Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
File: t-2iAv8dfzUSexHeodUPNn6i6Zo.cer (raw, json)
Hash identifier: dh/atNVpYE5LRpYmWY80JT2XLAtpoxb4/pUIE7St0bw=
Subject key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F46CE4FD199609562E5C7DF4D6379D14F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 12:15:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203757
IP: 2001:67c:7d0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:ce:4f:d1:99:60:95:62:e5:c7:df:4d:63:79:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 12:15:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:67:30:57:f5:87:ef:cf:ad:55:b6:ad:24:
2f:92:37:28:f3:ed:2e:c4:df:fe:d9:ba:cf:ba:c7:
dd:05:1d:c9:24:3f:e4:9f:34:a7:30:ef:55:c8:2d:
ab:9d:8e:b7:cf:ee:26:9f:d0:46:db:a4:15:7c:76:
be:d8:38:2e:aa:c2:d1:9b:c2:ed:f4:1f:bd:fd:44:
3d:4e:38:65:75:f4:a5:d5:d5:fc:f4:50:31:e6:91:
2f:66:91:ac:4d:6e:8e:11:b3:dd:7d:0a:f2:17:6b:
11:e1:62:7f:92:1b:14:68:47:b5:ca:bf:08:d6:d0:
95:30:01:f2:09:f2:2f:19:a8:10:57:40:12:60:f9:
2d:3e:1c:7f:98:a6:65:b7:59:77:3a:f0:7f:8e:5a:
fe:6b:28:3c:78:cc:3b:ae:0e:01:58:ce:dd:29:6b:
df:f8:de:a4:4d:2a:c6:68:36:d8:18:a9:46:59:f4:
5e:2d:ab:f8:43:38:8b:51:56:73:75:19:52:d6:1c:
b6:d2:41:77:4b:a1:ea:99:b8:0b:52:fc:33:2d:e9:
00:44:2d:26:3c:c9:23:5e:99:e7:ff:40:6a:3c:26:
2f:c5:95:61:26:24:a9:c9:3e:10:0a:e0:8e:d7:8b:
a9:5f:8a:81:ea:f1:18:77:2c:54:98:03:3c:da:d1:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203757
Signature Algorithm: sha256WithRSAEncryption
94:da:bf:63:29:e7:4f:bf:29:09:95:df:68:2b:8d:25:1e:c6:
5a:1f:b3:0c:86:02:12:f8:94:c4:8b:bd:17:d6:46:90:ea:f7:
09:b3:1a:73:c0:92:6e:88:84:99:e8:fe:7d:42:81:3f:1d:ec:
77:a3:bc:cb:66:20:a4:bc:5c:91:96:a7:74:5a:43:43:4a:84:
1c:50:7b:ec:ac:4d:74:36:6a:38:ea:59:1b:c1:8e:19:3b:76:
31:94:c6:f7:4e:27:74:44:2b:73:4a:0c:9e:af:7d:eb:6b:e7:
87:86:e8:c5:1d:0b:c2:cd:04:21:2a:62:a8:c8:dc:a4:82:d2:
a3:d1:aa:5d:bc:c0:84:b8:a7:9b:29:17:e7:c4:2b:74:8a:4c:
41:8b:ac:44:92:2e:0a:17:81:18:1a:4a:49:3b:d0:33:03:76:
d8:54:4c:05:ce:ae:7c:5e:f1:0e:6a:43:46:4a:26:13:51:1c:
79:0e:88:ba:f3:c9:c2:b5:78:cf:17:c2:2c:69:9d:8c:eb:ab:
97:3f:67:8c:02:82:f0:db:b6:44:cc:73:92:9c:df:86:f9:56:
b9:d7:6a:78:53:7f:0e:7e:30:53:99:1d:95:5c:43:ea:d5:63:
a8:dc:10:b6:b4:9f:89:6c:22:a1:3e:27:ca:55:13:8a:e5:96:
9e:90:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:24 2026 by rpki-client