Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
File: i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer (raw, json)
Hash identifier: GMtD2z4pGPuP7sV0KulHkIDsPmgtu9uwJH5AYqhDiSU=
Subject key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18D549A76B947B38255DE9035D4CA3C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
Certificate not before: Tue 30 Jun 2026 14:00:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 9059
AS: 39111
IP: 46.51.128.0/17
IP: 46.137.0.0/16
IP: 79.125.0.0/17
IP: 87.238.80.0/21
IP: 176.32.64.0/18
IP: 176.34.0.0/16
IP: 178.236.0.0/20
IP: 185.48.120.0/22
IP: 2a05:d000::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d5:49:a7:6b:94:7b:38:25:5d:e9:03:5d:4c:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:8c:c4:13:26:bc:0e:fa:7f:50:6c:14:cf:
fe:6d:a0:9b:50:10:04:8e:55:d9:58:35:5a:3a:f5:
9f:c6:35:94:29:4b:97:98:bb:4a:32:9d:b8:fa:ab:
46:65:8d:99:4b:89:81:0f:77:31:43:c4:51:7e:0e:
af:3f:53:e7:fb:56:5c:8a:42:bb:50:68:b6:0d:cb:
00:77:89:ef:aa:96:fb:22:47:06:17:22:4a:1a:13:
a8:a8:00:a1:69:f5:cd:96:99:d7:85:47:6a:33:7d:
74:bb:65:43:8c:5a:d3:1e:e8:01:ac:ab:82:a3:4f:
a8:8a:72:ef:6c:cc:a0:8c:2f:4f:53:1c:42:b3:e6:
cb:7c:47:d8:35:60:aa:85:f1:30:38:77:86:a3:db:
e7:a6:cb:ef:c4:39:eb:20:e5:aa:fc:09:57:df:cc:
c3:31:d8:bb:16:08:fb:4b:84:9e:f8:a7:78:d3:68:
c9:ac:91:46:4f:b7:a0:c0:21:d5:0e:e5:25:27:0f:
57:38:b1:6b:cb:06:bf:2b:06:08:da:84:8d:c5:d4:
42:ff:25:2c:55:f0:e6:cf:2c:3e:b5:d0:ba:a5:f0:
31:8f:9a:5b:4b:80:7e:e7:d4:6a:4e:58:a0:66:b7:
24:68:cb:fc:8c:17:bc:3f:cd:7f:ee:df:a2:db:5e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9059
39111
Signature Algorithm: sha256WithRSAEncryption
4f:65:09:92:9a:84:90:fa:e5:9a:d3:96:a5:08:d5:58:b8:5b:
26:f4:03:2c:51:f7:ac:ae:3f:4e:16:7d:7d:70:9f:64:75:03:
98:f9:a9:6e:5f:73:a7:fe:d2:97:a5:63:68:37:c8:b4:fa:82:
a7:6f:9f:87:07:8e:de:53:98:6c:30:2a:f2:d7:68:01:69:8f:
99:75:36:25:3d:7b:32:a1:1c:e8:85:48:66:a4:5e:5e:93:d0:
53:2f:47:ff:ad:f5:75:f5:ca:dc:fc:37:bb:b9:d5:43:63:a7:
45:1e:dc:c6:6e:37:e5:db:64:68:f3:c6:81:63:0f:cb:41:f1:
8e:8c:f1:c5:24:7c:f5:8b:c5:01:82:0c:2d:73:15:7e:bc:17:
49:01:91:06:a2:ed:91:61:2f:6e:b1:7f:ab:f1:5f:96:31:c9:
a5:96:2c:0d:63:9f:e8:c8:31:85:c3:11:dc:d7:ef:bf:aa:a1:
f9:e9:af:ae:23:27:7a:f6:65:86:fc:09:bd:5a:11:fe:f3:a1:
db:c8:f2:26:a8:4c:4f:01:f9:fc:81:19:d6:fd:50:f9:80:83:
7c:68:00:3b:d8:f1:4f:e2:28:a1:b1:db:b9:17:35:76:55:2c:
78:31:f2:0f:e2:13:d0:41:5e:59:5d:89:73:cd:a3:76:e9:21:
52:7c:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:11 2026 by rpki-client