Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
File: h2-Iu0yzbPQtadF42cItt5pUNBY.cer (raw, json)
Hash identifier: BZC3QJvZge3+AfYQGAR+AGs1Ay7RGDsEo61W2lyHQxc=
Subject key identifier: 87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A5AE0AC90C11DFB5CD93469621E7970A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 15:27:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.0.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:ae:0a:c9:0c:11:df:b5:cd:93:46:96:21:e7:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 15:27:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:f3:de:6a:48:3c:d6:9a:e0:56:6b:e2:18:
20:48:ee:f4:84:fb:75:af:38:0c:38:26:db:4d:2c:
9d:33:c9:84:d4:9f:59:c8:c0:f9:a0:93:77:c8:7e:
75:df:3d:4e:6c:18:c6:ab:c1:e5:dc:8f:aa:cc:59:
a8:43:57:3e:88:14:6c:d6:4f:54:58:53:7b:0e:ac:
26:d5:90:6d:e6:cf:22:53:8b:3e:7f:e8:6d:d2:8f:
6c:ba:7d:09:c1:e8:56:78:6a:47:b7:3b:94:76:a0:
11:52:da:62:6c:3b:6c:ac:70:99:0b:94:42:f1:e8:
20:ed:b3:72:86:a3:81:c3:63:b1:6c:23:4c:46:ef:
16:8a:6f:e5:5b:74:c6:b3:ce:15:af:7a:97:4f:8d:
8a:5b:95:c3:d7:17:41:7b:34:27:35:cb:79:29:6a:
6e:9b:f7:23:a1:b9:d2:48:f0:8a:62:27:e4:e4:f7:
4f:67:08:44:9e:58:9c:b7:fb:38:88:02:9d:22:85:
53:eb:e6:4f:e8:87:84:fa:25:dd:49:95:67:5c:59:
2b:69:a9:4a:5d:8a:19:10:56:a8:d7:bb:81:33:5b:
75:db:08:e4:1c:02:13:ec:f5:9b:43:c4:ce:16:b0:
fc:70:88:ce:9a:1e:ad:53:42:ae:59:75:ee:81:c9:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.199.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b4:b0:36:b5:88:ce:4e:00:43:2d:b4:5d:97:69:3f:1c:b8:
97:64:fa:57:c8:ae:b0:5c:1c:43:58:81:ad:51:d3:cc:74:18:
ae:fc:5e:31:ba:04:08:96:c4:42:41:30:ce:86:e1:98:19:06:
83:21:9a:bc:a4:78:0e:1b:3c:75:ed:23:ed:19:69:d4:fd:bf:
f8:4e:29:6a:17:a2:dc:f5:17:b3:65:9a:4c:ad:34:7a:d0:13:
cb:28:b7:cb:62:9a:43:3a:00:3e:ec:bc:01:11:ae:9b:1d:5b:
0a:f1:68:bd:a0:0b:5f:a3:fb:08:e1:92:f2:36:2b:7a:6b:9d:
b7:6c:cb:11:f8:50:39:f0:ff:25:60:b8:1d:52:d4:30:5f:b0:
1c:48:23:ee:23:82:56:fa:3c:b0:6e:53:0e:47:32:26:8a:cc:
8a:31:ae:7f:e4:1a:ce:ac:a9:42:80:80:e6:30:5a:76:66:89:
ff:c7:e5:79:5d:e3:db:c7:c8:0f:c1:38:18:53:45:ec:be:96:
6f:f0:e2:c2:11:0d:4c:c0:32:5b:73:99:5d:41:52:fd:80:9e:
f9:58:d9:ec:ef:c8:59:e6:36:bd:26:64:cf:e5:29:8b:f8:b9:
c5:0f:ec:99:b5:1e:c3:a3:7f:d0:7a:b2:56:0c:30:b6:68:6a:
8c:ce:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:31 2026 by rpki-client