Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
File: loXHKCpFG6Lamf1RF8VFrXor3hM.cer (raw, json)
Hash identifier: +Gbg5dsbn+jGX4W1hSa61xqwJBMFSud9u/+kRtOE1ig=
Subject key identifier: 96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E87392A5BC8E1A1ECB197F062AAE05E45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 07:25:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197758
IP: 165.65.192.0/22
IP: 2a04:e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:39:2a:5b:c8:e1:a1:ec:b1:97:f0:62:aa:e0:5e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 07:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:46:df:b4:d5:0a:73:57:fb:dc:e2:75:55:
37:24:75:6b:32:43:54:08:c7:a3:b3:61:50:9d:c7:
98:38:e6:14:1f:59:2c:3d:af:7a:e1:f2:19:6b:fa:
1c:45:8e:08:53:00:99:e3:79:a8:1a:34:26:72:e1:
d4:e9:d6:6a:da:e9:38:4d:cc:ae:af:e2:95:2e:c2:
6d:a5:ba:a1:ff:aa:f5:e2:10:ba:a4:fb:2f:df:d1:
a6:2b:e9:a6:42:e7:e5:a2:5a:b6:93:b6:cd:09:e6:
fa:87:76:a5:ab:92:d3:74:d3:8c:cb:75:16:88:c2:
02:7b:84:d0:49:26:92:22:9f:a9:09:6b:7c:97:a1:
60:2f:f9:ca:2d:b6:37:f7:c3:1c:9c:6b:91:07:55:
a3:4c:d4:32:57:d4:8d:98:55:c8:56:55:dd:bc:0f:
ff:1f:b9:d5:4a:44:33:e4:37:24:7b:5c:55:5d:23:
e5:c5:08:5a:fa:e0:72:d6:b8:a7:69:df:b7:39:01:
f7:3b:51:bc:0c:4a:d6:91:08:43:76:54:cb:54:86:
1b:ee:83:90:43:59:26:a5:db:0f:19:0c:9f:bd:c5:
df:c3:7d:51:c7:9d:47:77:f5:8e:36:f7:61:29:b7:
6e:7a:ae:94:8c:8c:c9:9d:0c:c3:98:3e:a1:82:dd:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.192.0/22
IPv6:
2a04:e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197758
Signature Algorithm: sha256WithRSAEncryption
49:ea:c6:08:1f:8c:05:62:84:28:bc:54:85:ba:0f:ac:4c:bc:
19:bf:2d:d0:a9:fa:fb:12:57:f5:1a:b9:0c:34:f8:93:b7:b1:
b3:14:a4:79:64:4a:57:e0:8f:35:9c:4d:ab:6e:4e:6c:d2:35:
7c:9a:f8:20:53:14:71:07:2f:2e:1f:fd:3d:93:bd:7c:61:4d:
a0:a6:29:09:1b:dc:1e:73:bb:49:c4:13:e0:50:fe:cf:83:cb:
7a:18:81:10:82:ca:51:b7:97:d1:71:7c:2f:b8:16:31:df:ac:
1b:b1:81:1c:e6:8e:ec:f2:ab:f3:ca:6a:88:8d:83:a5:75:9f:
be:fd:2f:88:ac:70:97:49:1f:77:07:1a:48:5f:a0:b4:d9:63:
82:b6:7c:6c:5b:38:43:9b:d2:e2:67:4d:80:7e:2c:60:b0:3b:
2c:3b:4e:18:8f:42:fe:b1:9a:1e:bd:be:d7:e6:b9:d4:90:a8:
64:7f:54:a5:91:bf:b1:d4:24:2b:9d:7d:82:11:ba:cb:49:5b:
93:79:12:80:b5:ed:8b:1d:f5:26:72:ed:5f:84:84:43:f2:38:
85:d2:39:6c:f9:4f:7c:7f:23:5a:6f:09:3c:23:19:28:02:e5:
2d:96:c7:ce:a4:2c:a8:8e:a2:37:94:49:f8:0b:cd:5f:96:65:
cb:12:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:39 2026 by rpki-client