Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
File: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer (raw, json)
Hash identifier: FaUHpsgeAwcr2Vsxf9bBPlUQg5dM5JkFiyflLbg/vh4=
Subject key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA906DA6886200436255CCFE88B14D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.189.208.0/22
IP: 185.251.24.0/24
IP: 2a11:f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:90:6d:a6:88:62:00:43:62:55:cc:fe:88:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:46:a4:ae:76:4c:49:32:94:7c:b4:40:c3:
00:b4:d9:e5:23:8c:7e:9e:74:f7:d6:25:51:c4:e4:
42:2d:3d:e5:68:83:f2:a5:31:21:73:64:01:61:e3:
7a:86:91:a3:fe:b6:04:8c:2c:aa:d2:4e:a7:b3:50:
f0:fa:d3:3c:19:f0:c8:e6:12:1e:cf:92:2d:2f:f9:
f4:d3:4b:2d:a3:88:66:b5:cc:70:a9:76:ea:53:32:
60:b9:9e:00:b3:08:97:0d:90:a8:f8:cf:40:df:37:
b0:ff:16:b9:e3:c2:04:ed:64:d3:e2:79:c6:0a:48:
09:78:dc:13:83:88:26:98:89:c4:b1:64:cb:83:ad:
63:82:04:56:06:b4:90:ed:1d:4b:79:64:b5:b4:e5:
6b:38:64:73:6f:e8:1f:b5:94:11:87:8a:bb:11:95:
a5:b5:e4:69:7f:5f:3f:17:e9:93:34:ca:89:66:88:
ac:ea:e8:2b:b7:34:85:48:ce:51:2b:ad:0f:5c:b6:
d6:5f:92:d8:44:6b:d0:83:d9:4a:9d:b8:3b:5c:87:
56:5b:fc:cc:05:b3:cb:6e:28:71:89:8d:8e:0b:84:
96:9c:fa:50:02:02:09:17:1e:8c:c1:f7:ae:a1:39:
99:50:10:c3:69:ac:56:1a:5b:42:21:a0:b5:f3:fc:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.208.0/22
185.251.24.0/24
IPv6:
2a11:f00::/29
Signature Algorithm: sha256WithRSAEncryption
30:f5:2e:e2:73:34:f5:d0:00:09:1b:b7:8b:45:b3:96:be:3f:
60:14:94:3e:c6:01:1e:c3:a4:0a:cb:72:74:56:83:88:36:59:
eb:40:7b:d6:e2:b4:f7:5e:cd:82:1d:df:01:6d:38:cd:27:3b:
a0:45:a6:53:d8:c4:80:d8:c2:16:c2:00:59:30:13:8b:54:fe:
10:25:5f:60:ad:46:32:1a:44:3c:2d:0f:1f:34:6a:57:cd:5a:
51:78:88:93:3f:2a:75:81:e9:24:c6:72:4d:2b:1d:d5:b4:f9:
1b:ac:c7:c8:9d:95:d9:28:42:1b:3a:53:90:11:10:a6:d7:06:
a5:c6:f3:ca:c3:f4:a2:14:4c:ce:fa:a2:19:bd:95:b6:de:71:
fa:f4:92:c8:87:f1:fd:ea:ec:70:d6:29:ea:d8:67:be:90:45:
78:9a:3f:fd:8d:99:80:33:6d:8d:58:ec:13:33:52:61:b8:2f:
77:7f:b8:dc:1f:80:7a:45:37:0b:af:6f:74:70:0a:76:22:6c:
cb:ab:d6:47:e4:e8:14:6b:8c:4f:ac:ac:ab:95:1d:83:ca:f7:
ef:1a:03:2c:e0:89:b4:26:bf:0f:c9:54:28:22:80:64:3a:4d:
97:c1:eb:76:6c:60:13:04:2f:42:63:cc:00:da:f9:b8:68:e8:
a7:80:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:39 2026 by rpki-client