Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.cer (raw, json)
Hash identifier: bueWEpJj5WrD4dgWSjFrnM+bhSujLSOWWrMSKlemm8c=
Subject key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F04430354476300ACEB088146E4132828
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 14:08:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219330
IP: 185.83.68.0/22
IP: 192.145.108.0 -- 192.145.110.255
IP: 2a05:3cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:43:03:54:47:63:00:ac:eb:08:81:46:e4:13:28:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 14:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:11:fb:0c:9d:8f:95:b2:61:12:e8:aa:44:
65:1a:42:df:c8:d5:04:02:0e:89:89:69:69:0b:4c:
ec:ca:a6:17:5a:d8:42:cc:6d:ae:0a:8a:54:e7:be:
27:b5:53:9f:54:77:4f:d9:e7:94:1d:f3:9e:bf:48:
46:8c:d1:2d:02:5d:5b:69:e9:c0:45:7a:eb:42:b8:
b3:30:31:84:6b:86:25:c4:8c:6f:35:e0:de:4c:98:
78:8a:38:08:0a:0b:e7:de:ce:af:b3:16:e2:bd:bc:
61:dc:50:94:11:1c:c5:bb:65:9d:69:47:d7:96:7d:
cf:d7:91:f1:5f:63:02:d0:c1:0b:59:5f:21:79:e6:
f4:10:bf:55:ca:e4:85:8d:99:ab:ed:66:30:dc:1a:
ca:45:85:50:a6:76:e0:03:e0:25:c4:f1:01:94:d1:
36:ac:dc:2e:a3:d2:a2:94:11:2b:22:e4:c7:08:5b:
87:7d:61:86:f5:b0:f4:11:4c:19:52:64:01:5e:2d:
2e:89:e3:f6:e5:f5:09:f8:b4:c5:17:22:4b:d4:0b:
9b:7a:25:63:f5:c6:ce:21:b7:6d:32:f0:e7:c1:08:
37:e9:bc:0c:5e:b9:ab:9b:f5:e7:ba:3f:d9:26:8f:
53:d0:df:c7:21:33:13:d8:f4:8f:ac:99:23:81:19:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.68.0/22
192.145.108.0-192.145.110.255
IPv6:
2a05:3cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219330
Signature Algorithm: sha256WithRSAEncryption
00:0b:cf:39:65:80:2c:55:72:e5:8c:4f:16:99:27:7f:95:41:
cb:4f:25:71:ce:ff:f4:a7:b8:73:bc:d7:9b:2b:e2:40:c5:65:
94:a2:dc:b6:35:94:41:76:67:4d:54:e2:71:65:63:5c:19:63:
df:73:1e:3b:0e:c4:75:34:ea:dd:0f:9a:3c:60:6f:90:bc:6a:
ed:c1:ad:d6:fb:56:6c:1a:06:53:d4:b0:aa:bc:1d:36:7a:d1:
2d:c3:ee:31:b3:88:6b:e8:c3:56:e4:eb:66:29:79:45:31:b8:
c6:d2:2d:5e:67:57:c1:44:69:49:cc:8d:1a:57:5d:1a:f3:ab:
e9:01:7a:e1:cf:1a:ef:56:50:59:7f:03:de:f8:25:f3:bb:46:
49:8f:fd:01:4f:46:b6:69:ed:5c:31:e6:ba:ee:67:6b:9f:f0:
46:fc:79:71:10:55:ab:94:e2:95:70:30:36:45:39:c7:be:db:
61:47:fb:0e:3c:8a:e7:63:db:77:e7:e3:1a:ba:9a:03:de:95:
19:0c:12:9b:61:ae:c3:a1:1a:82:e9:93:d5:96:30:da:8c:a8:
41:dd:6a:6d:ad:07:90:c0:73:4e:46:0d:a0:53:95:90:43:c4:
c0:2d:76:fc:90:64:be:2f:51:fb:19:78:7d:45:04:bb:1f:72:
35:c7:d2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:16:59 2026 by rpki-client