Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
File: lajACQMBmVVkqiE4tDA4nviM13s.cer (raw, json)
Hash identifier: 1llc29zYR197/GPg3+WRXrN56AsH+620XFhp6urIVWA=
Subject key identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B783502209ED1C9BAEE4AB2795D9AB863
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44372
IP: 193.93.152.0/22
IP: 2a07:3ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:02:20:9e:d1:c9:ba:ee:4a:b2:79:5d:9a:b8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a8c0090301995564aa2138b430389ef88cd77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:26:9d:e8:8b:59:02:86:74:bd:62:5e:70:
dd:73:43:1b:bb:80:67:63:61:90:2d:43:d8:15:fd:
67:65:b3:33:c0:47:8e:96:c7:b7:04:4c:8d:74:0e:
63:af:e9:2c:95:75:23:60:bc:a1:d0:8e:0a:7d:9e:
96:7b:f4:11:9c:7d:1e:54:9d:f4:17:d9:42:8d:d0:
04:20:72:62:7d:c0:3e:0a:e7:36:50:e7:19:fc:b8:
c1:4d:d2:c0:d2:62:91:13:39:ce:44:cc:18:a3:3d:
70:a8:55:79:5e:c7:8e:09:6b:1a:06:50:bd:b2:0e:
02:cd:90:2d:f7:63:7a:52:b8:a9:b7:cd:22:c6:84:
0c:19:d6:bd:7b:85:d1:79:10:02:19:e6:d4:4b:69:
83:d5:4e:10:3a:83:f7:98:a9:eb:ad:4f:d4:89:c2:
36:27:3b:06:19:c9:a1:36:4f:a1:e9:ac:db:64:4b:
c3:59:13:c6:be:43:a3:81:0c:f4:a6:8b:d0:5e:24:
7d:14:e2:8f:71:bd:98:06:0f:50:90:0d:0e:63:80:
5e:5e:14:29:27:3f:a8:e8:3e:60:84:fb:3d:c9:66:
27:97:d7:35:08:7e:b4:e5:97:d1:66:f8:a5:75:08:
b2:eb:d4:9b:b7:ed:b9:e0:5c:77:c1:ba:75:2f:34:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.152.0/22
IPv6:
2a07:3ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44372
Signature Algorithm: sha256WithRSAEncryption
12:17:62:02:b2:80:c8:fd:99:bf:bf:74:af:28:ab:1c:2e:55:
0f:aa:0d:bb:1a:ea:bc:42:cd:01:9d:61:67:d8:ad:20:1c:88:
68:cb:1d:f8:b2:4e:61:04:93:49:4a:71:e6:bd:fc:f6:e8:bd:
6f:92:f9:bf:5e:d0:a4:4a:7e:2b:81:a7:4a:f8:a1:dd:e7:14:
99:1b:da:b5:78:b9:6c:a7:29:97:54:af:6c:42:a1:62:79:d9:
36:3f:07:d7:cd:b1:e4:23:80:4b:c3:7b:b5:af:c1:dd:a1:f3:
ab:2b:4d:d3:cd:77:ad:f6:80:b3:02:37:93:4c:fe:c0:ce:d9:
df:64:2d:ca:7b:b2:31:14:9b:44:3c:3e:1b:2e:60:5b:ad:0a:
03:18:cb:23:55:83:a0:81:8a:71:b8:f0:21:e7:6e:69:ba:ef:
ff:60:cf:96:dd:29:eb:bd:43:be:2e:c4:19:30:12:89:f4:be:
be:95:b6:20:09:1c:c7:6d:f4:22:0e:bd:a2:82:b1:e3:6b:1f:
bb:71:a5:a5:6a:cc:3f:18:73:7a:fc:df:2a:b3:12:4f:6a:d2:
2b:bd:76:0c:ca:c4:88:b7:a5:35:33:86:1f:a9:29:26:83:fe:
62:86:40:ff:01:a2:d0:a8:30:ba:6e:f2:e0:a8:f4:82:0d:c7:
54:e5:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:25 2026 by rpki-client