Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
File: RB2AbBpx91B0dFHI0af7W05qqAI.cer (raw, json)
Hash identifier: d3fr6FW/Rixag5ktKpgzqjfmLSRsaY20sqtazsaeDhw=
Subject key identifier: 44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD64348EA0B06C773FB8671CC16EFA11C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 08:49:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.113.136.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:43:48:ea:0b:06:c7:73:fb:86:71:cc:16:ef:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 08:49:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=441d806c1a71f750747451c8d1a7fb5b4e6aa802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:2c:f4:e3:71:fc:d7:0c:d2:e0:2d:06:eb:
3a:a6:c5:56:0d:f2:b3:7c:a6:e7:f6:86:6b:e7:07:
19:aa:2f:e8:f9:88:b6:e0:af:1f:76:fb:9d:29:f2:
ea:be:c1:1a:7f:1f:66:82:1b:69:9d:ef:ad:41:1b:
6a:98:64:a7:e4:35:f9:a8:d1:71:36:cf:7c:70:21:
ce:5c:41:f2:02:ee:1b:21:c7:3e:cf:06:db:2f:37:
42:e9:a6:61:82:68:e0:74:9f:7d:f5:1c:33:f2:c2:
55:00:11:0f:35:76:14:2f:a6:53:61:f9:88:b7:d0:
28:43:c7:55:5c:71:79:b9:93:36:18:d6:84:7a:65:
e0:2a:0d:1f:f7:cd:b8:5d:59:54:0b:e6:ce:2c:88:
e9:ba:c0:fa:40:4d:fa:c8:cc:34:cd:78:55:bc:bb:
36:99:f1:83:56:88:4b:27:03:25:c6:ad:c5:97:96:
f2:4c:0a:ac:5b:83:50:bd:66:ce:88:bd:b5:14:91:
31:ac:52:ae:d0:61:8a:31:8f:f6:62:8c:38:63:a5:
6a:9e:45:ac:09:66:10:cd:c3:11:4b:fd:77:5d:e0:
b8:49:0b:f7:e9:f5:99:e1:95:ea:ad:80:51:07:c6:
e4:50:96:99:0a:0b:27:33:2e:76:03:09:9e:28:2d:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c2:a4:94:87:be:5d:2f:8b:34:03:ab:07:4b:9d:da:73:4c:
4d:e1:b8:eb:f8:f6:92:31:76:af:4f:bd:bd:fe:93:69:48:e7:
c4:fc:17:55:ca:c6:95:06:79:11:7a:90:09:7d:d2:08:2f:34:
39:6d:39:db:7b:a5:3f:b6:e6:89:8b:db:e4:ec:a5:0c:18:4e:
85:9b:b0:d2:d5:b0:00:cc:55:0e:33:4d:a6:21:f3:c1:5c:67:
0d:eb:0b:fa:7d:e2:9a:4d:66:ab:5e:16:03:30:aa:86:7c:79:
22:48:93:40:87:17:df:05:44:2e:36:34:da:f2:a0:76:8f:63:
d0:ad:42:07:85:2f:0a:4c:3c:09:2f:f6:3d:f9:01:d5:b2:0b:
fa:fc:99:25:e2:13:20:5d:20:bd:f5:4f:5a:f9:84:2f:2e:13:
52:72:30:19:61:17:4c:1f:5d:c3:df:33:68:80:c5:fd:49:92:
84:60:a0:01:55:9c:1c:9c:fc:18:fb:a7:e5:61:51:fd:6d:fb:
76:fd:0c:b0:7a:0f:c8:db:8c:e8:d9:67:74:2d:c5:5c:98:57:
b8:3e:69:1e:b7:aa:4f:93:1c:5f:a3:57:62:bb:21:8f:44:e7:
04:8b:71:52:7f:0d:be:e1:c6:54:be:90:f3:d8:bb:33:22:c6:
67:cf:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:17 2026 by rpki-client