Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer (raw, json)
Hash identifier: b16orCWdIkIG0vFUYh3eQ2pVjtz6N/C5sSRuviF8/9o=
Subject key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA55CEF49E899DB48236AF826A9790
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.102.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:55:ce:f4:9e:89:9d:b4:82:36:af:82:6a:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:56:d3:63:4d:57:49:4c:91:fd:e9:bd:5b:
13:61:12:fa:c4:ee:be:a8:e7:47:5d:3f:67:87:4a:
9e:67:a3:31:e9:aa:8f:dc:3f:e6:18:c1:e7:6c:b0:
fc:fb:86:0a:15:c2:aa:c7:3c:25:fe:64:07:07:fe:
a1:e6:c1:78:7b:87:e4:86:e3:b1:72:cf:0d:38:5c:
41:e5:c3:1c:e0:65:24:25:98:06:38:bb:d9:30:eb:
30:b1:5c:9b:36:38:8b:e4:c5:3d:ac:8a:bf:a0:ad:
c4:6d:73:43:83:c0:be:f5:78:c5:41:84:a3:c1:a0:
a2:02:d8:2a:54:95:ad:b5:f2:e6:5f:0b:24:3b:16:
59:10:e1:74:b9:5b:5e:2b:77:a7:83:9f:34:01:bb:
f1:21:91:93:36:32:81:17:e4:f2:2d:e9:58:d4:c3:
59:51:56:c5:18:a1:56:c9:73:a4:04:51:df:ae:a1:
ed:d6:d7:77:33:5a:b7:4c:54:e7:ec:d2:bb:e0:e5:
9e:5d:9b:c7:7e:33:92:e2:66:f9:8d:66:30:7d:0b:
9c:32:16:06:56:58:3b:da:ac:04:d2:f4:57:72:fb:
5a:d2:c7:dc:21:48:5c:a5:a2:19:94:40:6d:e3:9a:
fa:cb:4f:57:89:48:c8:34:80:53:22:d7:ec:6c:37:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.190.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e0:e6:d3:96:86:be:ce:a9:b3:a9:59:53:ca:cb:d9:63:1a:
8e:fb:9c:27:8c:aa:a5:32:64:ae:20:0d:77:61:68:a8:ea:36:
12:bd:d6:ad:b5:02:82:6f:bd:14:fb:54:1e:5d:64:9e:5d:e4:
0e:4d:24:a8:55:fb:31:56:bd:63:d9:89:6f:67:a1:c3:53:67:
47:0d:8f:b1:3a:61:78:55:12:d2:74:a9:3c:45:9c:d6:a2:bd:
c6:26:c3:ca:fd:8d:81:bf:71:ee:f6:42:3a:f3:12:ac:a9:0c:
89:84:e2:4f:e0:df:ed:54:20:62:a9:1b:01:8c:5e:e8:9d:63:
6f:43:14:2d:a1:8e:f1:95:55:be:1c:76:0b:04:2d:d6:d8:fc:
01:6c:da:7a:2f:81:f5:b3:7e:22:e3:d0:99:5b:e1:f2:f8:af:
c3:c4:f1:4b:5c:b3:3b:45:18:5c:6e:e8:1b:0c:f7:ec:32:03:
28:51:60:80:bf:29:32:de:2c:0d:58:52:b6:9f:07:15:d4:7f:
2a:67:38:cd:0e:7c:b3:4d:59:3a:1c:de:c2:5c:2e:f2:13:ee:
ca:a9:4b:e5:99:c6:05:28:6d:a1:0a:1e:cf:27:07:47:ab:8b:
9b:b9:7e:c2:bf:11:d2:fa:f4:ef:73:6f:3e:2f:ed:4d:ad:2c:
f7:59:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:05 2026 by rpki-client