Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
File: IPblO2l60mO0uk6kmBQ2aog7VK0.cer (raw, json)
Hash identifier: RWQLBiiCBvoiaYl46mL8bmvMn0IHkmCiZiGEOxm4tTE=
Subject key identifier: 20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834C52389EDD921395BF0C7E9420E1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208727
IP: 2001:678:a8c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c5:23:89:ed:d9:21:39:5b:f0:c7:e9:42:0e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:73:e8:87:d6:16:67:df:85:d9:80:9b:a3:
61:9d:5b:6b:90:41:34:81:40:d6:2e:36:1c:af:bd:
f3:9f:68:00:1b:98:00:95:ba:87:23:e5:05:21:ce:
a1:3f:7a:2b:37:a5:2e:08:2b:91:e4:52:d2:c6:49:
89:d1:9b:49:3e:3e:96:03:6b:39:c5:b3:f4:fd:25:
d1:5d:e6:51:28:63:92:bf:c0:49:20:ea:b2:91:b7:
30:9a:bf:32:e2:21:03:44:76:fb:cd:4f:85:02:00:
7a:e9:72:e1:2b:50:0b:18:85:1d:5d:72:ba:15:7a:
2a:58:c8:76:7f:57:cb:e1:1e:9b:5f:e9:c2:c5:a5:
f6:19:02:b4:5a:82:af:d0:c7:e3:11:7d:7a:e6:65:
e4:6f:95:65:d2:22:dc:19:ea:7b:94:da:0e:f1:7b:
f0:2b:b3:9c:5e:de:37:56:7e:88:e0:9a:5c:78:4f:
9e:21:68:52:69:8a:b1:14:c9:3b:af:c7:0b:1f:c0:
44:aa:45:7e:9e:e5:42:ea:76:35:98:c7:62:f5:b8:
83:76:7e:9d:37:fa:03:af:8f:e1:90:31:b6:81:50:
07:d8:65:89:ee:f9:c7:50:2b:af:93:01:6a:aa:5a:
74:6b:1b:c2:22:57:d3:dd:e5:81:b3:1b:e1:61:0a:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a8c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208727
Signature Algorithm: sha256WithRSAEncryption
3e:6c:ca:cb:41:02:f2:15:e9:f9:bd:2a:1b:92:96:17:c2:8d:
44:01:a0:6d:62:6f:19:ca:70:a6:b5:55:74:7d:d6:92:ea:74:
15:92:64:e7:38:5f:69:29:30:f3:f1:68:73:4f:96:39:77:f2:
e2:da:96:7c:b4:52:a6:ec:32:f0:ed:f0:ae:dc:f6:6a:56:2e:
0c:a9:0e:60:69:93:bd:9a:86:f8:b1:bd:27:94:41:3d:51:45:
ec:e6:c3:a3:46:60:e0:c5:d8:78:28:20:38:c4:88:f4:31:a1:
2e:75:42:21:65:d3:d9:1f:c6:a3:91:d9:54:9c:ed:93:51:b7:
24:e9:e6:83:ce:8b:87:2d:dd:79:b0:bf:38:fc:92:1c:80:60:
58:84:72:9e:50:8d:fa:90:fb:6b:24:32:ae:af:e3:88:15:69:
ab:2e:50:b9:6f:7d:c8:8f:57:2c:04:fc:e5:f8:09:6d:50:7d:
f5:17:d2:01:b4:55:06:c1:5e:5c:9c:a0:f2:85:f5:67:e4:d3:
65:d4:ec:d8:1d:50:57:81:b2:65:9e:fa:12:d5:d3:e1:3b:0c:
6e:90:f8:88:65:7a:5f:e5:d5:60:22:05:e0:48:b2:f5:97:82:
f2:99:91:61:9f:bb:a2:39:29:b0:1b:27:ca:dd:e3:c4:d2:a3:
5f:93:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:16:58 2026 by rpki-client