Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer (raw, json)
Hash identifier: reKLsEwwzD6yOTGg86uwHtafZ/yIWXj3imyfIwU/lhA=
Subject key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EBFC72B362E0F1C83AED26B095A9A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:17:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207056
IP: 185.167.120.0/22
IP: 2a0b:6a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:fc:72:b3:62:e0:f1:c8:3a:ed:26:b0:95:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:19:82:15:da:20:80:e2:1c:19:da:82:9c:
87:46:67:43:cc:a1:32:68:e6:3e:81:5c:7b:d6:c9:
1a:b3:e9:d2:bd:e5:82:6f:61:76:c2:50:09:ae:f5:
61:16:10:97:4b:04:23:53:3d:94:da:bf:f3:9f:4e:
97:6f:60:15:b9:79:c6:7a:94:b6:71:44:10:d0:2c:
eb:a1:72:90:22:21:c3:ab:c4:b0:9f:97:f1:40:1f:
a4:d7:c7:53:d0:b0:80:46:9c:d6:95:75:9c:f8:92:
7f:bd:56:6d:51:e0:75:94:e8:a9:4c:60:1a:b3:89:
63:53:1a:ef:2b:2e:ae:83:b2:2a:68:ff:ee:51:06:
2c:37:b5:91:5c:54:ff:b9:81:91:b9:2a:cd:08:09:
a0:4f:ea:b3:6f:82:db:3d:69:ae:c7:e2:8a:2c:f3:
bd:c5:d3:14:bf:ac:fa:97:fc:72:60:29:e0:13:5f:
6a:2d:e2:48:93:d4:7e:bb:b6:db:e7:03:72:06:12:
25:c3:3a:c3:7a:fc:cd:5b:96:c3:d5:8c:ae:03:08:
3d:52:76:b8:ae:d3:bb:b7:51:a9:d2:73:1b:69:ad:
45:a8:c2:2d:4b:37:75:bc:8e:57:a6:b5:80:c2:76:
28:18:b0:1e:a4:92:cc:f9:ab:1d:f7:b3:fc:d7:4b:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.120.0/22
IPv6:
2a0b:6a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207056
Signature Algorithm: sha256WithRSAEncryption
69:94:2a:d1:e2:96:b9:d7:12:ac:2e:71:75:ee:2d:02:0d:33:
0c:4f:04:0b:9e:3c:46:78:22:d8:59:af:b7:73:4a:36:32:0d:
d7:de:7b:38:97:d9:df:47:75:e1:75:ec:31:c4:3d:10:9d:83:
f3:3f:70:a4:c0:f6:92:6f:89:78:89:29:67:b6:38:75:78:99:
88:0e:38:9a:bc:23:03:76:bc:bb:64:e4:12:0f:ff:af:1a:21:
2a:bd:3c:d0:21:e7:7b:7a:a7:39:67:d7:06:06:18:d3:3d:89:
0f:7f:f6:8f:16:87:0d:7e:c2:d2:c5:d7:e6:85:6e:5e:ca:93:
64:53:76:2f:61:ea:d1:2f:63:1d:39:1e:8d:bb:eb:6a:cb:9e:
b5:b3:d0:35:5e:ef:31:b2:87:ec:07:e0:d6:c3:ca:55:b3:74:
94:8b:72:4d:74:de:76:27:31:70:01:1f:73:25:e6:76:f4:0b:
a1:f1:f6:8b:3f:5c:57:a6:84:31:81:bb:30:ea:52:62:9d:86:
5d:c4:11:fc:7b:04:38:9b:c3:c7:08:84:46:dd:7e:6d:9c:72:
7d:4f:88:73:69:45:9f:ad:35:4a:56:0f:b9:0e:a8:7f:0c:86:
4e:31:b3:4e:39:ca:b0:51:90:d5:1e:51:91:53:7b:1f:78:28:
d6:6c:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:44:49 2026 by rpki-client