Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
File: RSsOTTKQu-kEcHOua_f3Gik60vo.cer (raw, json)
Hash identifier: ogQ1SgPLlcW2g50ufYYufoLf+GW3+dpMemALjPe50jE=
Subject key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9C0DF46CD76EB80BC4A263DFBCFCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.87.64.0/22
IP: 2a0d:9d80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:c0:df:46:cd:76:eb:80:bc:4a:26:3d:fb:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:21:54:96:a4:9b:48:42:bc:e0:48:5d:64:
f0:3b:cd:9b:46:c8:ab:b1:12:03:e4:59:69:f0:32:
ca:c8:20:ee:0d:37:7c:26:14:56:20:cf:b9:f8:f8:
e2:4f:b2:03:b2:04:3d:37:49:05:9e:70:fe:4a:74:
27:f7:cb:26:87:f5:fe:d2:34:13:31:7f:1c:e6:3a:
cd:61:75:d3:63:fb:9f:fd:c9:64:20:c9:e8:bb:5e:
e6:92:d6:82:2e:6e:e4:c2:91:94:01:ff:74:76:0b:
66:48:4c:71:f7:fa:9e:93:74:ca:2b:df:21:23:47:
54:35:7d:c8:5b:89:08:6c:41:5c:93:e1:c4:16:6d:
bf:32:86:b9:cb:83:2f:47:b3:0f:18:41:d7:b2:46:
46:9e:f1:e3:80:90:6b:84:7a:5e:79:db:d6:8c:a5:
27:08:d0:63:e8:95:7a:ec:32:0e:56:3d:26:fa:c3:
da:9a:a6:27:5c:af:46:28:03:bc:7b:dd:6f:6f:45:
47:d6:42:ce:37:9f:04:51:9d:3f:75:f2:ac:67:0a:
be:0d:44:5c:58:cb:8b:c3:db:b6:ef:ee:6c:4e:f9:
44:c3:60:35:a4:d5:6d:86:c7:9a:60:a4:83:fa:a7:
bb:48:0e:59:dc:73:51:80:94:de:f2:91:ff:4f:d4:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.64.0/22
IPv6:
2a0d:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
8f:fe:50:be:64:0e:89:66:2f:04:69:df:1b:3f:ed:cf:3c:3b:
e8:91:ba:d8:05:8f:8c:1b:f1:33:1d:98:42:e3:ec:ab:5d:a4:
46:a1:4b:29:09:ce:26:8d:c0:1a:7a:2e:10:57:7b:de:ec:c7:
e5:fa:8c:2c:7f:de:1d:44:3e:73:19:90:7b:41:5d:0f:f4:bf:
b4:bb:7a:79:27:f5:46:8c:7f:92:7f:d2:63:63:ad:84:6f:4f:
f8:e6:95:35:b3:13:c6:6a:cc:64:46:3c:4c:72:cb:20:2d:1b:
36:ab:7e:8c:58:72:22:cd:b7:ec:ce:31:f2:ff:34:9b:d1:f0:
60:a3:9e:db:2f:4e:f8:8c:fe:41:55:03:cf:56:bf:ee:0f:64:
77:60:6e:9f:4c:ec:0e:80:2d:c7:9f:45:b0:07:da:98:34:39:
8f:65:0d:ee:7f:e3:c0:3a:78:6e:b9:eb:6f:43:cd:ea:82:b4:
60:b5:94:ad:30:b0:57:aa:e9:91:67:0f:45:96:9d:65:1a:7f:
90:5c:dd:48:c7:d6:a7:6a:f9:7c:5a:fe:75:0d:78:1e:08:b2:
3c:01:2e:54:4d:cd:c8:af:97:93:4f:40:f5:8b:31:49:67:67:
b7:11:80:af:6b:89:02:e5:f0:4d:9d:b9:0a:40:eb:8f:7f:d3:
62:31:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:09 2026 by rpki-client