Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.cer (raw, json)
Hash identifier: YjXaYYfNJ59p7nH+YWs9Rqb7oHs24xze1iND/XThiY8=
Subject key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F03F08333F33CB3C1142755D34BD58003
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 12:38:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 33993
IP: 85.8.201.0/24
IP: 94.131.23.0/24
IP: 2a14:e080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:f0:83:33:f3:3c:b3:c1:14:27:55:d3:4b:d5:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 12:38:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:9a:67:f0:c0:42:c8:4e:c1:51:99:d8:ab:
39:70:fa:96:1b:59:3e:7d:f3:89:ee:99:22:b9:81:
fe:5b:7d:1e:a1:ea:c9:d6:90:6e:5e:2b:ff:7b:f5:
ae:a1:31:71:1d:8f:b9:16:8c:32:43:9f:77:50:fd:
27:a6:05:14:47:62:50:40:f3:9b:9b:6a:af:b1:fa:
75:7a:fc:2f:be:02:1c:64:68:b0:67:ee:2f:b4:0f:
fe:eb:1d:15:5d:05:66:bd:6b:df:12:a7:22:9d:00:
fe:98:82:cf:42:dc:76:7c:0d:fa:a7:99:5e:3b:31:
df:34:45:4d:1a:ae:2d:5f:42:6d:93:77:df:37:62:
b1:ef:66:02:88:26:09:4c:31:f5:f4:63:21:1b:88:
5c:d5:a1:58:12:c8:27:c1:c1:c5:56:80:c9:43:9e:
59:19:80:3a:0b:6d:2e:27:10:2b:6b:44:df:5c:69:
9e:1c:87:7b:3d:61:fd:c8:0a:34:fe:c0:d4:f3:2a:
5b:d1:c5:dd:38:a0:fa:cc:3f:6c:e3:d2:dd:2e:65:
d1:07:03:05:6d:27:92:09:8c:c6:15:c2:a3:04:07:
e2:b3:69:4b:80:ec:2a:9e:f9:d4:2e:fd:55:ce:68:
5a:85:04:81:7e:6f:5b:a0:f6:e0:56:ef:ba:e0:29:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.201.0/24
94.131.23.0/24
IPv6:
2a14:e080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33993
Signature Algorithm: sha256WithRSAEncryption
b0:4a:51:26:a2:6d:01:e6:c2:a8:dd:9f:de:04:2f:84:99:90:
32:c2:bb:2c:46:a5:18:14:e1:5b:cb:0d:3e:ea:d4:c3:5c:39:
b0:16:07:7f:04:83:bd:ad:da:dd:4e:37:05:15:5c:6d:ae:14:
74:0a:5e:15:5a:88:42:ca:7c:8a:9d:43:70:b7:fb:1f:05:cb:
cc:51:28:37:4c:5e:b2:6a:6c:82:b6:74:14:67:92:29:e6:53:
36:32:50:6c:c8:de:26:48:2b:77:f7:e2:d9:a9:7b:a0:3e:98:
e3:ab:00:0d:3b:58:5a:0f:07:af:23:9d:11:e4:ba:a1:e3:86:
5b:37:51:1d:07:ef:37:f2:b5:d3:b5:29:30:5d:a9:fd:61:1e:
73:32:5c:7c:4f:fb:23:e3:f7:d9:b7:09:16:77:cd:0c:78:c1:
20:96:d5:0f:d0:eb:41:07:b9:25:d9:c0:bc:90:d2:82:13:11:
c3:e8:bb:9c:e2:39:1b:8c:6d:cb:88:cf:92:8b:e1:9b:22:42:
7e:02:0e:c3:e1:4f:da:76:61:f1:ce:4f:a0:34:b1:bd:f9:d8:
90:3d:99:30:50:37:89:88:fa:d3:90:d2:95:e4:8f:69:98:b9:
f4:45:35:26:6d:84:d6:3a:13:3a:c0:e1:5d:fc:42:a5:fb:ae:
18:9c:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:27:47 2026 by rpki-client