Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.cer (raw, json)
Hash identifier: ZQl0iBz+7C4cbJwVL9LiXTYxrJy+1qC6G8f+2F8lDa0=
Subject key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F83C734CB4D49456B5A8AEA6F1A147E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13136
IP: 80.85.128.0/21
IP: 2a02:13d0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:c7:34:cb:4d:49:45:6b:5a:8a:ea:6f:1a:14:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:48:63:2c:af:13:56:47:2a:80:e6:d6:94:
e5:62:d3:e9:78:c4:71:75:df:88:eb:a3:ac:58:57:
4b:0c:72:21:3d:98:97:28:53:ff:82:ce:a6:49:3c:
a8:63:74:49:d4:a5:6a:ca:17:fe:04:49:ba:e0:45:
9a:d4:30:95:7a:78:4d:20:92:72:1e:41:4a:74:d4:
68:e4:11:78:a1:e8:8b:4b:63:1e:0d:66:4b:98:e9:
2f:c1:04:96:17:4f:dc:27:cb:46:35:c6:09:09:26:
d3:81:d6:fb:7c:ef:4b:8e:a4:15:bd:0b:81:73:32:
28:bc:90:4c:f3:b5:3c:06:15:6b:ab:91:55:86:70:
b1:54:4d:b0:68:88:c6:11:58:f4:97:98:b7:59:c1:
3b:da:31:5d:91:92:0a:46:e9:c6:74:94:80:f2:7c:
8a:fe:f7:a5:e8:94:5a:2a:21:fc:57:35:68:0c:ca:
c1:49:ad:a6:c5:50:07:cc:bb:78:e2:8a:7f:56:e1:
17:22:85:f7:11:eb:55:4c:9c:4c:82:cc:a6:e1:34:
3b:df:58:7f:32:8f:00:23:1c:e9:9d:cd:98:ce:03:
86:47:d8:d0:0a:87:8d:95:3d:7f:88:83:de:40:9a:
5a:93:ff:ce:5b:09:e2:1c:e2:c6:53:f5:69:6e:bf:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.128.0/21
IPv6:
2a02:13d0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13136
Signature Algorithm: sha256WithRSAEncryption
4f:62:1d:26:a6:b2:9f:98:0b:25:3d:07:01:c4:8b:60:a9:d8:
42:d6:ab:39:96:ad:2b:3d:ec:15:5a:68:18:31:06:da:9a:62:
a9:58:66:5c:24:f5:98:93:bc:b9:b3:4f:c9:0f:f8:3a:46:e3:
f3:fd:20:dc:3a:a8:7a:26:c0:97:dc:db:38:49:84:c5:80:c1:
cd:4e:7d:01:bd:64:ac:68:eb:29:67:53:73:2e:9d:ed:96:09:
4d:a7:68:40:9c:72:af:4e:fb:bd:11:58:29:40:dd:1a:08:aa:
dc:8e:04:09:7a:1e:a1:e3:83:8f:39:4c:d6:8b:c8:4e:bd:dd:
f5:b2:76:61:4a:d3:d6:1a:d9:9a:0d:0d:0d:49:88:08:25:81:
98:44:0b:07:dc:b8:7c:d1:91:f4:6b:f6:c0:ac:83:2e:27:b9:
25:1e:9c:76:2a:c4:93:17:03:52:8f:a0:89:61:8b:20:bb:ea:
f5:e7:51:10:39:8c:6c:2e:5b:76:ad:9e:07:b0:4f:2c:d2:74:
ee:52:da:c9:cb:3c:d5:17:30:41:41:53:e5:a5:b6:d9:39:74:
66:b2:6d:93:5b:c1:74:ed:5b:e7:e9:6b:00:27:87:e5:a2:7e:
6f:09:d8:45:54:20:6d:4e:8c:0b:42:ca:24:93:94:04:e1:c1:
0d:cb:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:19 2026 by rpki-client