Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer (raw, json)
Hash identifier: WvULEhqmIeALkL27EHPbgmhKJHVtWlba1A6aWsr/cXw=
Subject key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77595EB8A985180E654D8ADAF0C5B0EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209390
IP: 185.108.64.0/22
IP: 2a06:6280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:5e:b8:a9:85:18:0e:65:4d:8a:da:f0:c5:b0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:08:b7:9b:06:8a:08:ca:50:0c:b2:b3:27:
3c:6f:66:6a:9c:29:cb:a7:46:40:e7:1a:9f:4d:f0:
e7:81:66:92:89:57:b6:c7:5f:9d:43:75:df:28:ee:
73:2f:c7:11:2b:a0:28:cb:9d:56:93:89:cd:8c:b4:
a4:4f:f3:d5:63:4a:45:cb:42:f7:de:46:ec:4d:5d:
38:1a:5a:fb:ae:08:72:a4:6e:5c:24:db:48:46:28:
fc:a6:f5:2d:80:1f:8a:f8:67:38:07:15:43:06:8a:
e3:12:85:e7:ef:de:17:6d:a7:42:fa:a1:a8:e1:fb:
2e:76:10:59:78:4a:0d:bf:a8:8e:d0:6d:19:ca:54:
ad:ea:f6:9c:e6:69:a5:15:65:af:11:76:27:b6:97:
c8:b3:c5:20:6a:4b:20:9e:45:0d:6f:85:a5:01:26:
82:c6:65:3a:56:9d:39:74:e4:a4:03:0a:98:2a:88:
df:a6:4e:d5:59:12:c8:c1:8a:8f:89:94:a5:a3:ed:
60:50:64:95:63:ca:44:bf:b6:55:48:ed:a2:15:18:
7c:c6:64:e2:45:18:40:0c:8e:6f:f5:a5:a2:56:bb:
40:92:88:e3:92:5a:0d:30:38:14:ca:40:3c:9a:e2:
8a:40:11:fb:fc:2a:d4:db:97:79:82:c3:4d:a6:45:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209390
Signature Algorithm: sha256WithRSAEncryption
a6:ba:99:e4:b3:a9:66:33:f8:a5:2c:da:6a:64:eb:98:c8:4c:
e1:15:ac:76:9d:d3:62:1f:31:e8:5f:81:fb:7f:95:9a:ba:c6:
e9:f9:f1:0c:db:18:6f:0d:a0:1c:04:60:48:96:67:7f:a2:0f:
ab:09:ed:97:e6:b3:c8:37:ab:ab:7e:c0:d3:b1:11:0a:66:36:
60:6d:fa:7b:a6:6a:5d:f6:c8:48:50:09:fc:95:3c:50:cf:02:
65:1b:7d:dc:e9:03:b9:9c:69:79:65:bd:f0:70:c6:81:9b:73:
90:ab:96:28:62:eb:12:2c:df:2b:53:4f:3f:b1:cc:bf:2d:cf:
c1:3c:46:49:47:62:ba:b9:91:39:46:05:c4:e7:b8:71:f9:79:
e8:b3:64:97:b9:cf:2b:51:e7:71:2f:27:3e:c8:1e:95:bd:b7:
16:53:7b:ec:6d:e1:03:d9:01:41:b9:2c:5a:6e:f4:d2:24:5c:
11:87:14:a3:5d:e1:6a:48:be:db:9f:41:40:0a:24:bb:28:7c:
3f:96:05:45:66:b9:95:ef:b0:89:03:db:03:4a:41:c1:54:60:
43:b4:bd:23:5d:4f:02:cf:6f:63:aa:bb:60:dc:08:58:cd:15:
88:e2:5a:0e:0b:0b:1e:51:6b:8f:cc:3b:ca:df:53:f8:ee:04:
5e:97:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:06 2026 by rpki-client