Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer (raw, json)
Hash identifier: l07s+ztMKZuY3MwlPJW2WeFvHFcjFkQcvxUtKXcHlNA=
Subject key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB41F2C10769AA23C861B07A4366D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 5523
IP: 81.13.0.0/17
IP: 194.67.128.0/18
IP: 194.67.224.0/19
IP: 213.252.64.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:41:f2:c1:07:69:aa:23:c8:61:b0:7a:43:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:69:9a:6f:15:28:fa:0b:21:2c:36:99:03:
12:e5:f9:2a:f6:ea:65:e2:d8:91:2f:d2:bd:0f:27:
91:25:08:ee:36:da:78:2a:6a:60:1d:b2:3a:d7:b8:
40:81:fe:d1:35:87:2a:01:51:77:db:a3:bf:fa:03:
01:bc:ae:97:ad:ea:a3:eb:22:bb:2d:ca:96:43:b0:
60:5f:62:bc:42:e9:b5:a3:9d:6a:65:78:47:ef:2c:
1e:61:10:fd:16:7f:8d:82:ef:b6:11:86:30:df:6e:
e6:45:e5:22:03:e1:a1:5b:dd:04:8d:23:67:f6:9e:
1e:27:bc:96:8b:d7:4a:0d:99:02:f7:b5:3d:5d:22:
57:b0:fc:21:13:d1:4f:0e:04:70:bd:e8:b8:77:33:
25:5e:ea:37:7f:43:58:14:90:95:3d:23:93:10:04:
4a:54:fa:cc:31:2d:77:c2:d2:3e:be:7b:f9:b8:20:
24:b1:c1:58:c1:3d:6e:aa:86:87:42:2e:2e:dc:7c:
a0:3c:dc:af:51:89:0f:e8:d1:89:84:c7:9d:e9:e7:
96:16:b0:9e:64:ea:70:83:ab:df:aa:b8:d3:b1:07:
90:7e:9b:d3:f6:15:e1:c4:13:1c:6d:2a:c1:1f:30:
43:a8:b2:b3:5b:47:c9:c7:2c:37:df:99:1f:14:3b:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.13.0.0/17
194.67.128.0/18
194.67.224.0/19
213.252.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5523
Signature Algorithm: sha256WithRSAEncryption
5c:32:e1:3e:7e:2a:9d:7c:15:64:bd:9f:06:ef:b7:f6:d6:14:
c5:8c:72:06:90:9a:8e:5b:6f:b7:e0:c2:f0:20:50:09:8c:4e:
cb:e7:a6:b3:e6:55:e5:68:5e:82:89:9f:01:84:09:3e:fe:66:
3e:09:de:cd:90:42:ce:9b:48:c4:92:37:ce:39:8c:52:49:01:
10:13:f2:1b:57:88:3f:b2:63:bd:58:42:a8:5b:bc:b4:fe:24:
73:15:09:9e:7a:ac:bb:15:ae:58:22:91:24:bb:d5:50:62:33:
87:a2:b5:0d:32:8e:68:1a:91:94:d0:e2:5d:a3:fc:76:de:c1:
f5:1c:6b:89:9a:61:1e:81:f0:2d:94:25:4a:1c:76:24:c7:9b:
c7:a2:68:7a:71:ca:8a:1f:9f:80:e9:39:f4:5c:57:bd:b9:46:
3b:0f:8f:5e:fc:dd:6c:76:7c:7d:df:81:65:3c:82:1d:25:f8:
17:35:ec:3a:46:81:a8:84:55:81:58:fb:96:0e:c5:f0:e3:a1:
2a:3c:44:09:bb:bb:01:ee:23:72:b8:f3:a8:94:7a:a5:df:d2:
e9:1f:9d:bf:6f:aa:04:81:8b:38:25:5d:2d:b0:53:71:6d:bc:
80:5b:48:68:af:1c:45:58:a5:91:78:9b:94:5f:c1:cc:a7:13:
62:a7:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:13 2026 by rpki-client