Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0JgULl7TO9m4tWTQkAeEfwPFjO0.cer
File: 0JgULl7TO9m4tWTQkAeEfwPFjO0.cer (raw, json)
Hash identifier: KTZlgK/ZHGc/Hc8aFbmXtSvjHSODMQCg1AKPR4fjPHw=
Subject key identifier: D0:98:14:2E:5E:D3:3B:D9:B8:B5:64:D0:90:07:84:7F:03:C5:8C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E81E9D763CE7AD681D1C5A238121F1AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/0JgULl7TO9m4tWTQkAeEfwPFjO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 13:05:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 139.184.0.0/16
IP: 192.12.1.0/24
IP: 192.33.16.0/24
IP: 192.188.63.0 -- 192.188.64.255
IP: 2001:678:718::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1e:9d:76:3c:e7:ad:68:1d:1c:5a:23:81:21:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 13:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d098142e5ed33bd9b8b564d09007847f03c58ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:48:bf:eb:ec:67:55:32:40:f1:a1:63:9f:
07:db:0e:e2:cb:4f:ef:26:98:d1:1a:3d:73:af:c9:
56:9b:52:55:e6:df:27:8f:b3:e3:66:1e:66:fe:92:
41:a1:e3:94:ed:39:0f:80:ea:31:1d:aa:e8:53:8c:
07:2c:cb:6f:67:3e:7e:ac:fb:27:5b:5c:9c:d5:0d:
c4:be:0f:b9:95:2a:d2:3f:8c:10:56:5f:15:27:dd:
2e:a3:ad:c8:b1:75:95:5f:29:26:09:b9:24:8d:82:
b9:83:5e:14:61:51:e0:3d:86:45:bc:8e:49:ce:95:
cb:90:09:ff:24:42:70:c4:13:a3:82:de:0a:65:b6:
c3:c7:03:90:84:e3:b6:32:90:6b:96:ec:39:a3:86:
4e:c0:69:fe:30:44:c3:26:96:0d:82:d0:43:f0:4a:
8e:43:53:16:c1:e3:ba:26:f5:d9:b2:ea:c3:0a:9a:
78:89:c7:77:a6:40:09:bb:89:ae:87:14:81:54:82:
44:c7:05:db:ca:25:f6:f7:7c:ff:1f:63:cb:13:e3:
1d:2f:53:a0:8e:ac:97:92:d3:2f:c6:bf:89:60:d6:
67:be:a5:93:21:1c:73:5e:00:29:6c:b7:c2:40:5b:
20:55:7f:df:76:a2:5e:0a:54:86:a9:cb:f0:b9:dc:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:14:2E:5E:D3:3B:D9:B8:B5:64:D0:90:07:84:7F:03:C5:8C:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/0JgULl7TO9m4tWTQkAeEfwPFjO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.184.0.0/16
192.12.1.0/24
192.33.16.0/24
192.188.63.0-192.188.64.255
IPv6:
2001:678:718::/48
Signature Algorithm: sha256WithRSAEncryption
08:d4:67:ea:a5:33:69:28:3e:4e:80:f4:c5:c8:e1:6e:8d:24:
e6:13:22:2c:2d:09:9d:c7:3b:f3:f0:98:a7:fc:00:c0:3a:bc:
cd:0a:af:fe:ac:0a:8a:da:53:58:91:3c:3b:10:13:7b:0a:73:
3b:40:cd:62:d2:d3:c1:e5:a9:7f:02:af:c5:8d:21:82:be:c3:
7a:70:56:c0:b6:33:9e:8c:8a:8b:c8:94:ae:26:c2:a5:54:b0:
bb:a0:14:ed:fa:93:a1:99:14:32:51:28:30:e8:a0:c4:e0:c7:
45:64:55:73:32:0b:46:63:d7:66:32:00:47:2c:d3:95:d2:74:
1e:af:b3:30:8d:2a:8a:6d:a5:2b:ce:7c:ee:67:0f:fe:97:30:
e4:9b:6c:cd:d5:06:54:cc:f8:ac:20:aa:4b:e3:84:0d:f7:a4:
98:f0:f8:35:a1:22:80:03:34:3a:23:34:84:5b:4c:00:5d:07:
f2:df:b5:a6:06:fb:4a:62:bb:ed:44:9e:54:ac:b6:1e:da:1d:
f5:6e:7d:7b:05:e1:75:bc:e9:71:64:10:17:56:54:42:69:f5:
d6:41:cc:cb:03:70:c9:84:9d:99:37:c8:33:5f:5f:53:78:49:
6e:d5:0b:f7:aa:7b:cc:c3:8c:63:bc:77:5e:13:41:de:17:5b:
fb:a0:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:19:08 2026 by rpki-client