Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
File: seoWdpXoaSCfqnOecNGCAfYEPXM.cer (raw, json)
Hash identifier: G2qSgEndLYupy9aXeYyv0RPpKpE1khKwfY6EqHmzgMw=
Subject key identifier: B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC27D1C7DFD59BA019CDA1F4BB0E869C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 09:31:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.133.76.0/22
IP: 2a14:9a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:7d:1c:7d:fd:59:ba:01:9c:da:1f:4b:b0:e8:69:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 09:31:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1ea167695e869209faa739e70d18201f6043d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:ed:a6:ff:a7:1e:f1:d5:86:0c:f4:22:09:
25:1e:de:30:64:49:9e:dd:62:35:37:5c:48:d9:3b:
df:ff:e4:89:ae:53:05:08:8e:6b:f4:4c:f7:13:26:
a7:14:39:a2:b4:57:12:c7:44:b3:c4:41:fb:35:b9:
31:06:cb:9b:5d:d7:23:fc:b6:bd:77:b2:a9:db:ba:
d3:06:1b:e4:a1:f1:24:4f:14:49:0a:12:c6:60:68:
f2:6a:59:0c:1d:35:3f:5d:db:d5:07:f7:eb:04:cb:
05:fd:97:65:8c:5e:31:e8:05:c9:da:2d:d6:cb:36:
88:43:20:70:41:f4:8d:1f:a1:f3:3b:cb:ef:10:54:
7d:c2:fd:76:2b:1e:57:28:a6:e3:cb:0c:94:8b:b0:
10:9b:76:39:45:b5:28:6f:3d:bb:68:08:ff:1e:f7:
ec:ba:cd:a5:52:89:be:fd:cd:71:8f:48:6b:2d:28:
05:dc:be:ed:f6:22:ec:d3:da:1e:19:81:52:c3:b7:
3b:11:b8:a6:bc:cd:ac:10:0e:96:8a:00:78:85:d3:
6d:f1:a1:87:41:5f:80:4d:b7:cc:36:d4:dc:ba:1e:
27:e8:4a:78:d8:64:31:60:50:82:7d:83:69:04:c4:
e3:31:95:ca:c0:92:fb:1f:21:6d:51:fb:da:70:95:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.76.0/22
IPv6:
2a14:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:65:20:f0:6a:c7:3d:6d:43:3a:ca:0d:b8:37:df:43:ec:0f:
9d:4f:5e:21:d9:23:ba:91:e3:c2:bc:d4:9d:4d:4f:c8:0d:e5:
19:af:9d:43:5d:bc:43:79:c2:ab:31:59:56:1d:d4:dd:60:d2:
36:dd:0d:8e:01:50:47:c4:19:ed:e8:7e:73:7f:fe:79:9e:4f:
c2:5e:5d:91:13:0f:fa:1c:62:d1:b5:9d:a0:87:b1:79:2f:a9:
d4:1e:8a:d4:68:00:65:2d:37:16:91:8a:c4:0e:1e:69:7f:dd:
45:88:92:ee:9d:17:ac:3a:81:5c:e0:dd:18:8a:54:1d:38:45:
e4:af:0e:7e:86:e8:fc:a1:cf:da:00:79:43:2d:1c:8b:83:fd:
6a:1a:2b:ff:7a:fc:d4:ee:9e:71:77:18:de:a1:91:2a:c3:6c:
09:2b:2d:58:e5:a6:28:45:39:da:e7:25:8e:32:4c:e8:19:cf:
b9:34:c6:eb:1f:26:ba:d5:67:7c:fd:2c:d5:32:a4:7a:51:04:
6f:22:4b:c8:28:75:e6:d8:f4:29:5a:26:cd:45:89:31:55:9a:
67:db:85:df:e4:eb:7b:56:7e:db:79:41:5a:7f:33:e7:c3:66:
9f:82:a9:fe:ea:2f:bd:5c:5f:a0:b5:19:ae:34:74:e5:0c:09:
dc:c8:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:50:33 2026 by rpki-client