Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
File: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer (raw, json)
Hash identifier: Fa7D1qs2GGdkpFCjztd47ZnnH+8YqOce3SZhODgupBo=
Subject key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD3D3170022F7C0028912F4704B907F42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 11:21:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 81.172.32.0/22
IP: 81.172.112.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:d3:17:00:22:f7:c0:02:89:12:f4:70:4b:90:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 11:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:cc:3a:1c:61:02:3f:de:8e:9f:4a:1b:2a:
ed:f4:b9:d6:72:bd:61:3c:5f:95:92:38:b2:8e:42:
ff:08:e1:ae:db:6a:7c:5a:14:00:ba:76:fb:83:4f:
cd:fc:f0:72:5f:a8:d6:94:71:1e:a9:4f:88:3e:19:
fb:ae:ba:d6:31:aa:76:92:2e:cb:78:f7:31:e3:cd:
58:30:96:55:82:50:c3:d4:dd:db:c3:45:fc:0e:d5:
71:c2:96:16:c3:e9:71:05:70:d4:82:24:99:7a:86:
b0:d5:4c:ea:49:d5:4d:e8:8c:12:d9:b4:7c:f5:cd:
16:31:57:bc:38:f7:2a:b4:4b:6e:d3:d9:48:09:ec:
41:87:58:ac:1f:23:e9:4d:09:33:18:5e:6c:dd:58:
a4:22:36:46:79:94:2a:d3:2c:f9:b6:15:d8:08:12:
ea:05:cc:e9:c6:f1:d4:cf:a6:91:bf:9e:5f:a8:85:
32:26:85:a2:f1:83:ba:89:65:d9:6b:10:e0:53:22:
4a:79:2a:c7:da:c8:fd:b5:30:04:0c:aa:de:36:ee:
6c:f5:f5:80:f5:ea:7a:ae:b6:6e:f1:cf:21:36:c3:
c1:4f:68:64:db:9b:12:ab:fd:d9:22:40:94:8b:90:
7e:56:01:cb:c1:2a:80:01:c1:28:e4:6d:b7:29:15:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.32.0/22
81.172.112.0/22
Signature Algorithm: sha256WithRSAEncryption
31:98:49:1e:45:4a:2c:3c:de:a0:65:28:6e:35:7e:14:47:73:
80:51:f2:6d:8f:68:05:24:11:fb:5f:a5:dd:8b:62:34:11:48:
c5:7c:36:d6:b8:05:c2:7a:16:4b:67:38:b4:fa:76:6d:a7:2a:
40:f7:84:72:75:43:34:4c:ab:17:36:3d:d5:e8:b6:c0:e0:46:
73:b7:dd:b0:a2:66:40:2c:18:7e:54:87:9a:e6:31:02:ac:c4:
a9:0e:9b:04:db:b7:23:72:04:bd:8f:23:9b:d5:15:5a:b3:69:
76:39:33:2b:88:33:4d:e9:37:b4:85:5c:12:16:d8:9c:a1:8c:
77:61:85:85:6d:dc:c4:f7:22:b2:fb:aa:ba:06:f2:59:9c:00:
75:bd:fb:65:34:fb:79:09:10:cd:81:97:cd:36:a4:be:dd:f4:
e1:44:9b:e4:7f:a3:11:54:56:0d:0f:b1:27:9d:44:62:b1:50:
10:1f:f9:ac:eb:b2:20:bb:ba:29:0f:44:fa:4b:43:b1:e3:dc:
09:88:7a:83:a9:26:81:7c:51:6d:6e:de:bb:e4:00:63:48:01:
92:9b:6b:d8:1a:8f:02:81:c0:1a:81:b0:49:70:d0:e4:a0:35:
42:8c:17:b4:0a:b4:3f:84:3c:e1:e7:c8:2d:55:a5:4b:f0:75:
50:b0:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:48 2026 by rpki-client