Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.cer (raw, json)
Hash identifier: VDTNKhcCn+CV+2rDyplL8EDcPNofOtyr1f7dKXuuz98=
Subject key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F924A698E39557E2C763C8319CC9B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31349
IP: 62.201.16.0/20
IP: 185.185.128.0/22
IP: 2a06:8080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:24:a6:98:e3:95:57:e2:c7:63:c8:31:9c:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:6e:a7:59:4c:dc:ea:0d:ea:cd:a6:cd:56:
61:a3:3f:07:7b:e8:c6:ef:1c:4a:f4:d8:12:5b:81:
c7:c4:13:44:ca:05:71:f2:0b:44:78:29:db:9f:7b:
90:0a:45:2a:bb:d6:6b:83:2d:ff:19:76:82:39:d4:
4e:28:70:c6:b0:65:3f:a5:bd:46:90:93:f2:8e:ef:
8e:5f:de:19:b1:7e:5f:1e:9f:9e:4f:b2:c8:fd:cb:
2d:34:27:df:ae:98:1b:1d:33:ab:83:7c:44:be:5b:
12:87:a7:58:f6:a8:b7:8f:ac:42:06:0f:9a:46:df:
34:b7:9c:fa:bb:03:79:cf:8a:34:af:97:0b:77:3e:
d3:6e:ac:b3:e6:08:72:29:da:e4:cc:a3:91:b6:69:
bd:09:a8:e8:4e:fc:8b:c4:81:2e:b8:65:48:11:8e:
ae:04:69:cd:4d:22:13:f4:7f:ea:91:ea:30:4d:ce:
a2:9a:d3:44:77:9e:79:5b:0a:fb:37:c5:16:a8:9c:
bd:c8:c5:7f:eb:cc:2b:4e:1c:c1:be:52:d6:5e:02:
10:42:4b:9b:08:cd:89:bd:18:28:59:15:b6:17:97:
4a:3a:f3:88:2c:fe:5e:1f:11:56:80:a3:ad:9b:ec:
d5:b8:a2:0e:86:b4:49:27:03:3a:f4:cb:80:10:2b:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
185.185.128.0/22
IPv6:
2a06:8080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31349
Signature Algorithm: sha256WithRSAEncryption
b0:f9:a2:c6:69:04:73:32:96:a7:ea:a9:7d:72:17:e5:cb:e0:
55:f9:1e:9a:0b:3c:a0:bf:bf:ca:24:4f:d5:95:3b:3d:46:a6:
b0:14:1d:57:21:a5:03:48:83:fe:b1:8a:d5:0c:31:e8:be:9c:
4a:35:02:6e:a2:00:29:0e:38:d4:8c:82:a5:f3:14:36:86:40:
e7:35:ec:f8:cd:8c:4a:98:f4:e0:52:f1:ce:07:f5:62:9e:62:
c3:56:7a:04:27:5e:61:80:43:cb:f8:5d:c4:1a:e1:49:fd:66:
b4:00:ec:a2:80:c6:f3:42:f1:27:4a:8b:c0:b3:ac:58:8a:44:
a6:d4:b2:fd:30:83:36:2b:1e:ff:35:b6:3e:3c:15:ec:61:06:
4c:31:c8:34:bc:83:54:45:90:20:e6:17:a9:71:b3:ce:d6:57:
2f:88:79:cc:39:06:c7:e3:17:bf:38:63:fc:ad:40:4b:9e:77:
8d:15:09:20:b2:7d:42:bb:be:8b:78:ff:8e:18:95:67:3d:92:
d3:59:c4:4d:bd:d0:10:9b:07:71:71:29:29:41:32:4b:f2:30:
00:7e:1e:bc:88:e7:01:57:03:91:5e:ef:66:eb:30:ee:d8:5c:
a2:52:ae:06:85:73:51:cf:0b:54:01:18:91:46:87:e1:60:39:
d6:64:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:15 2026 by rpki-client