Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.cer (raw, json)
Hash identifier: q+94SLBed8yfK9+NCO8bFXCOxfQUFZk/d5eMwWxXi3k=
Subject key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6D3E5260B36D70017EEFAC25D420F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.183.104.0/22
IP: 45.92.252.0/22
IP: 193.23.164.0/23
IP: 193.23.246.0/23
IP: 2a0e:c400::/29
IP: 2a0f:d4c0::/29
IP: 2a10:a080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:d3:e5:26:0b:36:d7:00:17:ee:fa:c2:5d:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:d0:ec:b5:6c:b2:81:11:60:0f:5a:b0:c2:
f3:34:e6:d1:6b:97:86:a4:4d:0f:47:c0:99:8f:54:
a4:fe:ca:cd:80:fe:2e:86:f7:ea:ca:0f:91:80:fe:
91:ea:c0:25:6b:81:e3:c8:61:03:f7:10:de:79:71:
8f:1d:1e:ed:54:32:69:da:78:d3:7d:78:25:c1:11:
87:1a:fe:35:be:5c:3c:05:13:9d:11:a6:89:3a:36:
c5:45:f1:2e:06:dc:d9:61:31:50:6a:5e:c8:13:78:
1e:c6:67:0f:96:87:89:ee:94:bd:67:12:73:e4:24:
d8:6e:ba:6e:7e:8a:42:66:42:4b:94:7c:19:d4:82:
eb:8f:f7:09:a6:cf:7c:b5:b3:b9:f8:5c:b2:f2:39:
0f:fe:35:81:34:95:e1:3a:b0:1c:16:38:d8:db:a6:
0b:a4:e2:25:ea:9d:13:a8:b9:82:94:95:4c:08:ef:
fe:23:1e:8f:b0:24:58:d4:6a:fc:17:69:f9:aa:4f:
ba:33:60:93:f9:bb:5c:cf:fc:6a:1c:8a:e2:ef:5b:
2d:db:de:c8:cc:21:1c:d0:7c:87:8f:dc:12:f5:8e:
fe:50:12:a1:c2:d9:f5:f0:87:de:15:a2:b2:83:36:
c0:31:df:7f:de:66:21:6a:e0:f8:1d:33:71:37:c8:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.104.0/22
45.92.252.0/22
193.23.164.0/23
193.23.246.0/23
IPv6:
2a0e:c400::/29
2a0f:d4c0::/29
2a10:a080::/29
Signature Algorithm: sha256WithRSAEncryption
69:7e:bb:a7:25:a7:d4:25:7e:02:14:2d:3f:dc:a1:ca:cf:e0:
e9:ab:99:b6:d4:46:71:b5:9e:79:5a:92:96:7a:fc:c1:d6:cf:
ef:ad:31:7c:15:e1:9f:68:f1:26:80:06:e8:95:a2:e9:09:46:
9e:46:17:7c:46:16:80:23:e2:63:a3:48:ee:d0:54:e8:41:3f:
4c:0e:6e:80:61:71:54:7f:ea:7b:cc:8e:74:d5:ce:09:b1:f8:
cf:3d:9d:6d:90:5f:57:34:47:ea:61:8f:f1:30:2e:f7:38:7e:
13:2c:05:a4:83:82:82:39:1a:72:a3:c8:4b:87:7c:4f:75:c1:
58:43:e4:c6:10:4f:55:e1:1c:9d:38:5d:20:3e:03:91:93:5b:
9c:fa:57:49:56:48:f4:72:2b:da:b6:b2:ce:9c:14:42:c7:cc:
89:d7:c5:b5:75:24:3f:31:54:88:10:40:c8:9f:61:32:c2:97:
97:d3:e2:1a:49:81:9e:f0:d4:86:fe:cf:92:97:f4:c3:d4:55:
93:f6:e6:cb:3b:6e:93:2c:da:8b:7a:fb:b7:49:63:01:d9:85:
69:14:b8:bb:9f:60:13:f2:50:47:10:20:eb:a7:3e:d2:76:53:
2d:c3:c0:e2:b4:0b:b4:d3:c0:fc:a9:6c:d2:ed:5a:c3:1d:91:
94:dc:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:03:13 2026 by rpki-client