Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
File: in2Cv6bL-YO5cDSUAb3veO1mgrg.cer (raw, json)
Hash identifier: 4dh+awBvxfXBFmzKPVM0lxThK4WD6COx/IM4kWP9fx4=
Subject key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F845CD38FE9C73C24325CD6BD0BB13BB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 11:08:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12608
AS: 204084
IP: 89.207.155.0/24
IP: 2a13:3300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:5c:d3:8f:e9:c7:3c:24:32:5c:d6:bd:0b:b1:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 11:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:e8:0d:07:f9:ca:a3:59:d6:a4:3e:fa:6c:
ef:76:aa:93:05:74:25:e0:fd:af:5a:b1:d5:23:62:
b7:2f:ee:48:b7:1d:dc:e9:4c:a6:c3:8e:1f:42:6f:
01:29:63:64:9c:1b:ee:1f:94:50:6d:9c:6a:ab:14:
a7:41:1e:8c:bb:3c:39:7e:a8:96:0c:e2:9e:23:f2:
de:5b:76:f6:98:f3:06:bc:74:a5:70:d7:f2:bc:fd:
fb:f6:af:e3:cb:d5:4c:09:1b:ef:a0:fa:40:46:62:
c5:f4:72:63:ff:8d:25:64:a0:a4:56:20:61:01:a2:
42:e2:e9:ff:58:4a:07:a1:e6:e4:7a:ac:08:68:33:
0c:7c:71:6c:b9:63:57:c4:86:17:0e:52:38:f2:78:
00:19:6c:81:df:db:c5:8b:f6:ed:2b:1a:0b:f8:21:
b8:44:f0:8b:fc:9a:3c:62:75:6a:d5:52:e3:24:bd:
b5:09:2d:0e:b1:44:eb:cf:f6:d3:7a:7c:c6:e6:27:
92:24:52:69:76:37:98:62:d0:46:06:e0:11:fd:a5:
56:fb:ea:fb:a5:26:a2:3a:5b:57:e0:da:37:ab:fa:
e6:13:eb:fe:79:0b:f0:e7:3a:80:53:7f:00:a3:18:
22:db:69:08:a5:36:2a:41:0c:3c:a7:69:36:c0:cd:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.155.0/24
IPv6:
2a13:3300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12608
204084
Signature Algorithm: sha256WithRSAEncryption
86:41:67:4c:7b:fa:11:f3:7d:be:4a:52:7a:c3:63:cd:d2:ba:
3d:2d:d6:64:48:85:b3:4d:52:13:2a:c5:a5:c9:ab:7a:44:e2:
cc:5f:f7:db:8a:f7:91:07:6f:2e:34:f5:91:f8:0a:7c:56:6d:
4c:b3:0e:17:a2:7a:c2:50:8b:bb:4b:16:99:2d:d9:31:22:66:
e4:aa:8a:ec:2d:7d:e1:a8:f0:d4:5d:9d:93:7e:57:28:c3:26:
18:b2:50:40:c7:68:58:b4:eb:60:04:ef:00:21:5c:04:db:65:
bd:2a:44:55:bc:86:4b:c2:7c:1b:99:f5:22:42:d2:c2:18:16:
95:dd:cb:36:cc:88:76:1b:95:3f:31:84:a7:9c:e5:bf:aa:2e:
37:10:d1:03:6e:d8:3f:80:2f:ef:b6:9d:57:48:e4:76:c0:c2:
0d:94:62:cb:2b:67:63:c5:de:63:d3:a6:8c:76:b8:18:dd:16:
3c:68:9c:91:8d:5c:9a:59:67:2d:4b:aa:b3:10:10:a0:e5:c2:
47:b0:67:06:34:70:0f:0b:8e:63:97:27:f1:91:7f:90:dc:b0:
ff:fe:f8:6c:99:78:16:55:b2:80:80:00:eb:c6:74:e6:97:db:
f8:f2:a3:fc:62:4e:b7:04:20:35:33:b3:2a:70:d9:7f:3e:d1:
a4:7a:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:36 2026 by rpki-client