Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer
File: ebBozkt45F5gxswUavYHsI-EPfw.cer (raw, json)
Hash identifier: pShlJa5q4XmkHTVjFdrFbP+gab6X1JposE2fFe82xb8=
Subject key identifier: 79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5B6AF3364E16B2E489B395795DAB34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:18:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211281
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:6a:f3:36:4e:16:b2:e4:89:b3:95:79:5d:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b068ce4b78e45e60c6cc146af607b08f843dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:ea:b1:fd:aa:4b:f7:bf:4f:a8:e2:e7:57:
79:52:c2:2c:cc:81:41:c0:78:95:29:7b:c5:bf:46:
57:14:5e:db:81:71:0e:33:75:bd:f9:12:cf:0a:9f:
7b:9e:74:40:3a:ff:8a:88:4e:14:32:7f:2c:c4:dd:
f7:59:e8:fc:da:8b:fa:c8:9b:0c:d3:82:5a:1c:4b:
f4:d3:67:11:09:1f:ee:9d:50:01:ab:63:f9:5d:e3:
19:d8:61:75:38:ed:6f:bb:f1:84:a0:c0:63:70:10:
61:5b:1b:0e:c7:fd:f6:e4:6a:af:74:70:9f:ba:e3:
11:2f:5a:20:b1:8c:ba:d4:43:ca:43:41:02:70:a0:
4d:66:1a:1e:d9:db:a1:c9:0b:d0:3d:5c:10:40:6c:
d0:89:dc:76:ae:29:08:90:0b:20:35:9a:b2:7e:67:
9a:c6:2b:d7:31:99:e2:5c:32:9d:ef:9f:78:67:05:
de:99:d3:c2:a9:32:ff:ca:7c:f7:6c:00:16:4e:66:
43:84:60:5d:34:62:be:4f:ef:8a:d6:75:70:8b:9e:
d8:22:d3:7c:a6:81:55:21:7e:2c:36:8a:f4:91:a7:
e2:9e:39:81:1a:2e:60:4a:77:0f:d5:ad:51:57:87:
fe:9c:75:43:0f:57:33:06:35:41:fd:06:58:b4:99:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211281
Signature Algorithm: sha256WithRSAEncryption
80:c6:41:a6:b5:19:01:82:45:30:ce:29:39:a8:bc:12:e3:4e:
e9:60:b7:77:0f:83:7c:ea:eb:fc:e3:f3:7c:04:b6:5b:1a:77:
c0:70:a9:63:3a:9d:68:8a:d0:fa:9a:d6:11:b5:b7:cf:75:7c:
1f:e1:15:d5:29:41:b5:0b:05:5c:46:a1:12:05:67:85:b1:86:
54:93:1d:f6:eb:d3:5b:43:ac:a8:e6:e1:a6:88:55:5a:0e:ce:
d1:19:53:c3:85:54:d6:72:1b:9e:58:e0:1a:8d:15:53:25:bc:
fd:2d:eb:7f:cf:6b:ad:11:ee:ec:e3:98:77:7a:cb:c5:11:66:
b5:7f:49:22:9a:f4:94:ce:aa:87:7b:82:84:ae:ac:55:97:4c:
1d:27:e3:a9:95:98:4f:54:71:7d:78:0d:7c:9e:3a:02:45:33:
49:5a:e3:22:6b:9d:f0:b1:48:72:e8:16:c7:c5:3e:99:10:9c:
32:61:5e:07:b7:b0:a9:31:cd:46:8a:87:1e:e0:c3:79:98:11:
55:1d:7e:14:89:fc:2f:d3:2c:ab:a2:35:ad:6b:84:f1:3b:2f:
1b:92:f7:11:c2:66:3b:0f:fb:d3:9b:ac:10:4f:dc:1f:bd:d6:
76:04:e0:55:06:2d:ea:88:56:40:71:11:e6:b0:b4:ae:7b:71:
2e:d4:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:16 2026 by rpki-client