Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
File: LSNrVIulmiq7JYI0HVYMqJP0l2M.cer (raw, json)
Hash identifier: /C51a6XwUby6/fpfErUOuYwSm5vodV/EtW8zTS6P8Vs=
Subject key identifier: 2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A34D3807CE6671358F50A3D4248E67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213226
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4d:38:07:ce:66:71:35:8f:50:a3:d4:24:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d236b548ba59a2abb2582341d560ca893f49763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:08:3c:9f:f1:21:05:a9:71:c1:b6:6e:54:
5d:86:10:2d:56:70:7a:26:8c:4d:65:a3:d3:91:45:
fd:46:90:ff:28:66:22:de:e8:b7:fd:bd:22:13:09:
71:09:00:ce:e3:3f:5d:30:59:a2:79:a6:7a:a1:c0:
90:ad:09:52:84:33:e2:04:3a:a1:b0:ed:8b:43:e0:
ba:27:db:70:7e:85:00:a0:e7:c0:23:1f:63:6d:b6:
7c:92:6b:2d:47:d6:08:63:95:c4:83:7a:0a:0f:c1:
72:92:13:f4:96:76:6d:f6:2f:72:9a:5b:c2:bf:38:
5d:f9:8e:33:36:3d:16:e8:2a:8c:9a:b9:8c:2d:97:
a8:37:6d:03:6f:55:c8:41:6d:a2:e5:12:c7:7c:94:
53:c5:fd:fa:0c:2d:6f:6b:65:7e:e4:90:0c:ff:a2:
4f:f4:8b:4b:ca:1c:96:6f:fc:5b:dc:74:6f:0d:0a:
67:77:0f:80:6b:aa:db:e1:df:be:36:e3:c0:c7:1e:
24:bc:34:b1:2b:9f:71:4c:5a:95:ad:3d:69:97:8a:
7a:eb:74:9f:fa:9e:3a:7f:b0:03:3d:46:ac:82:79:
a5:da:30:97:72:78:05:14:b0:72:b0:a9:13:8b:2f:
bd:ea:be:3f:f6:76:9f:dd:91:b8:51:11:11:3c:27:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213226
Signature Algorithm: sha256WithRSAEncryption
58:af:26:43:3a:e0:78:bd:12:eb:cf:b5:ff:49:e2:51:3b:50:
8f:f6:00:12:00:a6:73:ce:d3:32:27:66:80:30:dd:bb:11:c0:
73:25:78:74:f6:10:43:1a:94:de:fb:fe:77:7b:76:9d:22:fb:
1f:5b:99:db:5f:5c:23:b5:8a:b0:ba:1f:97:78:f8:72:a7:8d:
70:43:32:ad:3f:3c:0c:1c:4c:71:87:07:c1:5e:8e:f2:82:7f:
0b:17:82:cc:9b:b0:81:bf:ef:22:f7:ae:fe:25:13:d7:6d:4a:
41:a7:49:bb:fd:bf:c3:0c:3f:08:a9:89:dd:64:5f:f9:12:04:
12:50:a5:e5:b2:11:e9:f8:3a:71:20:c5:90:b8:d5:53:1b:12:
64:0d:ec:d6:ed:ae:93:0d:fa:5d:92:0b:42:43:05:46:1b:b2:
a2:d7:de:f7:ef:be:be:ed:01:94:18:78:4c:81:c6:d0:f9:82:
a6:58:d4:7f:3d:a4:03:d0:39:65:1e:d9:28:20:60:53:e3:df:
5b:35:eb:ea:fd:b3:0d:9b:30:60:ed:aa:da:b4:2a:30:4d:06:
b1:87:22:27:05:eb:d6:e5:d7:a6:04:0d:0e:a8:3e:6c:a6:d4:
e6:34:58:6d:c5:0f:0d:9e:3e:a5:5e:40:0f:5a:e4:8d:9d:4c:
c9:2e:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:15 2026 by rpki-client