Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
File: 66ruVpuHPHsF7NIh27fzQnS3v1E.cer (raw, json)
Hash identifier: wEC7PtlWWz3jWoJCAkwzl9Jdfcquor2lOIo2OF7183E=
Subject key identifier: EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0134592575FCA86E1BE641015F468A453
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Aug 2026 05:08:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.102.85.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:45:92:57:5f:ca:86:e1:be:64:10:15:f4:68:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 05:08:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:5b:7d:3d:7e:51:08:d5:0e:df:95:c7:d6:
ce:2b:3c:47:7d:1d:3b:b6:77:2e:18:6a:37:f9:4e:
8f:71:47:e1:1a:65:b3:36:83:6c:d2:5e:c6:ec:54:
ce:e5:0c:d3:9b:d6:4b:fd:b3:85:38:85:29:a1:28:
c3:0f:20:60:a1:09:62:c0:f1:a5:b6:b5:fb:3f:c1:
b9:98:ce:5e:83:9e:3f:52:a4:b4:71:4f:26:8b:09:
3a:ed:53:8e:11:37:f3:53:79:d0:5d:e1:df:a7:a4:
01:b2:e6:12:87:78:c6:1e:d0:6e:04:b2:d4:8e:85:
0a:42:58:3f:c6:77:44:ff:58:13:78:16:6e:ba:c5:
31:6f:a1:b1:ae:2b:79:f4:5c:af:24:c5:f1:9f:71:
91:ec:be:1c:83:54:ad:ab:04:7f:1d:9a:e9:13:ed:
b8:48:d6:dd:12:d8:e7:97:82:16:46:51:36:cb:77:
f1:3e:a4:8f:18:e7:35:01:0d:86:0d:cb:84:b1:d5:
3f:d0:e4:30:df:af:3b:90:9a:d4:24:81:d7:1c:57:
90:f7:c1:32:fe:d1:73:ab:da:a5:d2:e5:43:96:7b:
f0:97:7d:8f:d6:d9:1e:9f:d2:03:43:b9:ca:c3:2a:
9a:bc:43:44:81:7b:7b:c8:79:8d:0c:64:57:16:59:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.85.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b4:27:cd:a5:09:41:76:67:3c:ea:b7:3e:40:f4:36:2a:e1:
6f:51:6f:ad:04:ed:ab:17:58:35:92:6d:e5:91:79:eb:2d:f1:
7f:39:03:e3:a0:01:a3:3b:4e:e9:99:5f:54:31:82:1f:f6:10:
1d:d3:71:db:f1:1e:17:63:8e:68:47:d7:98:cf:4e:b6:4e:cc:
18:cf:eb:08:57:ec:59:6a:e1:ef:11:19:7b:89:43:31:08:54:
42:aa:20:ad:89:0e:6d:76:bb:ea:ef:e7:f8:77:65:82:40:b7:
50:dc:02:b0:6b:93:47:d8:b6:8f:34:a0:77:8c:a5:95:73:fc:
a4:1a:2a:e2:01:31:b0:e2:10:94:d3:65:f1:da:e4:b0:11:b2:
d7:7c:15:46:e7:3d:71:4c:9c:49:2e:8a:1f:a4:8d:b0:9e:b6:
2d:e4:58:8a:6b:40:6e:8c:dd:9c:c0:35:ef:f8:34:64:81:9e:
b1:8f:b5:e1:ce:b4:b7:cf:8a:35:fb:fa:b9:ea:7e:50:42:26:
be:48:f6:05:15:fa:36:ba:0d:06:bd:2f:26:c1:c8:bb:55:2b:
76:8b:01:a6:a8:f2:68:2c:5c:7e:78:21:3a:a6:de:ef:d5:70:
09:ae:23:ed:51:91:ba:98:87:93:73:73:7b:4f:4a:43:55:06:
ed:7a:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:53 2026 by rpki-client