Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
File: raIk0OXYWSPj7P_C173W-b7Q3lY.cer (raw, json)
Hash identifier: JkyZoQ3WVbTUUw5bPTE39OfOCQsq/oBSD/MysCVEZjU=
Subject key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F97D2608C1CAD400E87FA2FE278C91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.208.157.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:7d:26:08:c1:ca:d4:00:e8:7f:a2:fe:27:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:0d:f4:a7:cf:fa:76:e5:ad:2c:7a:33:c1:
45:4b:1b:3f:7c:af:1d:a0:37:9a:22:d4:29:25:05:
40:41:90:ba:5a:78:3e:d7:9d:33:44:65:43:36:d1:
ac:12:38:57:e4:6e:5a:55:34:f1:8a:19:bc:55:50:
ed:7c:3c:ac:26:89:ee:bf:6b:48:70:68:aa:16:75:
9a:f5:c6:9a:ea:b6:d1:57:aa:39:de:78:2b:37:c5:
f4:b3:7e:00:5e:93:f3:c0:84:38:3f:8e:52:8b:29:
2b:69:1e:a5:4a:b3:a8:35:68:c5:c1:80:7b:71:a4:
e7:46:21:2d:d1:71:0f:5f:9b:08:47:f5:16:19:e0:
fd:17:4b:e4:fd:be:cb:22:04:5b:d9:f8:e9:18:84:
f3:5c:ff:2b:06:fb:69:13:68:e2:4b:13:4c:ee:00:
0d:20:49:e6:a7:72:07:7e:40:0d:c2:d6:81:d3:65:
b9:e9:94:b0:3f:de:45:38:f1:12:a1:4a:b2:49:29:
2b:e9:b6:8a:2f:ca:1f:c7:20:f0:49:56:71:64:f3:
c1:63:cf:ab:19:ef:71:c2:22:f3:67:d9:91:6e:2a:
12:cd:b9:b3:f3:3f:3e:66:81:1e:22:6b:0b:02:7d:
fd:9c:93:90:b4:a9:7d:b9:c5:33:67:e0:dc:2c:9b:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.157.0/24
Signature Algorithm: sha256WithRSAEncryption
46:59:ec:30:c5:26:3c:ea:aa:b3:04:76:4e:a5:c1:67:47:6c:
01:88:82:0a:78:d9:c6:2d:f8:5e:55:b6:80:f3:7d:fd:eb:f8:
a4:cf:45:31:57:64:89:24:c2:dd:fc:e1:aa:eb:fd:44:e4:98:
4a:45:7e:3a:a1:11:1d:d6:43:9e:b8:17:97:05:7e:01:d0:82:
e8:b4:76:05:56:41:1c:7c:08:8f:d3:f4:0d:49:ad:ed:ca:64:
c7:2f:01:2e:3b:4e:ec:76:12:84:83:40:c5:79:69:fa:8e:25:
dc:7c:e5:fd:a4:df:ac:5c:ae:41:bf:c0:59:9b:43:c4:f3:80:
81:83:41:df:4a:15:0e:c0:2b:3e:50:56:5a:66:90:58:07:27:
b0:f5:82:1c:67:54:c3:3c:20:c0:25:1b:47:9e:8c:ab:73:9f:
6c:cb:3d:47:42:55:5a:94:9e:b6:87:9d:7a:eb:d2:91:56:13:
5a:9d:0e:80:ef:a0:17:78:e2:7d:59:6a:13:e5:34:b5:25:dd:
8e:75:dd:c6:5b:03:d3:38:2e:3d:ca:7b:3a:f0:0c:49:af:8e:
85:14:a9:64:43:6b:86:db:ad:48:56:28:14:d3:ea:e9:dd:aa:
1c:51:73:6d:8f:93:bc:ec:cf:f4:40:76:37:89:45:74:42:03:
13:f1:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:21 2026 by rpki-client