Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
File: KgE0Z2uONx1E752Fh_3NKzuYfKE.cer (raw, json)
Hash identifier: p5RuuQwRYwRIL0tIRmSocOcTgccvpPUajJdwhnX0X5w=
Subject key identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCB415A7CB8C93964C5CD8E89C0B56A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:20:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12754
IP: 188.225.128.0/17
IP: 2a00:4e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:41:5a:7c:b8:c9:39:64:c5:cd:8e:89:c0:b5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:69:55:04:14:b5:6f:5f:37:4e:68:48:d8:
ab:e6:b4:53:f3:07:c8:fd:83:1d:34:25:fe:9e:cf:
8d:5d:2b:ef:d7:2e:3c:2c:21:cd:c4:9f:63:14:dc:
be:31:9a:62:5c:b6:c7:ab:5f:8c:1f:7a:03:9f:24:
b7:5a:8f:ea:3c:64:74:32:e4:ba:f6:b2:d4:2d:48:
50:c1:d6:ca:e7:f5:57:ac:f2:60:a1:33:a4:8a:19:
97:96:85:19:c8:ed:0d:a3:1b:e8:e6:53:5e:f2:64:
df:94:ac:e9:c6:4b:85:16:37:20:18:a0:af:f1:b6:
4c:c0:85:24:6c:6d:09:ca:85:cd:35:9d:38:f5:41:
3a:7c:da:3d:14:f7:1d:4b:c7:80:da:5c:22:49:be:
f9:fe:9a:ca:0d:bb:db:6c:42:47:ae:6c:c7:eb:67:
8e:81:c5:d0:10:4f:72:d4:c4:4c:1c:96:2c:66:81:
8d:c3:a6:17:96:df:a5:78:6f:b3:9b:64:6d:ae:d3:
b4:37:96:0e:d0:07:fc:36:4e:80:a4:09:20:b5:67:
21:79:50:2c:43:8c:88:19:52:b1:da:2f:1d:74:d4:
05:31:75:bd:77:12:19:81:c3:8f:a1:68:96:41:ce:
29:4d:13:63:f6:b1:b4:d8:84:80:12:e6:67:70:c6:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.225.128.0/17
IPv6:
2a00:4e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12754
Signature Algorithm: sha256WithRSAEncryption
00:93:54:90:f8:af:5e:2d:66:86:b0:18:61:ec:5a:a6:49:75:
8e:2c:5c:85:0c:9d:d5:44:02:88:2d:50:a7:f0:bf:bf:32:07:
7a:f4:f5:b3:f4:ad:14:30:77:5d:ef:6f:06:ce:0f:63:f0:cd:
be:1d:67:50:d6:30:02:63:d5:f9:9d:55:53:08:17:be:a9:2a:
c8:07:a9:d5:85:e4:12:53:67:1a:16:e7:f5:91:ac:5c:0e:54:
9a:fc:3e:8d:1d:12:10:39:b6:c1:aa:a4:29:b9:b8:b4:6b:cb:
9d:18:54:70:09:b2:8a:0e:a4:43:60:b2:22:b6:0a:b6:2b:a4:
c3:6f:a9:29:3a:db:da:b7:e6:27:0e:5b:28:28:42:c1:4a:49:
72:44:6b:fa:72:15:cd:d3:a8:96:76:3f:dd:42:28:40:53:57:
12:fa:d5:8a:d6:46:51:10:89:ae:51:c2:01:1b:20:0d:89:aa:
c0:26:d2:54:0b:2f:4f:09:91:b4:1d:b9:e7:10:a1:91:f5:15:
35:ed:66:9c:01:09:fc:e3:ff:30:ec:6b:77:ce:12:99:30:bd:
2f:b4:d1:56:fd:2d:e6:69:07:bc:55:c2:28:f0:fb:3c:46:79:
75:52:8f:1d:ed:09:b2:d8:8b:67:7f:b1:79:4b:e7:4e:d3:ff:
6d:79:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:50 2026 by rpki-client