Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
File: HWtralBhpBFdUwQM_9xks7DXGng.cer (raw, json)
Hash identifier: UG7cthcrcM+rRV0FVSnuWjTv16vmRVE7or9/8ECoUcw=
Subject key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B36722C1D749A9DD8FA89156EB23249
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200706
IP: 185.88.16.0/22
IP: 2a05:c800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:72:2c:1d:74:9a:9d:d8:fa:89:15:6e:b2:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:3c:64:49:ee:58:d5:5c:ba:02:d4:c0:02:
47:9a:81:92:25:65:15:9b:1e:08:a3:af:59:39:6a:
6e:b5:24:c6:eb:88:9c:6f:54:1b:e1:66:8a:c3:55:
f1:4e:87:08:9a:13:f7:1f:fd:d7:1c:4c:4a:3a:66:
95:e2:a2:7c:ec:d7:85:c8:29:ef:d4:54:1e:f8:5c:
a5:c4:51:56:58:8a:73:8b:b2:78:51:b5:4b:d6:f9:
74:87:af:d3:d0:ce:26:d7:c3:7c:9c:6f:01:d5:b0:
37:7d:86:f5:30:c6:8d:60:cc:0d:c0:47:c3:a1:2c:
60:6a:e2:ab:9c:3f:6f:26:82:68:7f:f8:55:29:00:
9b:6a:2f:99:70:88:9c:c9:d3:9a:41:08:80:18:96:
70:9a:f4:38:34:e1:4c:16:6c:b6:e8:b0:fd:dd:c7:
de:11:95:9d:37:16:91:ad:21:10:ec:32:d8:4b:5c:
af:76:49:60:df:e0:80:32:56:ab:26:e9:39:c2:f7:
8e:46:2b:10:df:58:8b:12:f4:ad:86:aa:0e:68:7c:
94:9d:dc:79:89:0b:4e:56:aa:bc:cd:9c:7a:4f:fa:
50:fb:2c:ff:4f:6e:fa:91:6b:d0:db:dc:47:1f:3f:
91:db:fe:0e:4a:f0:d6:d7:a4:d2:2c:77:6a:ed:82:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.16.0/22
IPv6:
2a05:c800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200706
Signature Algorithm: sha256WithRSAEncryption
78:0f:7d:ea:39:8b:6f:bc:e7:a0:54:11:41:dd:d8:2f:de:0f:
5f:3d:be:b4:82:e7:bd:99:af:de:80:0d:bf:6b:a7:57:5b:31:
14:63:70:2f:49:5a:43:5a:c1:2c:96:e3:13:1d:91:40:de:bb:
d0:b7:4f:63:98:44:66:5b:5c:fe:f2:a8:48:ee:3e:b7:91:21:
3a:ba:e5:46:5e:41:f6:6d:4c:5d:f9:f6:b3:18:d4:9e:83:d7:
91:1d:3d:d6:da:68:54:a1:87:21:9c:58:e7:cc:77:23:4d:9f:
e8:4e:23:53:4c:14:66:b2:28:6c:c7:c7:18:32:39:ba:ee:2e:
35:50:b1:56:f5:83:ab:7d:5e:e5:8d:48:5a:eb:5b:8a:32:29:
33:5d:2e:1e:79:95:75:45:d9:d9:9b:6f:12:18:73:a8:0d:a3:
e1:91:e6:e9:ef:f8:38:1c:4e:82:b6:2c:2d:d1:84:35:fc:7a:
5e:c0:f6:52:1f:11:bb:7c:41:b8:3c:fa:7e:ba:25:b5:9b:db:
81:19:64:dc:49:44:ce:32:1a:2c:9b:25:8f:d6:8a:7c:bf:c1:
a6:59:71:89:3b:8e:49:e5:13:18:1a:b8:7e:ae:e2:69:62:c4:
79:b6:f5:c8:ab:0d:31:27:20:d7:f4:52:35:c0:1c:31:ed:c2:
3e:94:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:54 2026 by rpki-client