Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
File: D2Kgc3giOs5WqEzv0weCKMsL5S4.cer (raw, json)
Hash identifier: ZSNGUlEjR1MXPJ8fIoyGBG4K7toj5OGD17Eza1qDhNg=
Subject key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F48773C3CD499A7007A2BED269967C3C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 20:00:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209740
IP: 91.90.84.0/22
IP: 185.15.136.0/24
IP: 185.202.32.0/21
IP: 192.145.8.0/22
IP: 2a0e:2780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:77:3c:3c:d4:99:a7:00:7a:2b:ed:26:99:67:c3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 20:00:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:72:94:a5:a5:46:84:ce:af:ab:4d:bc:04:
6f:07:ff:d7:0b:1f:63:53:e2:3b:8f:c7:6b:f0:0e:
d7:27:e1:ce:c2:9e:0e:fc:2e:4a:e3:cb:ac:4a:54:
47:e8:80:ee:29:0a:1b:0e:07:b2:2b:ea:03:fb:c9:
79:00:cb:cc:2b:b1:30:43:03:73:0b:bf:47:0c:c0:
8a:50:b0:2c:0f:a6:ed:4d:e7:2d:67:8d:72:9d:77:
06:47:45:dc:83:84:ff:b9:eb:59:10:31:92:ba:30:
42:d5:26:0b:70:5c:46:de:ee:c1:36:62:2e:0c:8c:
4e:13:fd:99:bf:9f:66:26:8a:43:1d:97:1e:de:c2:
c0:4b:56:3e:59:5c:4b:a3:1f:73:62:23:08:18:b9:
6f:80:3a:66:c7:d1:aa:64:cf:8a:f2:75:6b:37:ef:
6c:23:be:20:77:7e:62:72:4c:bc:1a:e2:1d:5a:9f:
1c:22:6c:fb:c0:b5:e0:c1:63:f2:3b:bc:ba:6f:da:
28:f3:4e:33:21:a8:bd:c9:08:16:e3:b9:44:91:90:
f8:b2:70:10:dd:c7:06:8e:d4:8a:06:22:1b:8e:42:
c4:8b:89:90:1d:d4:66:2c:2c:2c:fe:0a:75:a6:5d:
0a:f2:9c:83:44:1c:49:a8:f5:7b:69:7f:28:ae:45:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.84.0/22
185.15.136.0/24
185.202.32.0/21
192.145.8.0/22
IPv6:
2a0e:2780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209740
Signature Algorithm: sha256WithRSAEncryption
1b:21:c0:11:b5:da:db:38:d7:6c:5d:b2:22:11:0c:5e:83:a9:
73:b6:7f:58:a1:e8:23:87:58:ae:7d:ba:90:1e:c4:ef:9d:0b:
db:94:85:01:de:1e:bd:7f:e9:1a:ea:74:21:c3:0b:8c:24:87:
8e:ab:f7:28:ef:e6:51:3d:41:0d:86:a7:a2:7c:20:85:37:7f:
24:1c:0a:a3:fd:d1:4a:1a:49:da:0b:22:c5:b3:26:93:a8:21:
ba:fb:3b:be:fc:87:6b:08:45:fb:c1:c8:80:cb:5b:1b:65:b2:
07:8c:a8:b9:ec:1b:d6:dc:c8:b7:72:7b:02:f2:f5:34:55:4e:
27:ca:96:43:29:31:aa:5d:e2:bb:7e:b6:53:f1:13:6f:02:9c:
4e:e5:79:7e:c8:33:47:9a:09:03:64:38:0d:ef:bf:71:37:6f:
a4:ec:eb:7a:8d:16:63:f0:78:c1:c2:43:a9:a1:29:a9:48:34:
3b:dc:21:19:ea:ee:b4:aa:1c:4c:ad:e4:98:a2:e9:06:f0:21:
fd:7e:5a:bb:cb:b3:99:bc:ca:2f:f4:05:1b:19:42:e6:29:c5:
ac:ea:31:4e:66:7c:fe:c1:4b:2f:25:63:9b:0b:ce:3c:21:89:
7a:59:61:6e:ea:66:88:86:4c:01:1c:63:98:d7:76:39:a2:f1:
a2:71:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:35 2026 by rpki-client