Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
File: JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer (raw, json)
Hash identifier: j2hNHM6hvE5+mWd8MtYYd/v4ho53uNpz4Qy/QIMvxWU=
Subject key identifier: 24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9390FAAD5FABC915D0AB16D09581F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.22.80.0/22
IP: 2a04:1e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:39:0f:aa:d5:fa:bc:91:5d:0a:b1:6d:09:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:97:e9:14:d1:24:b7:7e:45:f2:a3:74:28:
05:9d:e3:60:9d:82:94:15:3c:d8:34:99:e4:3d:61:
59:5f:2a:e0:33:93:70:ec:96:0f:1b:e8:e3:e7:7a:
d7:7f:c3:d8:01:3c:69:fb:e9:95:86:f8:df:02:4e:
cf:c1:2f:c5:03:24:8c:02:ff:c1:2f:37:e2:19:6c:
c9:d1:64:9c:90:41:4f:e3:7a:bf:c7:33:00:28:23:
87:6c:a7:39:52:9a:92:4d:7c:fc:63:24:b8:0c:f3:
9d:07:95:0d:af:d2:ab:07:de:81:f1:d9:63:39:a1:
06:cd:c6:38:8d:9d:7c:b8:96:d0:3c:aa:1a:cf:de:
5a:d8:07:f5:1d:25:73:53:e7:6c:09:aa:80:fb:48:
d0:ad:b1:c4:3a:d8:dd:e0:5b:81:d3:52:18:8f:07:
98:95:a6:b0:53:4a:10:07:99:c4:5b:fc:1d:6d:cc:
74:a9:28:fd:ed:85:d9:05:8c:2f:85:2b:0b:42:e4:
54:9d:0b:8e:7c:9e:23:35:c3:b9:65:ae:f7:6f:7c:
e1:89:43:2d:31:6d:b6:60:45:4e:ef:91:9f:ed:4b:
27:09:d5:00:65:4e:3b:0d:3e:cc:5d:dc:dc:8e:bb:
69:80:13:bb:7e:29:54:20:0c:9a:64:6e:2e:4b:2d:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.80.0/22
IPv6:
2a04:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
73:a0:d9:b7:d9:ba:5f:d5:fa:e9:00:43:6b:6c:c0:50:0f:b0:
03:ed:82:79:9b:6b:f0:da:dd:e8:f4:e0:bb:cc:0a:de:90:4d:
ce:a5:91:23:5a:2c:77:e7:6b:e6:c6:a3:cb:ff:a8:da:16:52:
d2:1a:d1:71:30:90:b3:06:cb:ee:33:e6:34:a8:7e:5e:f8:6d:
b8:4a:a3:d2:85:14:aa:45:1f:8a:6c:48:7b:0f:3c:c9:65:57:
d9:38:34:be:5b:c0:df:36:60:1a:a1:77:84:07:fb:67:de:3f:
c1:cc:54:e3:fe:3c:55:f8:e0:3d:63:85:8c:60:da:6a:96:73:
48:d2:e8:ba:d6:a7:ba:74:32:7f:56:b9:70:a1:ab:28:e3:3c:
85:78:d3:e7:39:26:f9:5c:f0:15:57:17:f7:c1:02:42:fa:57:
33:df:b0:64:04:cc:06:75:2a:a7:31:63:4a:42:45:16:a1:e2:
2d:18:5d:61:84:0c:4b:af:53:c7:53:23:71:51:b3:4a:f5:a5:
6e:72:ac:e7:6e:9f:ab:24:b2:55:23:eb:ca:0a:64:e5:86:78:
3d:79:f6:a6:c6:ae:7a:b7:0f:af:01:b4:8f:fb:31:f8:a2:78:
68:dd:95:a5:dc:6d:99:71:64:17:c6:2b:1b:c2:27:fc:44:58:
f1:64:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:40 2026 by rpki-client