Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
File: hcEp31AMjfmKQosomcbNYSTxaKE.cer (raw, json)
Hash identifier: lCDDb78fugXvLzNmDdbY60W+dI2J036WWSNK81EAT3o=
Subject key identifier: 85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB98379C12DE898460CF9470927224
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 3226
IP: 87.250.0.0/19
IP: 91.146.0.0/18
IP: 92.55.0.0/18
IP: 92.241.224.0/19
IP: 217.14.192.0/20
IP: 217.29.176.0/20
IP: 217.114.144.0/20
IP: 2a00:4580::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:98:37:9c:12:de:89:84:60:cf:94:70:92:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85c129df500c8df98a428b2899c6cd6124f168a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:f6:1c:b2:7b:bb:a1:9c:ac:95:06:ae:39:
3c:38:cc:17:65:2c:db:18:6a:cc:2e:c8:21:33:93:
74:bb:50:e5:79:b9:42:14:d3:38:41:34:3c:65:91:
95:80:f5:31:ca:a2:07:8c:49:58:1b:1f:37:dc:23:
50:76:12:fc:db:20:51:ae:19:7a:4d:dd:26:9e:d2:
23:22:06:26:79:20:b9:54:82:fa:80:44:f4:22:85:
ad:d0:e4:07:b8:be:a2:95:92:58:1f:dc:8d:c7:e5:
93:82:eb:b1:9f:dd:46:80:66:20:9c:44:50:82:a5:
01:14:9e:d6:7d:e9:a3:60:a1:fb:9d:57:cf:2b:c4:
c3:5d:aa:4d:56:70:cb:92:98:91:fb:44:c0:5d:33:
3e:b9:31:4c:22:06:d4:64:fb:92:8c:dc:9c:ae:81:
fa:20:ab:51:7b:63:4d:75:c2:14:0b:46:b3:40:fb:
5a:df:9c:14:64:8d:bf:78:06:09:c3:39:9e:92:b1:
25:01:bb:63:8c:26:44:eb:19:c9:53:73:b5:73:ae:
52:b4:51:77:6b:4d:7c:28:61:81:ec:fa:91:56:f5:
72:67:a5:11:d1:64:88:18:ae:31:92:9e:d4:15:aa:
8f:53:7c:21:de:94:8c:7b:26:d3:04:40:af:dc:ae:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.0.0/19
91.146.0.0/18
92.55.0.0/18
92.241.224.0/19
217.14.192.0/20
217.29.176.0/20
217.114.144.0/20
IPv6:
2a00:4580::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3226
Signature Algorithm: sha256WithRSAEncryption
48:db:3c:4c:0f:26:ae:cc:c4:ba:3b:ac:91:66:54:c2:52:0b:
a6:a9:d8:c4:57:1b:d6:78:1d:e2:fd:52:57:b9:00:0c:cc:a2:
77:84:11:bf:07:2d:6b:8b:2b:b2:f4:b0:6c:4b:5e:97:65:1b:
ec:7a:a2:2c:f3:e3:79:64:5e:54:4c:52:c1:21:92:5d:4f:b5:
b4:03:91:ca:d5:7b:ee:26:4e:66:a5:17:62:80:60:c8:6d:d5:
0d:ef:68:27:4e:65:6e:39:5e:bb:d0:9d:e3:53:d9:44:4b:67:
2f:03:cf:5d:88:d9:78:94:31:58:ea:57:d4:3d:82:aa:b8:f6:
8f:14:98:ce:ed:55:04:45:0c:7f:dc:dd:a1:46:f6:d6:24:ec:
50:0f:ed:c4:d0:ed:30:7c:4c:0a:b7:42:4c:d8:c6:83:c4:cf:
b1:aa:77:fe:3b:d7:ba:1f:a3:dc:bf:33:af:71:af:c1:a3:bc:
a7:b2:bf:c0:74:fe:9d:47:8b:f8:52:10:b8:7b:32:c3:31:b5:
ae:9c:88:c8:aa:c7:60:ec:54:d4:29:c6:e8:1c:41:18:76:ae:
7e:cd:d9:7f:25:ea:a7:0d:bd:87:04:e1:c6:f2:15:c8:5d:fa:
6f:33:a3:7a:a9:6d:9f:79:4c:c7:12:55:83:47:d7:25:50:64:
5d:0a:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:07 2026 by rpki-client