Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.cer (raw, json)
Hash identifier: QJ8IoeN8XIhhnVKm3wgqAOUTpVl5GXGHx+FYHNKbyxA=
Subject key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A024345F67E3D3515330F8115ECE9F7198
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Aug 2026 12:03:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56325
AS: 207279
IP: 45.143.99.0/24
IP: 131.222.130.0/24
IP: 131.222.194.0/24
IP: 193.38.34.0/24
IP: 2a12:aac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:34:5f:67:e3:d3:51:53:30:f8:11:5e:ce:9f:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 12:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:23:6f:60:00:a0:99:63:03:c5:cd:f5:68:
bd:b8:25:88:0f:b2:0b:a0:6e:37:bb:69:37:67:21:
dc:8b:07:96:76:c9:06:70:e1:3a:ee:2e:31:92:29:
6b:7e:9e:c0:4a:d5:57:53:3e:ff:e5:51:c7:60:03:
ef:ec:18:1e:e9:8e:b1:cf:fb:bb:70:42:81:35:af:
c3:ac:4a:5b:61:2e:d4:28:de:58:37:8d:1e:ce:6d:
8e:58:e5:ee:8c:ae:81:33:3b:c3:d3:95:2e:f7:c5:
1b:d5:05:18:9c:35:b2:f2:b4:e2:31:d3:30:61:df:
29:73:3f:64:bc:f6:cb:28:72:0c:94:f6:4f:c8:e8:
4b:ae:08:79:81:15:b2:6f:15:7f:01:30:78:e3:d6:
87:1c:bd:f9:88:fe:ff:f2:23:38:59:cf:b9:28:f4:
71:b0:80:33:5b:b2:9a:53:50:ea:d0:cf:68:d0:49:
da:ad:8e:55:89:6a:87:3b:c2:db:6a:07:4e:fb:f8:
be:c3:78:f5:b0:3b:48:3e:47:ce:c3:8f:f2:d0:dd:
2d:93:95:19:a4:20:63:f3:0b:10:4d:3d:c6:3f:d6:
00:75:c1:b7:e1:00:d7:df:95:e9:9b:83:e5:4a:68:
4c:18:ce:c3:27:5e:fe:46:25:5c:0f:f3:eb:6f:57:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
131.222.130.0/24
131.222.194.0/24
193.38.34.0/24
IPv6:
2a12:aac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56325
207279
Signature Algorithm: sha256WithRSAEncryption
92:73:a6:c2:6b:ac:38:81:48:17:cc:1d:6a:09:03:8b:59:a3:
c7:73:f8:ce:df:59:38:25:28:e4:dc:7e:37:71:47:80:31:ea:
e7:4d:ad:dd:3f:e5:13:bb:71:eb:97:5b:6f:dc:69:cd:23:e0:
0b:a6:76:27:12:1f:42:ed:7e:9a:59:25:ea:b0:fd:31:1e:ef:
66:d8:ec:a0:f8:47:ec:4a:f9:12:82:be:5e:36:33:aa:fc:17:
fe:b6:5a:c7:35:08:7c:fd:e8:d1:00:85:8f:97:f7:7f:c2:2e:
0c:0e:20:62:a4:7d:30:eb:8c:74:a8:ae:71:90:61:a5:77:2b:
f3:19:92:6a:b9:8a:d4:7b:4b:29:5d:10:25:20:92:b3:eb:71:
16:d0:c8:b7:5b:52:a0:54:4b:b5:ca:8f:fc:8d:3c:c9:9f:34:
a0:eb:76:83:c5:eb:17:05:fc:5b:32:a5:c3:93:43:f2:5c:35:
c7:fa:b2:31:2b:1c:26:97:08:dc:08:40:f4:6b:37:eb:78:f7:
33:75:ff:5f:78:6b:dc:1b:75:61:74:c3:86:d0:a0:eb:09:4c:
12:b0:3b:a0:fa:80:10:a5:0b:73:df:79:4b:5c:37:98:3e:13:
e2:3e:c7:61:c6:a7:e8:f3:0d:07:97:fb:1c:7e:a2:35:71:77:
68:17:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:32 2026 by rpki-client