Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
File: IcABb7bLY4np0FbTkmLrRS-ZO9g.cer (raw, json)
Hash identifier: i5JYx1IlLHtS8huG40CAR+QNmpptdN3yFrC0DVXaA8s=
Subject key identifier: 21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE64AD8BDCC06A95DD5774D7F17FC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 9157
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:64:ad:8b:dc:c0:6a:95:dd:57:74:d7:f1:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c0016fb6cb6389e9d056d39262eb452f993bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:3e:ce:d0:07:46:71:a0:b1:20:59:64:87:
b8:af:68:66:fd:19:08:dc:66:54:e5:c3:2f:bc:c8:
74:eb:12:e9:31:79:5e:33:9a:19:64:b5:0b:28:e5:
56:71:05:9e:cc:4e:fc:6f:bc:7f:8d:b5:82:c0:2a:
59:06:72:58:63:96:bc:9b:14:a2:9b:5e:21:f5:2e:
75:ca:ba:3f:82:88:ec:5f:f4:01:61:84:6b:9a:d4:
af:4c:dd:4d:c6:d9:01:7e:60:2e:74:b8:93:61:dc:
01:de:1e:d5:c2:0f:08:1d:f3:5f:df:d4:7f:60:59:
4a:5f:89:78:89:71:d1:f7:b1:e0:55:2e:fc:c1:0d:
9d:39:e8:3a:32:e4:fb:04:ae:87:09:99:7a:9d:9a:
8c:35:2b:1c:d5:fb:5f:e3:2c:b2:45:c8:3d:0c:c5:
fa:79:4d:ea:9c:38:76:01:f3:93:17:62:41:87:dc:
2d:e7:b3:65:50:c6:ef:f0:a4:bb:ab:13:ce:87:03:
a6:f7:83:e7:e7:5f:dd:bc:34:61:e6:b9:bc:dd:00:
40:f3:f8:54:52:b4:f2:f3:e3:d1:03:58:8f:5e:e5:
f3:bc:f6:71:4a:bc:1b:1b:b2:05:27:cc:ab:ae:09:
e1:54:86:9c:e1:cc:c3:8c:55:5e:67:5f:7d:59:6f:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9157
Signature Algorithm: sha256WithRSAEncryption
3a:35:6a:77:ca:3a:91:5c:b7:71:fa:7b:29:6e:3d:48:fa:cc:
a6:b6:7d:3a:f9:e5:25:05:f9:88:ec:5b:1f:d9:99:a8:c2:e8:
ab:29:94:a8:a3:07:e4:e5:80:b4:0d:c6:02:4b:86:b7:91:2d:
a5:ef:a5:84:cf:e5:13:36:8a:99:68:35:15:48:c9:d4:8a:3b:
fc:c7:e1:95:c3:33:58:8e:a8:1c:16:7d:af:4d:ea:98:a0:66:
5c:7a:57:ee:d7:56:51:53:19:f0:e6:f1:5c:5d:0c:a1:9d:0d:
84:63:40:70:f4:3d:cd:10:32:48:11:48:1c:6c:45:7c:09:3c:
ec:33:4a:7e:fe:17:38:26:88:c2:e5:c3:ae:4b:5c:75:0c:74:
a3:52:ef:c8:e5:d7:c7:47:93:45:a3:51:bd:f0:ef:46:fe:e3:
41:20:17:be:60:1f:74:30:72:86:06:c4:e8:dd:93:50:6c:c0:
42:0a:27:fc:c2:1c:7c:6e:6a:ed:9e:3f:ba:59:8b:e6:a8:aa:
2c:85:07:5b:28:a9:ef:8a:b9:48:47:b2:62:68:95:55:12:40:
70:06:2a:50:08:10:67:1c:54:02:85:1b:d2:d9:bc:3c:8f:a1:
68:aa:18:06:5d:a0:f9:b6:d0:d4:7f:90:91:38:de:1a:6a:8a:
d2:f4:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:27 2026 by rpki-client