Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.cer (raw, json)
Hash identifier: jvroFl7n5oiF40SL94EEMwC44B+DwEa4O85s7z6yQas=
Subject key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA939C5CCFBF7D6F1B88EEEAD41F50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.190.17.0 -- 185.190.18.255
IP: 2a0a:40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:93:9c:5c:cf:bf:7d:6f:1b:88:ee:ea:d4:1f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:bb:2c:17:88:0d:49:13:7e:7e:49:de:7c:
7c:67:b5:0e:cb:d6:5b:25:d0:b2:e5:a7:b7:a1:da:
f6:1a:49:cf:cf:8d:46:06:d8:1f:62:82:43:db:88:
09:c8:bc:88:48:63:9f:c1:50:9d:d2:31:04:ef:ad:
da:f3:b6:d8:02:f4:38:80:4d:a1:3b:f8:42:db:e8:
65:2e:dc:98:13:95:7c:dd:f9:71:12:44:fe:28:08:
02:ad:eb:b3:7e:62:5a:98:78:d6:a2:73:42:87:57:
65:fb:2c:31:9f:a4:62:23:b7:5e:79:fa:59:23:79:
f3:f1:32:63:58:be:bc:38:67:8e:af:a4:5d:f7:3d:
b3:ec:81:38:67:43:35:36:50:39:4e:29:b6:d4:90:
0b:90:76:46:82:23:7c:b8:c7:09:48:db:c2:e7:03:
d0:ab:48:ad:ad:a1:fc:50:d6:a6:5e:e9:84:31:66:
27:04:ae:1f:39:db:06:07:b9:b5:50:df:6c:50:4a:
c4:4f:e6:83:3b:74:36:0b:78:eb:3e:42:05:35:9c:
3c:e5:9b:b3:ad:b7:23:3c:2c:57:1f:f9:1e:ed:74:
0f:77:9e:df:41:fc:5f:45:e1:2d:0c:80:f0:07:6c:
73:05:66:dd:74:85:64:9a:ca:3e:ac:c5:9c:23:5f:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.17.0-185.190.18.255
IPv6:
2a0a:40::/29
Signature Algorithm: sha256WithRSAEncryption
a2:d7:cd:28:8b:8c:eb:0b:16:1c:42:7b:c9:03:e6:56:06:d4:
f3:76:93:f2:04:76:b9:3c:9f:f5:0e:61:a4:55:02:14:de:66:
01:b7:b8:63:f1:0f:cd:dc:5e:5e:4c:c6:57:90:98:b0:62:1a:
77:b0:8d:81:23:4f:96:fc:6b:da:d9:4c:94:12:85:07:9c:06:
6d:d6:77:de:24:09:59:36:ac:b2:bf:67:32:26:07:d6:13:c6:
a2:88:fa:20:f9:22:e6:53:ff:f2:23:2f:ab:a8:60:dd:36:8d:
18:c5:c3:1e:b5:db:40:d3:96:ce:15:29:34:07:0f:b1:a9:01:
56:40:d2:cb:06:db:9e:37:cb:bb:59:a2:59:de:6c:4d:14:27:
e3:89:5a:93:3c:fb:04:49:d2:9c:ff:67:93:53:b4:5a:58:91:
0f:ac:61:67:3f:de:5e:bd:8b:be:7a:18:8c:c5:e9:27:9f:25:
1e:b2:dd:2a:cc:e5:76:9d:da:31:0d:af:9d:e4:64:81:df:1d:
1b:f9:b0:5b:43:7d:c9:ad:61:23:52:ba:c2:2a:b3:11:a5:05:
12:45:b9:f0:9c:38:c8:24:fe:d9:50:40:2e:fc:78:7d:46:5c:
e4:7c:ed:80:32:65:1b:70:9d:8d:68:3e:0f:90:3e:d4:68:39:
1c:a1:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:26 2026 by rpki-client