Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
File: dZSaAgpSrHxVFICFzj7-LQKq09k.cer (raw, json)
Hash identifier: f4iIRoESi2X4swLa+DkEBrPipb6XzRVrvRgqFTZoycY=
Subject key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F93E1E35604110806A1ACD0D040C3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:7ac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:3e:1e:35:60:41:10:80:6a:1a:cd:0d:04:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:29:cd:a8:7e:b5:75:61:dc:35:aa:72:85:
b6:58:c1:04:d0:77:ed:77:de:ee:ab:1b:dc:48:13:
64:b2:13:5c:ab:9b:5c:f9:bf:5c:8e:a5:96:b1:97:
0b:f3:fd:4f:75:32:42:41:6e:30:86:2a:f7:f6:37:
64:86:17:f1:c6:66:0f:4f:12:e1:e7:aa:4c:6a:f5:
39:fb:f8:39:5c:60:36:da:71:1c:ac:28:94:6a:bc:
e3:ad:8c:39:b3:cf:25:1c:8d:94:7b:ef:35:0b:58:
3a:65:5a:f2:ae:16:fb:6f:44:34:44:8f:77:38:97:
85:4f:0e:e4:77:9e:65:66:9e:78:68:a6:9d:3e:72:
ba:3a:bd:1b:db:09:bf:a9:9d:68:4d:61:b5:bb:3b:
86:5d:13:2c:92:61:eb:25:d9:d8:e9:66:00:20:d2:
1b:e9:a3:95:dd:81:e1:0e:bd:f0:0f:0d:9f:f3:ac:
87:5d:61:34:f6:d3:e6:de:77:c6:10:d1:7d:36:76:
47:f0:e9:4a:e5:1e:2c:be:8e:ed:6a:c2:63:54:c4:
48:3e:32:cc:f5:08:b4:28:4d:01:a8:fe:28:dc:8b:
99:43:19:85:44:cf:39:d4:08:17:4e:ac:ce:4a:90:
c6:6a:16:bf:47:cf:4a:1b:9a:c9:8d:bf:03:c3:52:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7ac::/48
Signature Algorithm: sha256WithRSAEncryption
af:4d:94:51:a8:74:ac:fd:b6:b1:9b:fc:aa:e5:35:ba:87:98:
4b:7a:4a:f7:b2:6f:a9:96:58:eb:ed:d5:20:79:8f:79:74:f1:
af:f0:9a:03:93:e8:d4:86:92:30:f1:43:1d:36:6b:99:c3:f6:
02:86:33:28:22:87:9e:7e:82:47:59:96:d4:64:1a:e5:25:e8:
dc:a2:8b:38:b5:ff:c2:bc:16:a2:6c:68:5b:30:e3:bf:6e:56:
d2:8d:e1:87:a9:13:9f:ab:99:9d:1d:dc:9f:48:a4:e1:78:82:
96:30:42:48:d5:a8:2d:7d:eb:7d:b8:5c:85:4b:c4:53:1c:73:
6b:a0:a2:2f:c3:24:d6:1c:0c:bb:80:93:5e:9d:7a:c9:f9:5a:
0a:ee:72:0b:ee:d8:97:b8:88:9b:e3:68:71:e1:69:d5:a0:f3:
08:d6:20:fb:a6:4b:0b:67:90:20:57:5c:da:5e:48:36:f2:4c:
88:60:41:20:ff:ea:4c:f3:32:98:e4:96:87:ec:16:c7:d6:c9:
37:7d:00:9e:22:c2:6c:20:fa:4f:e5:3c:c1:d9:1d:d6:10:86:
df:01:c8:b3:0f:83:d5:a2:dc:35:99:70:b3:3c:38:73:e5:10:
64:b4:c5:84:af:db:a0:c3:9b:d7:df:28:88:62:c5:c8:83:77:
80:49:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:02 2026 by rpki-client