Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
File: jaArHaSqceZbb7m-I6ayCMJcV9g.cer (raw, json)
Hash identifier: Gpr/gYMMLWg7sK7Nr/P8xmME+DFcQd0l3y340Tpagao=
Subject key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC2808CB0B75C07D1434EBA054F7D1FE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 09:35:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208326
IP: 95.133.250.0/24
IP: 195.88.19.0/24
IP: 2a14:a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:80:8c:b0:b7:5c:07:d1:43:4e:ba:05:4f:7d:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 09:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:34:c3:45:0e:0c:df:6b:d8:dc:cd:5b:1e:
81:86:b6:cd:96:e6:1a:53:cf:19:0b:7d:93:33:98:
40:dc:57:cd:95:f0:ce:dd:51:f2:71:19:48:9b:2a:
44:df:7c:10:e7:43:28:b1:28:61:f0:84:d7:b6:a1:
77:62:1f:a6:dc:25:fc:76:7e:6b:ba:26:f2:d8:23:
4f:87:1a:c4:29:db:08:85:bf:7c:29:f3:15:72:05:
9d:51:e0:ef:62:33:fb:63:e7:d5:cf:ec:da:32:06:
7c:4f:2a:48:32:a6:a9:6a:67:3c:8a:3f:c1:c7:74:
b8:10:35:67:53:90:94:00:9a:35:55:d8:d4:26:90:
2b:42:b9:20:72:0e:91:df:93:04:33:aa:c6:2f:ac:
1d:f2:32:fe:2e:7e:bd:4d:66:e5:eb:1e:a0:99:12:
ca:26:dc:de:1e:62:75:33:f9:7d:d7:22:60:b6:d4:
7e:a3:5f:dd:94:ee:6d:81:c2:e7:73:e4:ba:f9:aa:
83:9a:b3:06:46:e7:e8:0f:64:03:18:1e:4c:70:9d:
33:86:1e:c5:d5:f8:8e:a6:73:12:9d:8a:be:ba:d7:
b1:0d:88:2d:32:8e:d7:62:75:d3:ee:dc:20:ef:31:
1e:12:6d:45:35:cf:e6:86:5c:d8:b3:3a:72:75:92:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.250.0/24
195.88.19.0/24
IPv6:
2a14:a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208326
Signature Algorithm: sha256WithRSAEncryption
90:89:1d:05:2f:b5:62:bb:93:2a:20:20:ba:20:ec:69:19:92:
d2:39:79:ba:14:a5:3a:79:99:da:a4:e0:45:f1:58:01:01:e2:
7b:d6:5e:13:d9:f2:b7:61:0d:7d:26:1f:15:56:f8:be:ac:cf:
0d:97:a3:b9:4a:71:9e:b6:dd:34:33:30:6f:83:b1:a9:d8:af:
b5:18:66:38:df:1e:b8:98:d1:f2:d6:32:25:ee:6c:7e:11:53:
8f:8a:d7:62:df:3a:ed:74:eb:f1:59:79:c5:2c:1d:9f:45:12:
e7:2d:db:f0:1e:69:d0:7b:04:f5:a9:3b:33:ea:5b:6c:40:e6:
3d:74:5d:cf:ad:5a:07:ba:5e:20:47:b0:67:a3:5d:95:29:c5:
7f:a8:c0:8e:48:48:fc:ec:03:7a:ad:2b:d5:e6:6d:9b:79:4a:
b3:e8:8a:6e:ae:cc:89:04:fd:0f:ed:0a:09:a0:99:e7:88:56:
99:83:36:21:d8:b1:4d:73:aa:2b:0c:c8:b9:02:9a:3a:19:09:
4f:70:66:33:39:b7:96:5a:53:cf:9a:4d:78:b3:eb:96:14:c9:
03:97:d1:1a:06:29:8f:9f:82:29:b6:1f:15:61:8e:49:06:83:
32:8f:bf:9c:1d:5a:83:26:87:f4:1e:cb:c2:19:2f:06:6b:25:
8b:61:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:53 2026 by rpki-client