Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
File: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer (raw, json)
Hash identifier: royUCTIk1ZzIUFwjFBGZF1jxwR6+w1us4ppRCvveCJ4=
Subject key identifier: 94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA2C6E1F699E24542C43555E9D3413C2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Jul 2026 08:52:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.36.1.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:c6:e1:f6:99:e2:45:42:c4:35:55:e9:d3:41:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 08:52:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:64:a5:ba:14:bf:f9:93:ba:80:78:f5:04:
bd:eb:74:cf:1e:c9:c7:c7:a1:b6:18:f8:f1:08:c1:
8c:3f:0d:57:f1:f1:61:c6:07:9f:0e:52:d4:ed:c6:
cd:aa:24:c3:64:f6:79:bd:64:65:aa:09:ff:48:9b:
cc:8d:04:8d:56:98:1e:22:72:6f:be:c6:7b:d9:a4:
7d:30:24:33:91:29:5b:d4:79:c0:56:47:2c:63:bc:
ca:71:0a:30:57:4e:61:a3:53:a8:aa:2d:b0:30:57:
d6:ef:8f:20:d8:63:14:b7:31:71:ad:c7:15:7f:c1:
4a:1d:1c:b8:46:5d:3c:dc:86:18:da:7f:71:06:5f:
e9:64:f4:1c:fd:41:aa:79:15:f1:00:a6:c2:ae:bf:
2b:8f:0f:1a:25:91:20:3d:a3:c9:27:ac:37:5a:7f:
1b:0d:f1:f3:05:01:ec:7c:ea:91:6e:8f:00:9d:84:
b8:08:b7:d8:a3:aa:77:7e:3a:67:f6:5e:59:87:e7:
79:b9:50:3a:e7:bb:c0:b4:85:a7:7f:37:0f:d2:b5:
bc:9c:63:8a:08:89:a0:25:a8:d7:31:3b:67:81:14:
17:6d:c2:70:a9:bd:e6:2d:d9:12:c3:05:dc:9d:74:
78:0f:bd:12:3b:77:5e:ed:72:57:05:4e:2b:3f:4a:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.1.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cd:93:bf:f1:83:fd:f7:1d:0f:de:df:78:3e:ef:cd:60:88:
34:64:aa:ed:b0:38:c0:de:4c:c2:26:59:ae:0c:1a:b3:a3:ed:
f8:ac:fa:14:05:0c:72:89:ff:46:64:b9:9e:8c:2d:75:7b:6b:
fd:91:c2:d6:0d:b1:2d:cf:83:f7:36:62:6b:ae:98:e9:04:86:
38:45:38:a5:77:24:b5:7f:42:6e:00:7f:77:cb:36:83:8b:0d:
e5:1b:e9:48:d0:7d:ed:a8:a6:d6:ba:11:54:bc:54:54:0f:e4:
c6:6b:6f:3c:e6:2c:d8:35:ad:0c:2e:3d:cf:69:f0:61:ac:48:
37:03:5f:ce:8e:a1:1b:96:bc:4c:5d:ed:27:50:8e:70:76:41:
46:06:16:82:09:a1:31:10:7b:de:22:4e:95:e5:28:31:d8:08:
c7:52:65:96:2a:8a:2a:5c:87:8c:19:db:1f:d3:a1:65:98:6f:
95:74:14:1a:21:12:6f:e5:4f:51:99:3d:e5:06:fd:fe:20:d5:
41:ea:4c:87:c0:eb:dc:ad:30:07:15:87:fa:75:6a:17:13:76:
e5:db:d1:22:4d:eb:33:f2:b6:53:f2:ed:42:e4:de:cc:44:4d:
e5:17:27:1b:4c:c2:78:b5:07:68:09:fb:c9:c0:5e:a0:12:70:
4f:e8:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:36:40 2026 by rpki-client