Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.cer (raw, json)
Hash identifier: PGhYWRXkXzWL14tXFfzJ1shJ6i2rxQIlYQd+nE2+9pE=
Subject key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA42A28C6279B7A966515D90FFB243
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204324
IP: 185.252.40.0/22
IP: 2a0b:940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:42:a2:8c:62:79:b7:a9:66:51:5d:90:ff:b2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:05:75:f0:a1:ee:6c:5b:a9:e1:30:4b:b9:
dc:83:97:15:0a:c7:35:bd:8f:ff:63:7a:22:1e:8c:
5a:86:08:6f:61:b0:d1:d2:f6:c5:1a:99:9a:86:09:
9d:db:5d:2f:e4:ef:a7:d4:73:c4:4f:7b:78:64:68:
12:24:6c:b8:f0:3a:c3:21:81:eb:ec:0f:58:06:f4:
fb:ac:52:b8:5e:aa:fd:74:60:f5:dc:62:90:8a:1c:
a8:b3:8b:74:3d:9a:76:db:2f:f1:41:f4:d3:ce:08:
10:e2:5d:cf:98:56:06:6d:2d:62:9d:a3:c1:44:a1:
28:36:21:cc:9b:25:20:ed:89:93:89:80:8b:72:97:
48:67:6e:68:78:14:ea:5b:b2:95:62:d2:1e:86:dc:
35:6f:3b:4b:7c:c2:db:02:db:0c:ad:9f:2b:bd:28:
96:8e:e5:03:bd:d0:8a:ef:4f:73:b9:b4:c1:30:68:
25:42:f0:9d:9f:c7:89:24:7d:1c:4b:11:1e:78:94:
7a:a4:6d:19:ec:b2:55:14:aa:16:9f:57:8e:e8:44:
38:5e:f7:c0:59:a9:ab:d3:19:ed:eb:81:14:e7:74:
b6:2a:61:a8:84:5a:e0:8a:a5:1a:c7:61:e2:a6:71:
c3:14:6f:46:67:97:ab:a6:5d:db:e3:e3:60:47:4f:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.40.0/22
IPv6:
2a0b:940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204324
Signature Algorithm: sha256WithRSAEncryption
20:15:7b:e5:4d:80:fc:df:58:92:c9:6b:0c:1e:37:34:9d:98:
e5:ce:ac:71:63:33:49:0f:8e:5d:d3:51:56:61:7e:a4:72:1a:
97:b7:aa:d9:59:6a:0b:56:03:45:3a:e4:0d:7b:5d:a1:34:81:
d0:f0:b8:26:87:fc:07:05:a9:ab:2a:aa:d3:db:49:1a:d1:68:
fc:ba:11:ed:7c:1e:e5:01:22:09:95:81:9c:f9:ae:42:cf:19:
3a:40:0b:d8:71:a8:c4:a2:13:1e:c8:d9:41:d8:29:3b:56:04:
04:dd:4d:44:6a:90:9a:fc:a5:84:dd:09:32:bf:70:2c:06:7a:
77:e1:e4:25:cb:44:1f:9c:68:15:27:30:17:7c:5c:dc:50:0c:
cd:be:d0:ab:bc:16:2a:b7:c7:02:3a:5f:d5:5e:27:6d:12:66:
f8:29:df:de:08:52:5e:ae:fe:3c:22:90:45:a7:10:43:e3:80:
04:ad:02:da:80:d1:a6:19:b6:38:a0:b8:ca:cd:2e:a5:93:23:
1a:28:42:72:a1:79:ec:9f:89:40:73:4c:4a:78:e7:d1:cb:e4:
86:6e:cd:7e:cf:e4:c8:1b:c1:3d:c3:7f:c3:31:58:62:0c:f0:
88:21:73:67:37:d1:6b:50:d5:06:b0:17:11:ba:ba:4d:f8:3c:
dd:2d:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:44 2026 by rpki-client