55:e1:0d:6d:
42:b7:9b:60:91:5d:fa:cd:ff:7f:df:03:59:67:1f:26:35:e5:
84:df:a3:d5:79:3a:43:60:2e:ba:3f:10:ee:b5:ba:45:d2:5a:
90:20:5c:b4:97:ec:c2:ff:e4:38:b8:af:cd:e2:cb:a6:e8:32:
3f:bf:6d:47:da:d0:6b:e9:80:bc:05:49:69:ab:86:60:f2:83:
d1:00:ba:aa:8b:58:a4:a1:e5:93:48:6c:a6:d1:ee:aa:60:20:
78:ca:5c:67:f1:33:21:26:a6:21:5b:33:7c:f0:ce:21:a9:c3:
47:d0:24:4f:11:21:66:42:ba:04:e3:e7:b3:ed:24:74:5d:0d:
c5:18:18:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:42 2026 by rpki-client