Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
File: 0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer (raw, json)
Hash identifier: /uNCFKoHAq1lNYvknZkD2fh1uxA42fOYQ/MeMYjNCzs=
Subject key identifier: D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA2CC76C744115A2440A93A87EE8E35D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Jul 2026 08:58:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57029
IP: 91.230.51.0/24
IP: 185.150.56.0/22
IP: 2a07:72c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cc:76:c7:44:11:5a:24:40:a9:3a:87:ee:8e:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 08:58:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0825b153d54ce96dc8f932abb85baa0bf8061c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:c2:88:07:e5:5e:84:a0:3b:b8:13:b8:ad:
2f:8d:a5:3f:c4:f8:fd:aa:59:bd:09:0f:9e:b9:cc:
f4:86:71:17:0e:48:08:49:6d:ef:d2:f7:98:df:0d:
b9:ed:79:7c:21:41:4d:49:4a:8d:ee:54:a3:1c:f1:
bf:7d:57:ec:89:22:9b:ca:0c:1c:40:04:e4:ce:f7:
05:3d:9a:57:81:44:35:37:e9:a5:80:4e:16:76:8d:
1b:2c:95:20:4f:ef:50:4b:cf:49:a9:7d:be:5d:da:
3a:e4:9b:bc:27:e6:a3:aa:1d:34:57:a3:57:18:b4:
96:f2:9b:56:8e:27:a2:e8:0d:e4:f3:a8:22:ba:98:
08:93:0a:60:47:23:99:84:da:a9:a5:d6:a9:a4:36:
10:cc:ea:b6:3e:e7:74:67:5c:d3:50:3b:f2:f6:b0:
f4:65:7d:3a:68:c5:e0:84:de:2e:dd:ad:97:97:23:
30:a2:52:3b:47:0b:61:66:6b:bf:72:bc:73:ce:94:
ea:cd:e3:2d:0e:9c:a9:9a:fc:cf:0f:0e:58:4f:d9:
b4:97:bb:e7:07:22:aa:05:69:53:06:cb:58:ad:bb:
0c:8c:9e:fa:10:de:82:48:1c:44:cf:51:0b:fa:bc:
1f:42:3d:a5:0f:e0:85:13:6c:e0:53:41:05:93:e1:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.51.0/24
185.150.56.0/22
IPv6:
2a07:72c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57029
Signature Algorithm: sha256WithRSAEncryption
09:d4:63:56:c8:70:f2:f9:82:64:21:d4:a0:4f:9c:b0:9a:62:
45:a8:59:f2:81:06:df:b0:c5:a9:96:1f:39:49:0d:af:fb:21:
5e:67:a1:78:88:b6:c8:b1:f6:07:e6:2d:50:4e:4a:ac:26:e2:
85:eb:95:37:95:b8:ee:91:72:6f:be:1b:03:c8:55:40:71:60:
f0:7d:c5:ab:a8:e6:bd:61:b3:20:db:71:16:f9:23:93:d0:9d:
47:00:67:2d:a8:10:f3:c4:e5:e0:6a:c2:b6:1b:86:32:c2:72:
8d:59:23:ce:35:65:25:af:48:0a:be:96:79:52:8c:f4:0c:37:
e4:5d:f4:5f:25:b0:0e:32:e3:46:39:72:37:77:84:af:b6:4d:
94:94:89:65:8e:20:99:db:b0:fe:c4:eb:c1:90:93:e4:7c:dd:
ab:3e:b6:32:3f:35:ba:6a:bc:14:45:01:36:2a:ea:90:e5:ea:
81:7f:90:b6:16:d8:6f:a7:25:e0:bd:bb:41:54:7d:e9:bd:cf:
5f:4c:f4:3d:50:cf:64:f6:de:04:68:e9:53:98:43:d4:f7:4c:
30:9d:ca:a8:f5:26:66:92:5e:4e:0e:72:2c:f4:4f:6b:d1:dd:
62:76:6f:a3:5b:b7:27:c2:c6:af:0e:20:7d:ae:f5:88:ff:db:
c5:0a:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:48 2026 by rpki-client