Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.cer (raw, json)
Hash identifier: +fpvYD8RaEj29lJPlLeZJyJOnlsBGdbwjznGyAbyA+A=
Subject key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78354BF77D8B378BC2958542E08A3388
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208237
IP: 185.15.124.0/22
IP: 2a02:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:4b:f7:7d:8b:37:8b:c2:95:85:42:e0:8a:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:6d:85:0f:4f:03:f0:59:4e:fe:63:60:8c:
13:49:87:34:69:38:7a:7b:86:47:b8:39:a1:2e:71:
fe:1f:b3:8a:d7:10:16:f9:58:09:99:61:9c:6f:32:
51:eb:ff:d7:80:0b:e1:7b:86:22:55:3f:85:11:cf:
ab:ad:fa:f4:61:71:13:c0:cd:6c:be:58:25:22:46:
02:70:25:de:9e:08:e4:b5:f5:21:78:22:b0:ef:9e:
6d:f9:63:f7:e7:a3:f5:56:b4:42:eb:62:b3:7a:22:
e2:8f:6c:77:bc:ae:36:31:1a:18:7f:45:7b:60:78:
10:da:e8:90:d0:36:ce:09:4d:48:1e:27:b7:fe:2a:
30:91:0d:da:40:b0:24:e3:df:6c:76:d2:c3:0e:07:
98:49:48:c4:b1:81:86:e2:83:de:8b:64:9d:b6:c9:
fd:aa:47:3a:dc:17:5f:f4:e0:ce:c3:5c:c1:36:8f:
15:7a:3d:fe:fe:12:9c:5a:17:d2:69:e1:77:19:58:
4e:d3:69:1f:9d:24:db:2e:55:4e:71:2b:82:d1:81:
fe:a8:b8:ae:b7:3a:e7:45:ad:75:0e:3c:60:b5:90:
16:94:cd:52:7a:c2:0a:63:2e:c4:7a:5e:f3:36:50:
8d:12:0f:88:bf:e6:32:22:6c:b9:9c:ce:aa:44:f0:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.124.0/22
IPv6:
2a02:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208237
Signature Algorithm: sha256WithRSAEncryption
1f:ff:51:81:61:8f:1a:2e:a4:70:a7:cd:c2:5d:ee:c1:9a:74:
9b:2e:dd:61:96:6e:e7:0f:b9:4f:2f:b9:cc:4b:b6:9e:a3:55:
a2:30:09:6a:c9:03:ee:6e:f6:cd:9b:82:25:a2:3d:83:e5:11:
ef:13:21:58:f8:30:44:ca:35:8c:dc:89:11:3a:8b:62:bb:f7:
ac:1c:3f:42:d3:00:3c:b8:1e:27:5a:b5:53:fb:58:0b:35:16:
3a:86:95:1a:24:7f:74:86:c7:f5:1b:03:ed:61:a5:4c:47:87:
98:9f:e3:6b:45:53:fd:3d:2b:5c:03:8d:e0:93:18:ac:c4:ce:
5d:c7:74:17:ef:0c:b4:56:bc:02:0c:57:22:0b:c2:13:da:ba:
76:21:55:6f:71:c6:aa:5a:a4:ac:3c:71:f4:3a:bb:14:b5:d2:
5d:1c:47:46:5e:8f:f1:0e:79:93:0c:21:01:54:40:44:7c:24:
6f:0f:c9:db:a1:8b:a8:02:66:8d:67:55:27:0b:4d:f2:6c:6d:
2d:33:1a:51:e6:cd:c4:24:07:b3:1e:5d:52:77:da:ca:ab:0d:
06:bb:35:eb:05:8d:41:47:38:58:72:30:1c:9c:92:5a:27:f9:
dc:c7:49:4d:4d:2d:ac:7a:33:58:8c:14:18:6b:21:fd:03:b4:
5a:66:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:25 2026 by rpki-client