Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
File: IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer (raw, json)
Hash identifier: yxPB7u4b7yyBZMLti/EGCkUBqwOrQYFnyywxx4ZOn6E=
Subject key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBB86E4F01D096398E80F8ACBFCF46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.105.153.0/24
IP: 2a14:ba00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:b8:6e:4f:01:d0:96:39:8e:80:f8:ac:bf:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:46:2a:02:8b:a9:0c:7a:db:92:3e:fb:52:
71:c3:f8:c2:ba:a8:3b:ca:dc:ef:98:38:bc:77:83:
f8:f1:88:0a:04:40:11:14:3a:83:5f:70:07:0c:8d:
a2:0a:30:c1:9d:e2:1a:48:ab:59:af:62:d9:93:a0:
61:31:05:fd:22:88:2a:84:e6:d0:21:4e:b7:53:0d:
eb:69:57:7e:39:0a:15:55:8b:63:00:69:a6:ae:e5:
1c:6a:4f:b8:ae:ef:88:d1:1b:1e:54:22:23:4d:5b:
0c:a9:1d:93:5f:e6:1b:73:73:94:88:26:ac:ed:a9:
89:55:11:81:72:8d:42:8c:11:b9:09:7b:2c:84:ff:
54:51:d5:45:f2:5a:06:6b:83:62:fb:04:78:31:ff:
f3:db:23:23:7e:2c:a4:82:67:81:21:e7:0c:64:28:
a7:bb:07:d6:ea:4f:63:ca:86:40:70:e2:ac:a8:73:
a1:dd:63:40:ad:22:16:c6:8f:17:c6:d2:f3:de:99:
82:8a:67:f6:94:9f:02:d5:d4:18:24:e7:49:df:f3:
f6:b7:ec:61:71:c0:ae:d1:95:95:b1:94:5c:a6:71:
bd:9c:0e:5a:ac:ae:31:e5:a5:25:02:02:6e:7f:6b:
ae:70:c8:d5:94:73:4b:3f:f5:ee:a4:70:e0:f0:4e:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.153.0/24
IPv6:
2a14:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
2f:62:34:97:2e:8d:b5:cc:d3:a4:f9:9f:cf:02:88:13:16:33:
af:94:8a:fe:da:68:cd:6f:bb:4b:d8:ce:22:38:c4:b9:bb:c2:
cc:34:54:28:00:22:94:92:a1:25:3a:6a:f2:7b:e4:8b:4f:f8:
d5:2c:92:5d:a9:54:6e:87:a2:3c:b5:34:ec:eb:b0:31:d5:99:
94:cf:45:fd:3a:1e:7d:c9:30:77:72:58:bd:0c:45:5f:07:c7:
8b:97:7a:3d:68:d9:4c:f4:f3:d2:b4:79:2b:44:f0:0d:ce:7c:
24:a7:70:fe:36:94:6f:eb:bd:6d:bb:7c:68:8a:ae:ad:d0:02:
5d:0e:6d:45:9c:83:8f:00:ce:c0:96:a8:1c:8a:8c:f9:52:b5:
ba:a7:92:14:b2:a0:03:a2:f9:96:68:f7:73:ca:a1:30:83:d4:
f5:41:e5:3d:7f:d2:34:dc:54:33:d9:70:d2:28:d0:d7:a5:bc:
7d:3e:22:a8:ca:e2:72:5f:50:cd:8c:62:04:3b:49:a1:35:d0:
fe:d9:89:86:db:55:93:c0:3d:90:d4:d7:73:a4:e3:03:ac:51:
9b:9d:c4:04:e0:4b:91:09:f1:12:46:a9:67:ae:45:2e:40:66:
68:06:11:68:2e:08:85:76:73:5f:e2:e3:64:c4:0c:c7:b0:83:
9c:c0:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:37 2026 by rpki-client