Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
File: L6e3lEVZi0Luy76CjdiU368d_Ko.cer (raw, json)
Hash identifier: 7U+g0RAIhqgXHyMVoOg6DevtG5fULMtumNpc2uAyOHA=
Subject key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D012291BFEEAEEC3C5D26D7295440BB4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Mar 2026 13:28:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.229.92.0/24
IP: 185.84.20.0/22
IP: 2a05:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:22:91:bf:ee:ae:ec:3c:5d:26:d7:29:54:40:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 13:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:58:e2:56:24:f2:1f:53:1e:7b:2a:0b:9c:
4a:28:42:3a:b9:e3:ee:db:ba:07:17:ed:c1:18:db:
1c:ef:48:a3:90:73:43:8c:3d:f6:f0:08:c3:8b:00:
83:e1:f3:df:80:e2:df:16:97:c2:c8:eb:e1:70:e4:
b0:b9:59:27:6e:c7:8c:aa:c3:bf:88:e4:be:6c:31:
b6:ee:ab:63:a8:7e:37:43:8c:99:50:ed:8d:e1:b2:
5b:dc:b0:f9:40:f6:34:a3:08:ca:45:92:be:58:11:
8d:96:4a:3a:bf:f5:36:e1:cb:19:a9:e1:98:c0:a7:
f2:8c:02:9c:df:81:bc:a6:55:d9:84:7c:7b:71:f4:
2a:e0:7e:e7:9f:c7:c9:4a:3b:55:08:9c:ad:ed:e4:
6a:70:cd:61:69:a3:78:39:97:62:f4:88:34:b2:e9:
92:e2:de:ef:e2:87:4f:ae:a6:88:e5:84:19:9a:40:
0f:88:c8:5a:b2:ff:9b:8b:c0:79:b8:e0:63:8f:37:
c3:0c:30:32:b0:c2:7f:9c:e6:83:3d:4c:90:9b:50:
5e:90:02:13:f6:8e:86:dd:8f:ff:f0:35:71:f8:98:
e1:d7:e4:93:69:36:1b:01:2f:24:f6:55:3c:d1:8f:
66:67:4e:76:eb:fb:86:0d:2b:10:cc:a2:c6:c3:e1:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.92.0/24
185.84.20.0/22
IPv6:
2a05:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
97:cf:53:7f:bf:6b:fb:af:ec:d2:0b:67:f0:49:66:22:4b:0d:
ab:ed:5c:17:ec:6e:de:22:1c:0e:ae:91:ea:0e:09:ab:41:53:
f6:81:c3:53:6a:80:61:42:f8:78:0a:83:85:b9:17:6c:e2:98:
d8:73:fc:0e:5e:89:61:81:2a:59:11:53:6f:aa:10:5c:e9:e9:
5f:99:40:0f:a8:fa:51:c4:6f:f2:f5:16:0d:4f:be:18:cb:a5:
93:02:0a:e4:7a:e6:96:9b:12:12:7f:3b:de:70:fb:bd:65:8b:
34:d3:5e:ea:06:dd:08:b4:3f:29:77:f8:f3:cb:fc:58:c7:19:
47:61:bb:10:da:bb:26:b6:45:b6:c3:8e:82:82:c9:e8:11:fb:
0b:44:78:1f:08:de:0a:15:74:b2:a3:0b:14:5e:e3:e8:2a:5c:
d0:8f:f9:f3:7c:91:6f:88:89:8d:33:00:ec:2c:8a:ad:13:d3:
b0:cb:7e:8c:1a:bd:0f:8f:58:5c:64:e1:c9:a3:e3:bd:63:ea:
56:81:2e:58:53:c3:96:af:39:0f:37:64:19:19:c9:d5:df:09:
77:ea:41:ca:1b:f9:4f:f7:f4:10:72:b8:bc:2b:fb:d0:bc:d5:
5a:f6:1f:ee:70:2b:3a:da:86:e0:81:84:0c:aa:59:e2:ff:d1:
ea:5f:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:02:20 2026 by rpki-client