Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
File: LTX2XfLLPqFuURUvrHWUf6nDC_c.cer (raw, json)
Hash identifier: Rk3DT/kxZP2w4lG7rNXKSkD/nv7EvvAguXraqWI2S8g=
Subject key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7911278F0BE916641FF3D17753EA678F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60930
IP: 91.147.84.0/22
IP: 213.134.30.0/24
IP: 2a13:53c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:27:8f:0b:e9:16:64:1f:f3:d1:77:53:ea:67:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:37:81:07:89:49:02:d9:73:c8:4f:2a:32:
7d:18:03:15:1e:f1:3b:13:2a:02:29:67:9d:6a:fb:
8c:9e:14:b1:d6:68:40:c7:b1:4a:81:a8:53:a7:2c:
cb:2f:c8:a6:fa:67:6d:25:f3:b8:3e:f6:53:4f:ee:
20:23:c7:d9:56:b2:09:85:8d:b4:2d:e6:d2:bc:67:
ef:32:10:73:7e:84:68:64:92:db:21:83:9a:76:b2:
c3:43:59:63:35:8c:b0:3e:80:fc:50:d4:79:c6:d2:
c9:30:0e:33:e7:b9:e9:17:9d:78:f9:61:09:66:a7:
26:48:58:7a:b7:cc:3b:2a:13:3c:d5:3f:ad:ba:bf:
01:73:57:49:0c:12:76:7f:25:7c:8c:22:59:18:56:
b8:db:2b:31:36:bf:dd:94:e3:c6:c0:63:d8:b9:76:
92:c5:73:43:4c:4b:6b:b1:30:ad:34:94:d7:2f:46:
ad:a0:b0:35:04:69:26:a8:c2:c2:52:79:66:21:e1:
88:de:77:26:a7:be:d4:5b:c7:eb:34:bc:66:48:1b:
f4:a9:46:93:20:0e:e4:45:d6:a5:b0:7a:82:bc:20:
20:3d:9a:36:36:71:bc:7e:9c:a8:4d:a9:ab:04:8f:
44:13:04:bd:8f:77:c9:ae:50:a6:60:5c:e0:92:3a:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.84.0/22
213.134.30.0/24
IPv6:
2a13:53c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60930
Signature Algorithm: sha256WithRSAEncryption
04:d1:91:7f:af:21:eb:9f:21:49:93:87:96:15:33:d4:9d:97:
50:d6:8d:c4:49:a6:dd:be:b0:90:5b:cd:7d:d2:b0:65:c9:13:
ec:05:99:c4:a1:56:c6:f1:18:30:82:92:59:3b:82:49:5e:c9:
ca:61:35:33:22:a4:fa:28:f3:f4:e8:c7:30:fd:c1:a6:b2:6c:
e5:2f:a3:1f:03:f9:02:37:6b:2d:37:3f:ef:de:1a:b9:27:e7:
62:56:ae:2b:38:d6:a6:3f:33:01:5e:e3:39:4c:cc:3e:fc:3c:
e8:55:50:4d:c3:0c:4e:7e:1a:9f:09:6e:c2:29:b6:5c:19:f4:
cf:72:77:09:a9:ff:ad:7b:32:8c:d8:02:49:d4:4e:10:b9:6a:
27:e6:5e:18:6d:1b:cd:db:da:b8:d4:1a:53:b5:93:68:4a:da:
5e:90:9a:9c:b8:24:5d:2a:60:5e:14:c7:f3:e5:94:56:bf:66:
81:6e:c1:ce:39:5d:ef:fc:f7:49:0c:43:47:18:69:fc:40:19:
87:dd:12:fb:8d:0e:92:0a:a8:19:40:9e:7e:10:b6:4b:7c:14:
e8:99:74:b1:be:19:9e:af:c8:b9:e8:df:77:04:47:10:32:8e:
79:e8:31:08:df:e1:74:53:0a:62:85:07:41:72:fe:14:4c:c8:
a6:c0:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:00 2026 by rpki-client