Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer (raw, json)
Hash identifier: pKME88Plt7FrvjcU0Lo44j5LYBM6EgjhYPSAxFy2qNM=
Subject key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F92FD7838410C13C2A64F6DB36252B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48815
IP: 109.233.120.0/21
IP: 176.221.48.0/21
IP: 185.49.204.0/22
IP: 195.88.6.0/23
IP: 212.112.64.0/19
IP: 2a04:b8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:2f:d7:83:84:10:c1:3c:2a:64:f6:db:36:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:4a:02:c1:57:f4:16:bc:fd:04:25:8d:bd:
22:58:fc:91:e8:9c:01:6b:60:da:f5:68:b0:8c:74:
6d:f1:fe:1f:08:57:ee:54:fa:60:fb:97:f1:63:2b:
68:f7:2c:5b:d0:d1:54:fe:63:88:fb:f2:b5:a0:b5:
a8:8e:95:32:2f:ad:ea:69:41:1a:99:68:3d:5f:ab:
b5:73:bc:55:8b:a1:11:90:2b:9a:88:99:3d:8e:76:
af:b9:d5:d4:08:0e:cf:83:f3:01:21:d6:2e:70:fa:
c5:cd:28:aa:ee:58:bb:68:8d:a3:9c:87:b4:31:56:
ad:3f:65:92:b9:10:60:98:45:e4:76:b8:04:3f:8b:
82:49:32:15:be:6e:ba:43:7d:55:a7:8f:2a:4a:9c:
be:24:94:f1:fe:2d:56:ea:84:3d:96:9a:dc:d6:3f:
c5:ae:6b:96:7b:cf:8c:3a:e0:86:7c:1b:9a:d1:d6:
14:50:a1:8a:79:ca:d5:ea:32:47:92:95:a5:06:ce:
fe:be:21:a0:e0:38:c8:97:c6:d7:e5:d7:63:c5:65:
d3:b8:c7:74:ce:e1:ed:fd:af:15:e5:f4:a5:b6:a5:
9a:30:c5:ee:e2:7e:d2:d5:94:b2:b5:94:ff:d3:e3:
3b:9d:03:7d:d5:0d:44:47:10:13:61:49:d9:95:1e:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.120.0/21
176.221.48.0/21
185.49.204.0/22
195.88.6.0/23
212.112.64.0/19
IPv6:
2a04:b8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48815
Signature Algorithm: sha256WithRSAEncryption
4c:ea:ce:e1:a4:d5:fe:f6:46:2d:fc:67:3e:5d:ba:f6:dc:b5:
30:bd:58:41:b9:9e:fb:d7:84:f3:35:fa:bc:77:8d:77:d2:ae:
7d:91:b8:e4:63:a1:00:04:fc:b5:0b:a0:cb:12:f8:eb:91:20:
f0:8f:67:ca:6a:a5:c0:f5:d7:b5:72:e9:d5:b6:cb:5d:23:5b:
95:05:26:57:2c:fe:99:ba:1e:dd:f6:14:27:b3:7e:7d:27:4c:
61:db:74:2c:c0:c9:f4:9f:43:88:3f:28:64:3d:8f:2e:2c:db:
5a:40:0a:ca:3c:38:c5:ba:f3:18:ff:d5:fd:77:46:fc:46:7f:
c0:45:28:c4:be:7e:a2:74:af:dd:3f:af:b0:f0:15:f6:9d:fd:
e4:c9:d6:7e:30:05:6c:bf:e6:e3:85:7b:29:d6:e2:62:27:8f:
a9:3a:96:d5:79:ce:5d:49:fe:d6:3a:16:b8:63:e8:8e:8a:7a:
98:26:c5:6a:dd:83:0e:69:12:9d:65:e2:f1:73:4b:4d:0d:3e:
de:61:e0:9b:4b:d0:ef:df:47:7f:65:0c:c6:5a:b2:65:95:8f:
8a:ed:38:5b:61:5c:a8:51:1a:5b:e5:b7:2c:29:44:61:0c:e0:
87:63:52:38:fa:14:5f:d7:54:38:da:6a:f7:4f:a3:14:6b:fe:
a7:dc:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:41 2026 by rpki-client