Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
File: p6TiNIImhHXBuTVjfQACwv0pk7g.cer (raw, json)
Hash identifier: YZQAV6g3B/ExKkgUdw4nAqkYQoYuL2psTW+x/hqRctw=
Subject key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD4858D58066C22ED15E3856114E9342D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 14:36:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213703
IP: 185.43.32.0/24
IP: 195.72.32.0/24
IP: 2a14:ae00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:85:8d:58:06:6c:22:ed:15:e3:85:61:14:e9:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 14:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:4d:c0:c0:3a:9a:b0:08:2b:55:55:35:10:
d1:72:16:52:e1:bb:6f:5c:bf:a1:1c:43:a2:12:bd:
bc:08:ed:6a:7a:3b:87:8a:52:07:27:eb:07:74:60:
ae:46:87:52:6f:35:68:c2:0f:5b:da:f8:61:10:ad:
cb:82:29:e8:d0:49:7f:07:f9:e7:28:3c:8b:49:8e:
50:8f:a5:db:84:a8:df:b4:88:55:44:ba:f6:24:ea:
a1:55:ae:84:59:96:bd:f4:96:96:c7:8a:e8:c9:9a:
53:be:23:5e:0e:ad:09:9c:95:b5:e7:1c:00:6c:74:
24:b2:85:2d:b6:6e:58:40:39:8f:ca:95:7e:cb:ca:
2f:13:9f:9a:5f:10:81:4f:3a:24:47:01:aa:66:46:
31:ca:76:77:5d:be:05:eb:46:49:35:82:ba:36:5d:
3f:05:55:01:b8:98:c7:1a:0b:61:a8:4f:57:17:b2:
a1:0a:c7:ed:0d:74:59:9a:08:ad:5a:e3:15:7c:1f:
91:8a:fd:2c:fb:b9:c6:11:45:ae:f3:8f:ea:84:df:
63:3e:30:5f:92:cc:c0:e4:9c:15:9c:a5:b3:74:89:
34:df:9d:89:06:87:60:d0:43:ae:44:16:e1:1b:64:
22:0d:42:ff:10:04:5f:6c:76:34:8d:5c:0c:b0:b9:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.32.0/24
195.72.32.0/24
IPv6:
2a14:ae00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213703
Signature Algorithm: sha256WithRSAEncryption
67:73:90:73:a8:12:c3:1c:66:1f:ab:e2:69:23:81:f9:b8:c2:
a2:15:ac:64:a7:0f:a8:c8:0a:e2:ed:23:86:1e:c5:43:87:5e:
58:da:ce:d0:d7:2b:87:dc:00:ac:a7:f1:e1:c5:b5:f9:c7:74:
51:07:0e:2d:8e:06:cf:09:ab:3b:b3:32:fe:4c:de:e5:a2:6b:
9c:ba:c4:1a:ee:86:64:1e:16:99:75:8d:b1:ad:8d:69:a7:99:
cb:14:d9:6c:bc:ee:20:62:d8:5b:4b:ce:1c:09:ce:85:02:e1:
b6:c5:02:41:ca:24:11:a2:56:e7:38:ed:20:c9:6e:ba:27:bd:
e9:d4:c8:61:03:63:86:d4:37:e1:b7:c6:12:54:30:0f:93:01:
bc:33:24:ba:8e:ce:23:e5:1f:03:b3:86:c2:82:61:03:fd:4e:
24:db:8e:3a:21:8b:84:35:84:76:67:20:69:71:07:59:37:cf:
78:9f:15:b5:55:4d:2f:2f:f7:de:73:2a:d6:c7:73:50:de:5f:
ab:0b:c6:c6:61:78:14:4b:06:c8:e6:69:f8:75:fb:29:a7:ad:
2a:fa:40:fb:2f:83:e1:8c:fe:89:9b:f4:07:09:b0:84:82:ca:
85:77:f0:e6:e7:10:a9:d6:c8:47:de:0d:4b:86:b4:2e:69:a3:
cf:d4:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:38 2026 by rpki-client