Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
File: IJ2ng837PLbZvILBktbXKrtKM20.cer (raw, json)
Hash identifier: 1bU8rfq99Y3tj3cw5DAoR0szTY6RDAuaqE8lG0iAQjI=
Subject key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF67C97E2BF85EA7020B99E36D6C3B6AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 11:51:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62317
IP: 185.40.132.0/22
IP: 185.66.76.0/22
IP: 185.69.200.0/22
IP: 212.47.53.0/24
IP: 2a01:4b20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:7c:97:e2:bf:85:ea:70:20:b9:9e:36:d6:c3:b6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 11:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:08:98:bd:c3:15:d5:f5:6c:92:a9:be:79:
dc:a4:71:d5:73:38:5d:71:f7:2c:0b:79:63:8d:1d:
3b:f1:5f:fe:09:47:ed:60:6a:e6:13:ae:02:0a:fd:
db:b7:a3:b0:5f:48:52:cf:7f:ac:5c:71:a2:fa:71:
8c:f1:bf:eb:f2:b5:89:3f:94:d1:72:f1:37:a9:5f:
2b:35:a5:6d:f3:7c:06:14:19:80:ad:2f:3f:73:06:
b5:9a:b8:97:77:40:79:4b:30:ad:4a:d9:65:fd:97:
8a:8a:6c:03:13:2d:c0:86:08:e9:6b:81:9f:ea:72:
0d:c4:fc:25:38:95:71:b5:1a:a3:f6:d4:a0:e0:aa:
dc:a9:c7:45:19:88:63:62:bd:54:8b:60:e2:10:7e:
99:fc:21:2c:bd:8f:9e:e0:b2:93:27:24:53:1b:1b:
02:22:dd:34:00:a2:08:1a:df:f5:ea:c7:b9:b4:56:
d6:40:14:40:87:08:e3:7a:83:fe:76:9e:5e:db:41:
e5:bf:44:e1:69:ea:2b:8a:d8:78:f2:c2:0c:94:7d:
1b:9d:87:01:3c:c2:b8:c0:ac:b4:c6:45:20:eb:86:
9f:6c:25:55:8f:fe:a8:cd:4d:cd:db:74:3a:ec:24:
65:a9:d1:d9:3c:e5:5b:41:72:43:eb:53:09:96:22:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.132.0/22
185.66.76.0/22
185.69.200.0/22
212.47.53.0/24
IPv6:
2a01:4b20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62317
Signature Algorithm: sha256WithRSAEncryption
53:ba:0b:4d:57:ff:b4:42:0f:7b:9c:3a:78:47:b7:12:e9:08:
aa:97:7e:c4:bd:60:31:7e:54:a6:36:0b:d4:c4:fd:d7:12:d3:
97:78:fe:fb:29:c2:5a:62:09:ec:f4:eb:22:29:bd:2a:6d:22:
94:1f:bf:19:0f:1b:22:99:41:46:cd:29:07:88:27:51:77:65:
37:cf:19:90:17:22:ac:f0:e3:af:2e:1a:c2:54:81:fd:a0:1e:
b9:10:8c:6e:27:58:5a:7b:31:3b:5e:87:c1:75:ea:f9:23:23:
57:61:fb:85:0a:f4:99:b0:ce:84:00:18:85:00:89:27:56:26:
86:24:ec:34:7d:a3:8b:11:b8:25:d7:17:17:6f:9d:43:62:39:
ec:ce:bc:cf:fa:19:53:4b:77:46:1c:c5:e7:cd:00:2e:9d:84:
5b:9c:71:e5:08:7d:2b:73:13:ec:94:50:8b:ab:56:86:1d:8a:
f1:ba:e6:5e:37:73:a2:f3:13:09:e3:a8:a3:7d:a9:2f:37:ad:
e4:62:72:c3:79:3a:39:c3:b8:36:4c:71:5f:6a:65:93:8e:83:
30:02:c3:9e:29:fd:71:78:74:03:ba:d0:2b:7b:c0:7e:f6:85:
dc:0b:98:c4:98:f1:41:5a:94:e4:40:45:f7:c3:99:7a:d9:61:
a7:e1:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:19 2026 by rpki-client