Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
File: NHoE4awkx5d2NHg55RNMmqo4v1c.cer (raw, json)
Hash identifier: E2Bmz3JP8iPi/GjszLibyjhAT1QVSx6P4haJQjW0Ym4=
Subject key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5A78F0C83E4BEA0E6C7D50ED8575F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215465
IP: 193.162.141.0/24
IP: 193.162.255.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:78:f0:c8:3e:4b:ea:0e:6c:7d:50:ed:85:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:1e:8f:44:98:da:88:19:d0:1c:55:90:33:
26:b7:40:62:7a:ca:3c:5b:08:c8:20:96:f2:cf:8c:
2b:da:3f:4c:e7:89:37:1c:cc:69:5d:72:a6:64:a8:
40:b7:75:cf:d4:1a:fd:82:1b:71:e5:a2:2f:38:80:
fa:ad:ed:28:a6:4e:e2:0a:b4:ea:55:1a:a2:32:39:
f4:90:64:d5:d7:46:ee:b4:cf:1c:44:42:4c:c1:56:
4d:e4:b4:b7:b4:3b:3b:08:3f:c1:a9:27:54:e9:3d:
bb:f0:77:05:85:42:5f:64:0d:28:1e:a9:9c:81:f4:
24:85:6f:96:55:dd:0d:cb:2c:99:6b:cd:8b:eb:ee:
8c:3b:80:56:0c:63:20:b2:57:6f:b5:b3:28:4c:76:
99:dc:c3:62:81:4b:19:9a:ba:04:31:7e:44:65:50:
ce:a6:68:9c:96:3c:86:4e:5f:f1:02:a0:0e:6c:3f:
4c:7d:77:4d:0d:be:2b:fe:1d:93:49:0b:25:2b:66:
dd:f4:04:13:b1:e5:83:07:6b:e4:a1:73:f9:80:a3:
44:99:a1:d8:f9:30:6b:59:ba:04:72:be:fb:84:33:
2f:2d:50:7b:e0:8f:0d:a6:81:45:f6:08:be:cf:fd:
f2:74:d3:db:87:79:fa:30:25:bf:e5:7f:ab:cf:f5:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.141.0/24
193.162.255.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215465
Signature Algorithm: sha256WithRSAEncryption
16:6e:08:2c:f7:02:b8:b6:12:fa:5c:d4:e7:fa:58:1f:e1:9d:
1f:c6:a6:9c:38:92:ec:fa:f2:cc:09:86:16:57:ed:56:a5:5f:
3f:a6:dd:42:72:db:83:81:3d:c9:e0:c6:b6:10:10:48:af:57:
b1:e6:ed:68:a2:93:2e:b6:ff:12:d5:51:4f:db:0a:72:75:58:
94:60:47:20:89:a2:41:2d:cd:dc:9e:45:3e:1f:11:af:54:a5:
6d:45:8f:7a:d0:b1:55:29:7e:50:6c:62:59:61:06:d2:7e:73:
c6:2a:85:8b:03:29:7d:39:6c:2a:5c:7e:2f:ad:d6:92:50:46:
54:5e:41:c2:5a:5e:42:a1:e3:cb:92:49:e8:39:a7:10:2a:fc:
70:56:bb:fd:ce:74:b8:20:4b:39:7d:05:03:48:da:7e:ef:df:
71:ed:89:23:70:ff:f3:ef:e1:95:f0:88:d2:a4:99:75:59:42:
81:86:06:b4:b3:d9:dd:b9:92:0a:06:a7:30:c4:ed:75:ba:0e:
0d:37:08:ac:03:44:6b:78:c4:2e:a4:c1:94:1f:b5:3b:66:8d:
04:1d:0d:1c:c3:99:7d:0d:cb:5f:56:e6:dd:64:b8:d8:d7:2d:
ac:5d:96:63:a6:7f:cb:a2:d7:b0:21:32:de:fe:79:99:ac:78:
94:55:19:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:27:23 2026 by rpki-client