Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
File: CovKGg6GRItz2lTELLDXV2U3Pyc.cer (raw, json)
Hash identifier: GHhzcEkjeswNtVovQwNTi6zE64fvnzSQ59Y5Iysi9bs=
Subject key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA37372635A7A692C889F2402EAE5DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 37.35.112.0/21
IP: 46.255.168.0/21
IP: 77.239.32.0/19
IP: 185.74.112.0/22
IP: 2a00:d420::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:73:72:63:5a:7a:69:2c:88:9f:24:02:ea:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:a5:a5:ce:6e:0a:e6:fa:e6:71:d8:13:d6:
7c:50:56:47:5e:6b:17:8f:43:89:66:ed:f1:7d:04:
a2:39:25:73:09:4d:34:dc:55:eb:6f:19:a9:34:b3:
29:08:78:00:02:4f:4b:a5:3d:27:7c:c4:70:5d:7b:
94:9e:51:d2:11:b6:aa:ae:23:b6:37:aa:67:b0:94:
97:01:46:93:05:88:2c:bc:79:d8:5e:17:78:16:1b:
b2:79:2f:c9:92:20:28:1a:68:bb:36:93:fe:84:d3:
d4:eb:66:60:d0:e2:7f:95:02:af:59:35:e4:f2:38:
cc:fe:1d:54:10:17:9c:f2:7a:e0:21:04:8d:f9:89:
20:b9:21:23:68:4c:5f:2c:c1:61:41:7c:db:23:5b:
13:4b:ae:31:7f:36:4d:4e:b4:41:ea:81:65:a0:fe:
d5:c2:d0:db:71:71:2f:50:f0:e5:5c:f2:48:44:e9:
80:d3:82:94:db:b5:09:87:dc:47:29:b7:53:63:28:
6e:2c:2a:f4:c3:c6:86:da:cf:d2:db:6b:92:19:18:
09:29:61:d2:44:82:52:ab:1a:2c:24:6b:9e:0d:3f:
16:01:a7:99:4d:1f:e1:47:1d:da:12:a6:86:28:68:
17:d5:d3:7d:a4:3a:2b:a9:65:af:37:10:57:25:8c:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
7c:88:44:a9:5d:2d:ab:c3:c0:de:53:5c:94:03:85:3e:a6:61:
18:2a:40:78:88:6b:fa:6e:c8:0d:56:00:56:20:cd:4a:d8:f0:
32:3d:3d:0a:3b:ff:7c:c5:50:29:e0:fc:ef:9f:99:e9:5f:7d:
a8:9f:87:6d:86:4e:d6:c0:f1:dd:66:0f:e2:67:eb:d4:f2:5d:
f4:10:77:82:40:03:7c:3c:77:d6:e0:79:89:fa:1d:d1:0c:62:
e8:d9:fe:17:52:92:4b:ea:4d:50:68:c9:c7:04:7b:8f:98:cf:
c5:7c:0e:2d:67:96:c8:45:9b:81:a1:f2:2d:db:73:12:d5:59:
0f:dd:8c:24:c9:f9:2c:22:1e:75:ba:31:f2:74:f5:7d:b1:c1:
f4:0a:cf:05:6d:fc:a6:39:6d:e9:29:e0:af:0b:af:26:41:cb:
a1:18:be:f8:66:16:fc:86:24:1f:fa:b9:66:7e:fe:ba:17:0f:
95:e1:fd:78:c8:54:ed:89:45:91:df:d7:62:6d:c4:c3:37:36:
59:d1:1c:15:34:04:fa:1a:a8:7a:aa:96:e7:11:47:6b:6d:3e:
ec:b4:ae:cd:96:4e:b5:11:b7:2e:ef:b6:fb:a3:c8:7a:39:d5:
b4:77:50:9f:e4:81:34:85:e0:2a:29:ad:21:2d:f7:d9:00:f1:
72:ad:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:35 2026 by rpki-client