Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
File: lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer (raw, json)
Hash identifier: xMv3N/z4uUkmxJwAArSQSYNhmPkNFgjgM+iHas/uQtE=
Subject key identifier: 96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDD34AF182E201DB57ED52A697915A9D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 14:02:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202237
IP: 37.77.224.0/19
IP: 2a00:6dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:34:af:18:2e:20:1d:b5:7e:d5:2a:69:79:15:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 14:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96b8ca9490ba667def56bac17915365b4e86fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:ba:d3:90:06:bd:a5:a1:3b:fa:fc:2a:ae:
f2:06:f2:e2:92:e9:81:66:66:f5:f4:46:62:58:bb:
bd:c0:7e:d7:c1:c7:14:7d:3f:4b:1d:a1:b1:44:b7:
46:f6:d5:d0:e7:71:ce:23:d3:54:6a:16:8a:c0:d1:
60:df:ee:7b:c3:2c:2f:4d:b6:05:df:3a:c7:12:06:
d8:53:b7:9d:30:c6:1e:ff:8b:70:7f:ac:67:04:a2:
98:c3:e0:d2:11:c5:22:35:fe:b7:db:76:0c:d6:d2:
ac:cf:b7:b6:06:d8:60:7c:45:c9:df:c0:f4:14:d9:
87:fa:60:81:74:68:01:fc:00:a0:17:3b:7b:7c:3e:
8c:5f:90:d8:1e:af:b8:8a:64:02:98:98:c3:ca:4d:
16:50:1f:ad:a1:4d:e6:bb:2a:19:9d:2a:e5:89:54:
62:37:a1:95:94:96:da:d0:c0:b6:e1:6a:4a:46:7c:
d1:18:a0:b6:d5:88:8c:31:c7:e4:bd:76:e7:f1:f8:
e3:cf:c9:70:14:e9:4c:98:c4:69:34:54:ea:52:e8:
bf:52:88:de:20:41:12:37:21:81:4c:6d:81:f1:ec:
1e:88:82:f9:c9:cc:ea:78:73:03:2b:8b:2f:7e:4e:
2d:2a:f2:d0:66:62:2c:66:62:0b:c4:2e:a3:07:71:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.224.0/19
IPv6:
2a00:6dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202237
Signature Algorithm: sha256WithRSAEncryption
14:eb:e8:d2:9a:00:d4:43:89:5a:69:6e:0c:ec:3d:13:50:ee:
1c:12:8b:d9:6f:29:cb:b3:8a:bd:44:31:8c:ba:e5:33:f7:30:
3d:3e:50:cb:b3:69:f6:a5:97:6f:f5:20:80:e1:66:3f:a0:ff:
84:eb:25:2a:10:3c:9a:d6:58:8c:35:3f:08:7a:a0:b2:4e:b7:
67:00:7b:1b:de:b2:15:dc:32:d4:1f:88:03:9d:c8:5e:3e:f4:
25:fb:d3:ce:2c:99:cc:e8:df:7a:50:54:e5:de:b8:54:5c:2d:
e1:a6:87:6e:6d:df:f9:93:23:ad:21:8a:a7:e5:07:ea:be:6f:
21:b9:c6:d9:fc:25:04:ed:f8:15:3b:8e:90:ee:c5:e4:d5:0a:
f9:01:fa:b7:12:52:6d:d3:63:de:d9:30:68:11:48:40:11:24:
7e:21:53:a7:b3:5b:14:a1:e1:71:9e:f2:37:85:b5:86:3d:b4:
c8:98:ba:c1:7a:2b:2e:63:67:a7:9c:9f:39:a0:1f:dc:cb:7a:
1c:c7:01:25:6a:05:f4:31:5e:c3:a5:14:3d:d6:af:b3:94:fe:
4f:9b:8a:7f:32:75:f5:81:39:67:0f:32:b0:d5:86:3e:e9:d8:
2e:7c:4c:94:ec:4a:3f:b6:0a:ec:f9:4c:80:0d:5b:51:d1:ba:
3c:68:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:00:31 2026 by rpki-client