Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
File: A9G3rsab2CgwAtuxX1KCylj7OEo.cer (raw, json)
Hash identifier: DS8Ck/QQ3nIO1q/kxopKA6YBrNVcgJwxvB6gam6a/Tk=
Subject key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC642B822D14DBEB4FF881651BA8A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 37.131.179.0 -- 37.131.183.255
IP: 185.212.52.0/22
IP: 2a0b:72c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:64:2b:82:2d:14:db:eb:4f:f8:81:65:1b:a8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:b4:2a:e8:b5:4d:5e:60:7f:e3:33:de:68:
e6:2a:64:02:5b:44:0f:97:f1:5f:62:80:e3:fd:32:
65:f6:ff:98:a3:68:8e:0c:4e:d3:fc:72:2a:9f:e7:
d7:ce:20:f6:b2:ce:8e:eb:4c:80:7d:5f:9c:18:6a:
17:7d:95:e1:39:20:2d:12:9a:7c:fd:64:9c:53:e3:
ed:40:53:8b:9a:96:ed:2c:0f:8a:67:47:7f:8c:a1:
e1:98:77:21:68:79:53:aa:e1:6f:ef:a9:81:5d:a1:
03:79:80:55:95:eb:a0:95:43:e2:d3:70:0a:19:83:
6c:dd:21:5e:31:9c:22:a2:30:47:69:88:e8:a2:da:
28:0d:fb:4d:9d:80:d8:75:81:e4:b9:5c:3e:9d:ae:
a6:90:ca:da:b5:66:79:a7:5f:50:9b:85:f5:d4:2a:
76:b3:e5:3b:50:a3:28:44:80:65:52:3e:9a:c0:49:
8b:c2:9d:22:36:2f:2a:29:5e:76:ec:eb:e4:c2:8d:
5b:70:93:92:7e:d8:fe:f1:ee:2f:61:97:8b:07:fd:
13:0e:e3:ca:bd:23:c5:fc:3b:b6:83:cb:4b:5a:8f:
70:83:99:ad:27:4a:df:91:8b:cc:5b:e0:83:16:34:
65:dd:2d:fd:7a:7c:4e:08:14:cc:c0:c4:cc:f4:88:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:2f:af:07:0f:75:22:a2:56:c3:d6:b4:bb:cf:61:d8:ed:6d:
c6:f8:9c:bd:4e:48:ea:82:03:49:a3:2a:24:33:29:f1:f3:1a:
3e:d3:28:a0:92:61:6e:fe:ce:63:a6:27:6b:4e:47:86:88:c2:
22:80:56:7a:ef:0b:6b:07:ac:d7:dd:81:d6:7b:f0:97:87:45:
35:54:9d:a2:ea:ec:bf:1f:e7:c2:72:f1:c1:ef:fb:26:f5:de:
f8:85:d4:8a:0f:9f:4a:b9:03:4d:30:84:32:36:57:80:b6:5e:
6b:0e:5a:db:4a:15:3b:1f:f5:37:29:8f:3a:5e:a9:6a:76:1c:
38:db:f8:a1:af:c0:31:38:6f:91:a7:af:3b:6a:03:94:2c:83:
87:bb:37:80:59:26:f5:13:26:e7:f9:82:a0:72:ba:1e:40:00:
50:50:3e:65:f5:09:e4:8e:25:20:d9:ab:fd:fb:9b:7c:84:d4:
b7:69:5c:32:49:6b:22:f9:46:09:57:ce:ae:10:99:42:56:7e:
8f:9e:9b:40:70:bc:74:e7:e4:5b:ef:49:5a:1d:2a:9c:2a:9f:
93:5e:c2:b8:b8:54:26:b7:4f:dd:94:81:6e:94:ff:64:cc:d1:
55:0a:39:a7:b6:12:f4:84:7f:f1:90:05:ac:b4:73:a0:43:7a:
99:5e:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client