Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
File: CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer (raw, json)
Hash identifier: jPnpWy33Rgl87kodoACgFUIRudRtn2QkO5UtuEaeD+M=
Subject key identifier: 0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A023DC3E33C2B0195AF0B8BBCBCC11CCC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Aug 2026 10:27:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29161
IP: 193.228.208.0/20
IP: 2001:67c:350::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:dc:3e:33:c2:b0:19:5a:f0:b8:bb:cb:cc:11:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 10:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1a8394523f94dc6cb98a06c52f577ee000af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:28:7c:17:f8:68:2f:d0:56:c6:2e:57:a9:
1a:37:94:fc:ad:a3:38:42:c6:0a:48:2f:6f:de:40:
ba:29:9c:87:30:1b:d6:3e:02:3d:8e:45:3c:1b:05:
ef:2b:53:c6:80:44:46:cb:5c:53:ff:da:ca:c0:45:
c9:46:66:80:c3:9d:ff:fe:b7:ea:1c:13:eb:2c:b6:
04:1f:64:84:7e:cd:e5:a7:b0:57:e5:4e:74:8a:1a:
0c:d0:44:a7:26:2d:47:af:d0:63:0b:e5:0a:d0:e1:
e2:55:0e:67:07:35:83:00:7d:a9:38:e1:bb:97:33:
9e:3a:8d:e7:e6:2e:47:10:97:60:23:5a:9e:04:bf:
b4:20:8d:7e:17:fa:8b:25:b8:02:63:63:df:bb:e8:
16:73:1f:63:fc:f5:a9:33:71:a8:48:7d:9d:90:7d:
75:2e:80:e0:03:3a:d5:07:3d:5c:db:9c:5b:5d:6a:
2e:1b:0b:1f:15:a8:51:e2:59:6c:06:59:21:db:7c:
21:00:8d:4c:fe:98:33:79:d7:51:0f:42:76:d5:1c:
b9:48:a1:9e:5f:f2:65:3d:97:c9:d1:c4:64:a8:a4:
de:c6:b3:67:f0:67:c3:1b:64:ac:dc:ce:ae:f1:39:
75:09:e0:37:fd:d3:95:6e:93:b5:f4:ff:7f:33:e6:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.208.0/20
IPv6:
2001:67c:350::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29161
Signature Algorithm: sha256WithRSAEncryption
68:73:36:d0:13:52:6b:0b:0a:b2:f2:d5:48:59:93:c0:a3:f9:
88:f5:98:9e:7c:3b:78:48:08:d3:20:9b:a5:73:81:0d:e0:48:
e0:e5:40:28:d2:be:6f:75:a5:58:52:f9:5c:de:ab:98:ff:55:
fb:5d:51:85:c6:b4:97:6c:4e:eb:48:cc:45:97:7d:14:31:88:
6d:63:ba:4c:58:81:16:df:1a:02:c1:30:95:83:de:ed:ca:47:
b5:ae:a5:f0:e3:da:0e:fc:52:38:e0:81:ee:98:22:da:0f:90:
bf:c6:71:6b:5d:1a:4d:b2:7a:a8:79:d6:28:5e:62:e0:b7:57:
75:87:f5:15:39:cd:18:1f:21:f8:76:1d:43:36:55:12:0f:3d:
6e:21:95:3b:c5:da:71:5a:8f:30:25:8c:04:12:b0:f3:20:9a:
67:4b:24:56:29:c7:03:03:39:97:7b:55:c4:3c:1b:0e:ea:18:
8a:85:60:7a:7c:4c:2b:70:54:a1:7b:d1:1d:5b:9c:6f:87:3a:
89:ef:ac:20:7d:c4:3d:23:f1:84:e1:ca:96:9e:8b:c1:c4:34:
e5:82:94:8d:d3:22:47:61:59:e0:40:73:af:91:be:8e:a9:77:
27:e5:10:a4:a9:a0:60:6e:e6:d1:c9:91:bd:b5:17:78:a8:aa:
d6:fd:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:35:29 2026 by rpki-client