Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
File: 2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer (raw, json)
Hash identifier: dsBHrKQkcnHFJhyz88fTClYPyco0sVdmyTtttS1d9KU=
Subject key identifier: DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FACAD56E23D5BCB600E4680ACEDE0EA08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 07:01:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.189.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:56:e2:3d:5b:cb:60:0e:46:80:ac:ed:e0:ea:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 07:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da4c9e6b8385015d1172fb79cf90a813fbaffb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:ef:27:b8:40:f7:b9:68:f9:41:d2:29:17:
2c:43:99:c4:e7:c5:b6:60:21:17:56:3f:c7:69:f7:
47:63:1c:ce:2e:d2:26:f8:7c:bc:d5:23:f8:a8:de:
74:2a:a4:85:4e:3e:6c:73:a8:1e:fb:7d:fd:71:2f:
b0:ee:c4:b7:fa:e6:ff:82:86:09:ef:19:0c:76:fb:
a0:41:eb:d9:0c:dd:4c:a6:9f:f2:22:01:08:6a:ca:
a4:41:ec:90:18:1f:cb:d8:5c:c5:38:a5:9d:b6:f9:
b4:15:84:35:32:d6:66:98:b8:4a:b4:c6:a2:64:5d:
4b:a1:7a:1c:45:d8:26:b3:c7:ec:5f:79:4a:c4:4d:
b3:87:2e:f1:aa:24:2e:a1:80:fd:2d:21:99:0b:76:
6f:92:e0:2b:a3:96:be:f3:ea:94:3c:1c:02:39:5d:
ab:f7:a4:f8:35:13:8a:5b:94:85:45:62:8f:ab:49:
eb:3a:21:d9:36:8e:b3:a5:be:96:e8:3d:b4:bb:17:
03:a4:4e:94:e8:9d:de:96:05:6f:34:89:99:8d:65:
46:b3:ad:f0:b7:50:9f:0d:c3:ae:2c:e6:d2:cd:ba:
4f:23:eb:58:06:55:dc:dc:92:c1:c4:f5:15:a4:0d:
c2:0e:7e:10:3c:29:7b:0e:5f:a9:7d:1f:ff:07:07:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.14.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7f:2e:2b:de:df:8f:1d:af:6e:5e:57:82:58:30:8e:bb:50:
c0:59:6e:8d:82:a2:da:21:49:99:45:89:47:6c:6e:c4:d9:56:
84:9a:5c:ef:bf:27:58:00:d6:93:4a:57:ed:2c:da:ae:30:0a:
02:70:28:5f:4d:96:a5:a4:91:fd:73:77:be:c8:45:27:38:4c:
a0:13:e0:57:6f:3c:ea:69:76:d2:2c:dc:83:1e:9b:b1:a4:2d:
4f:5a:f1:15:79:c3:d1:44:b0:2d:ac:87:34:1e:9a:2e:67:88:
1b:56:cf:e6:a8:5a:d7:3f:f4:34:47:2a:0d:af:dc:8f:ce:28:
28:dd:34:7f:b1:47:a8:2f:b6:39:79:c3:83:7d:ea:5c:41:20:
23:20:a8:59:97:31:7b:8c:05:94:09:f4:eb:6d:a5:32:77:66:
9b:19:58:8c:98:da:2c:f4:b7:c2:91:10:e4:82:a4:b2:64:bd:
fe:59:6b:56:c8:fd:ec:b0:3a:33:33:59:3e:be:40:b6:cc:10:
a8:42:eb:97:43:b7:26:64:79:00:1c:ce:7f:c1:27:d1:1a:30:
28:1e:b0:07:9e:e4:16:76:19:13:dd:ca:f5:e3:65:7c:d2:e3:
15:35:81:dc:4a:97:b4:7f:24:7c:8a:33:56:2a:72:15:b0:02:
c8:8b:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:42 2026 by rpki-client