Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
File: L6aSUEx3C6T4QLir7sSFttEPpOo.cer (raw, json)
Hash identifier: xjLh8ok6zGc5+9X4/qoSKE+mtlSx5eaP3li1S+Rwa+w=
Subject key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FCD282C92FC50D270E9E079CCF2A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62022
IP: 185.50.244.0/22
IP: 193.143.228.0/24
IP: 2a04:c0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:cd:28:2c:92:fc:50:d2:70:e9:e0:79:cc:f2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:32:05:df:3b:a0:4f:20:96:23:f8:4f:7c:
e1:94:00:36:12:0e:65:f7:30:4c:8f:b8:a2:9a:96:
d5:44:cf:e5:ff:5a:bb:f9:c1:af:bb:31:ca:78:c7:
5e:48:7d:10:b2:2f:8c:50:0c:64:60:28:b3:bd:d6:
f4:62:15:a6:80:f5:fd:4a:99:e2:de:8c:90:b4:71:
e7:03:d9:d7:9a:a3:8e:b7:84:c3:46:14:0b:35:b4:
c9:38:54:c0:60:21:7e:c8:45:ed:b5:6a:5f:7b:d8:
3a:f6:76:e7:04:94:1d:ee:69:86:fb:f7:9c:61:b9:
a5:23:46:78:5d:af:fc:c4:3b:2a:d8:bf:b6:43:cc:
b5:78:5d:5b:a0:f5:ce:0d:46:97:7d:d3:fc:2b:a1:
71:9c:22:1b:0b:ae:1c:31:99:2a:41:29:66:1a:d2:
b5:73:72:79:b5:a4:c7:bd:85:1b:d4:03:7f:53:47:
0b:57:ed:52:d6:60:dc:91:0d:d9:7f:e4:c8:77:0d:
27:27:7f:ce:99:fd:22:8a:12:d4:19:d8:64:34:79:
99:4d:53:b5:e1:7b:ba:82:a8:dc:e9:9f:8b:af:26:
3c:7c:da:4c:36:f4:a1:3e:9e:56:64:18:47:95:e3:
e9:12:28:d6:14:60:5f:8f:32:dc:1d:15:48:2d:5b:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.244.0/22
193.143.228.0/24
IPv6:
2a04:c0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62022
Signature Algorithm: sha256WithRSAEncryption
79:64:7f:85:1a:1e:eb:23:1f:75:8d:fa:c9:9e:05:eb:83:a8:
d4:14:4f:2c:e2:b4:f2:f9:be:31:bf:07:21:88:ec:43:15:27:
27:11:d8:42:9d:54:1f:25:c6:55:36:0c:9a:ab:50:0a:4e:64:
f6:d8:c8:78:55:6d:0f:b2:e3:99:bd:c6:64:5c:92:29:a1:3a:
87:b4:35:bb:bd:0e:1f:00:62:de:33:93:fc:d9:47:cd:a5:2d:
ec:66:3b:a4:a5:66:ed:61:18:63:70:47:36:a8:22:5c:4f:49:
da:fb:93:fa:55:4c:7c:e5:12:0b:04:c7:e5:b7:46:32:e2:16:
8f:8d:61:30:89:ed:82:c7:ae:db:82:02:cb:2d:08:1b:b9:be:
16:d7:2a:cb:5a:43:cc:4a:27:01:b6:b4:94:f0:44:f1:12:42:
39:07:20:06:92:c7:4d:5d:8a:98:ca:19:c3:e7:a5:bb:4a:1c:
2c:76:dd:76:34:89:ed:62:a6:1c:c6:37:67:c8:da:75:e1:b1:
d4:3b:bc:d1:49:a2:95:eb:30:fc:71:f9:3d:f0:13:f2:86:7b:
6d:7a:93:2d:96:74:c5:b1:7f:ff:fe:59:06:a0:88:e6:fd:f5:
f5:da:37:a4:8c:2d:c0:77:2a:ea:ce:05:d6:a9:d1:a2:80:9e:
8d:92:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:35:36 2026 by rpki-client