Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IhQgnik48W3KWTVwH6aG2Q_De54.cer
File: IhQgnik48W3KWTVwH6aG2Q_De54.cer (raw, json)
Hash identifier: 3i2CXk6g6c4uxwt14dMXzhW4xp2NoFLy492kAzZkbYw=
Subject key identifier: 22:14:20:9E:29:38:F1:6D:CA:59:35:70:1F:A6:86:D9:0F:C3:7B:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCACD98F6D19B5562213B315266A72E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:20:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12726
IP: 193.254.30.0/23
IP: 195.149.122.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:cd:98:f6:d1:9b:55:62:21:3b:31:52:66:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:20:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2214209e2938f16dca5935701fa686d90fc37b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:ed:2b:e0:82:17:9a:3d:d5:39:87:cd:49:
99:9b:d0:72:7b:6b:12:79:1d:91:f1:e3:65:df:b5:
88:f6:f3:14:20:c5:bf:30:be:df:b6:38:ac:6a:b9:
e0:65:42:e4:76:b0:7e:66:08:9a:17:a7:d4:6c:73:
2c:2d:ae:b8:50:81:39:13:2e:dc:ba:e9:e2:f2:79:
10:dc:37:a4:16:b6:e7:c5:5b:0c:bd:f2:b4:5a:d8:
9c:ca:2a:c6:7a:e2:81:c7:6e:9b:6c:f4:13:fa:ee:
63:6f:6b:58:29:97:f5:ca:2a:74:4d:f1:0a:52:97:
ec:81:97:44:41:99:af:87:2e:b9:2d:52:6f:ef:b9:
a5:a6:9f:0e:74:0e:4c:dd:ad:7e:6b:ec:b1:e1:bb:
ad:52:99:93:10:5e:c3:46:b4:d3:b4:88:47:6c:e5:
d4:b5:ea:df:5f:3f:0a:72:aa:be:c4:84:07:d1:a6:
53:6a:6c:2f:1c:85:96:6e:4e:fa:a2:56:3a:5d:a0:
5f:87:cf:88:9e:b3:23:d0:06:e4:b8:c1:41:c1:e8:
c8:7d:5b:45:46:3d:ff:f0:a1:53:71:8d:0a:0e:03:
a2:c1:c4:de:80:79:f5:0b:74:cd:00:30:13:5f:83:
d2:51:15:45:d8:bf:b6:d1:3a:07:0a:07:ae:b3:60:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:20:9E:29:38:F1:6D:CA:59:35:70:1F:A6:86:D9:0F:C3:7B:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.30.0/23
195.149.122.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12726
Signature Algorithm: sha256WithRSAEncryption
9a:0e:bd:6f:3e:b3:8e:ba:63:5f:65:6d:2e:4e:03:a1:db:ef:
e7:2e:a5:c2:f6:a0:02:13:10:f4:15:56:38:a1:b7:9a:dd:11:
77:29:09:f7:a5:f6:54:4d:75:2c:36:e7:bc:64:c4:2e:ee:bc:
e9:bd:6d:eb:b5:3f:3e:17:23:9d:2f:bd:f0:6a:30:4a:e0:9d:
e2:bc:7b:c8:6d:1e:fd:c1:2a:c6:c3:84:0e:a1:4b:72:0f:37:
a3:41:f8:9c:52:3b:24:a1:d7:3a:6e:55:ab:bd:eb:f5:9b:25:
e8:8b:c6:65:6b:e1:84:ae:2c:6c:f1:ad:e9:60:cf:b8:26:4c:
e3:88:aa:22:4b:bb:bb:6d:03:31:28:66:bf:ae:d5:09:a0:43:
6c:65:3a:8e:eb:e3:e6:62:ca:fd:e4:70:4a:cb:3a:69:ac:2e:
08:f5:40:4a:af:e3:dc:95:3b:be:18:be:f8:a8:6e:fb:a4:9b:
e8:a3:8c:19:78:b7:95:99:86:9d:d0:75:c7:03:c5:55:eb:82:
ac:f1:f7:47:17:9d:50:50:8f:12:e0:4c:25:9e:ca:28:d2:88:
3e:bb:fd:25:bc:22:00:01:89:f7:b9:64:1b:e4:67:da:53:3d:
3e:60:1c:e7:ea:25:0e:ef:7b:db:80:1b:18:86:02:f7:9d:bb:
3b:26:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:31 2026 by rpki-client