Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
File: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer (raw, json)
Hash identifier: QU+liPUDABqPthWQkf3Fg3P6BW0TPunnixdmJG5nEB0=
Subject key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910EA1AC6245B06C9545EC09EF463D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.147.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:ea:1a:c6:24:5b:06:c9:54:5e:c0:9e:f4:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:d6:d7:46:a1:13:ef:16:79:a4:b2:54:a7:
bd:ec:c6:63:87:f9:45:c7:3b:80:1f:4a:2f:b0:a9:
9b:fb:61:a4:15:99:57:c3:f9:a6:b4:ac:4a:5e:e6:
5d:0c:9c:50:ef:03:9e:cd:fe:f1:23:11:2c:80:57:
0b:b9:fc:96:d5:ab:74:fe:17:94:e5:7d:14:b3:e1:
f0:ad:f5:9f:1b:84:d7:c6:c3:cf:b0:5b:a2:ec:8e:
95:78:1f:c9:b3:0a:8c:ee:ba:cf:1c:03:4b:80:97:
6d:93:53:03:38:89:96:7d:ae:89:cf:a0:42:23:a6:
a4:d7:8f:95:86:69:80:c2:c8:74:db:47:6a:6d:13:
ba:ad:2c:d8:c8:90:21:25:19:87:16:19:b9:41:59:
2b:a1:78:e8:a2:48:3b:ff:bb:65:db:da:0a:6e:97:
cd:a6:b5:8b:16:b0:80:8c:0a:c8:4a:64:6d:43:42:
38:1b:8a:65:94:50:14:6a:8f:db:3a:65:3a:ce:25:
e0:f5:5e:ed:32:91:46:3d:2a:82:0e:b7:71:a4:ee:
21:5a:d3:9a:85:fa:9d:ad:5c:11:9b:f3:bd:f4:48:
6c:61:8b:1b:17:5f:5d:d4:45:50:df:65:f6:db:da:
bd:8b:b6:16:ae:a1:8f:91:23:b0:af:0d:aa:53:d0:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:07:45:37:9e:a7:36:3e:32:b8:3c:58:d9:23:cc:c0:b5:bf:
c8:07:21:a1:db:3e:21:04:75:a0:c5:52:63:7f:2e:d5:87:87:
21:2e:2b:18:c5:22:eb:66:ad:37:f7:db:c5:77:62:79:39:9c:
49:53:08:45:23:c1:0b:83:1a:6b:fd:2e:2c:4f:ad:18:e0:fc:
a6:cf:87:7d:a5:5c:76:b4:fe:c6:a5:3e:e2:42:e3:75:d8:d6:
82:1f:a4:dc:aa:79:c7:e8:30:8f:32:5d:34:c7:3a:67:74:cb:
7e:b7:6c:f3:b8:06:78:d1:fd:a0:63:2f:a5:06:4a:da:36:61:
18:63:24:6e:90:e4:90:c6:a4:58:f2:58:06:bc:cd:96:ee:fd:
0c:df:ad:3e:05:15:aa:86:05:25:62:46:69:5a:c6:e8:56:f1:
6b:d7:d5:94:18:e5:1b:a2:4c:04:d2:8c:2d:f1:6c:75:ca:90:
24:c3:20:4c:12:cb:cf:6a:cd:72:f7:8a:78:d4:a3:25:47:ca:
33:d3:d9:0e:84:1b:f0:b4:87:a6:f1:41:cc:5f:2f:38:ec:8e:
f1:45:36:58:9c:dc:5a:47:98:7f:cb:f8:5f:f3:b7:91:6e:91:
bf:16:12:20:6d:b4:2e:7e:1e:cc:f6:4a:27:ce:70:3a:73:2c:
3f:cd:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:30 2026 by rpki-client