Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
File: EharzETJqVVAzfWx3FQux9Ef4Ho.cer (raw, json)
Hash identifier: 5GLoIoFgV/acALDi59f8nXIr3ALpl8njkz3MFnKrtS4=
Subject key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F040C1E65B21D119D8D4208956A028B5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 13:08:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210000
IP: 31.41.34.0/24
IP: 85.8.206.0/24
IP: 2a12:3fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:0c:1e:65:b2:1d:11:9d:8d:42:08:95:6a:02:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 13:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:ae:fd:12:63:18:ac:7c:54:af:44:92:77:
b0:f0:19:99:e3:47:8e:a3:62:4c:ae:74:18:f1:df:
7c:22:90:1d:79:37:bd:b5:19:27:f4:35:4b:c4:ec:
d8:90:e8:f1:0e:eb:bc:61:20:b6:a5:62:b8:ae:18:
4e:32:35:6b:58:96:6f:f1:a7:36:94:2d:d3:2f:6d:
69:21:37:cd:bd:7b:48:66:5f:53:5d:da:8c:2f:d6:
f9:f7:17:0b:0f:ec:a9:22:b1:3a:55:a6:7e:d2:30:
d7:06:55:be:01:fa:7c:84:00:39:a2:63:f8:64:ab:
4c:68:38:ee:67:d5:50:f3:d2:87:f3:b8:3d:93:88:
50:b3:52:63:39:4a:e7:5f:05:8b:d2:7d:a8:b3:13:
b0:66:c6:ea:b8:7e:4a:4d:49:90:48:d4:e9:f1:b8:
f9:5a:75:c4:ea:ae:4f:f6:f6:ad:fa:94:76:42:42:
3f:41:b6:97:5f:67:44:ea:ab:2a:7d:8b:9e:33:96:
89:d0:74:08:1f:a8:03:6c:e7:c3:5e:12:07:c2:92:
7d:be:61:36:1d:bf:88:52:15:b1:09:12:87:d8:1c:
85:a7:c5:34:e0:22:77:44:16:da:33:6b:13:40:14:
a0:be:aa:01:0a:ba:c9:83:af:42:1c:e0:36:db:62:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
85.8.206.0/24
IPv6:
2a12:3fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210000
Signature Algorithm: sha256WithRSAEncryption
49:e2:39:c8:22:4f:4a:5a:dc:51:3d:07:81:32:cb:fa:b5:78:
83:34:e6:35:46:d2:b1:c3:7c:2e:18:51:0b:fe:65:44:55:70:
23:40:37:fd:67:e3:95:26:27:9c:2a:e4:43:78:ba:10:a1:74:
78:57:9d:03:60:bb:e0:75:84:b2:4a:00:be:46:68:25:80:6b:
bf:e0:d4:f3:77:fa:fa:1e:c8:c9:aa:ac:f1:47:33:c5:f6:16:
c6:74:a7:aa:75:20:27:7f:aa:38:97:c4:d1:c6:be:3c:d1:b7:
fd:ad:2c:89:4b:13:26:84:f8:03:57:19:e8:dc:5e:77:b0:27:
7d:fd:59:9e:73:30:b9:e2:42:ae:ef:76:c4:e7:9c:99:24:78:
8b:cd:22:fb:0c:58:1f:b1:b1:60:d4:b3:a2:39:1b:eb:ba:1b:
38:7a:4c:5a:37:c0:81:17:8c:21:ea:6d:5e:85:ea:e2:a8:af:
a8:0d:0b:1e:17:d3:6c:54:f7:dd:da:24:3a:b3:ee:a6:c8:a1:
7d:d5:cc:79:b0:7d:88:8e:5a:1b:a1:55:d1:1c:0b:a1:70:89:
b0:8b:9e:b4:f3:95:9d:15:fc:50:b7:0e:1c:19:97:fa:3a:b1:
64:e0:61:1f:48:57:63:bf:3a:fd:23:5c:fa:62:61:f0:01:04:
53:0d:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:56:01 2026 by rpki-client