Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
File: DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer (raw, json)
Hash identifier: ZzMYo7KmaIyhMB45wa1Hx3oeYLtvJd/1k29E7oSFQBY=
Subject key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E903FC4951AC5587C56BA3D8A1787C475
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 04 Jun 2026 01:29:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a0a:d680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:3f:c4:95:1a:c5:58:7c:56:ba:3d:8a:17:87:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 01:29:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:3a:68:07:23:82:be:22:10:79:b0:b0:86:
41:38:af:8f:e1:84:94:2a:4a:ff:6f:d2:10:82:e2:
92:f3:18:51:53:bb:46:65:1c:11:be:59:3f:38:57:
9a:1d:e6:3e:b0:8d:54:83:4a:8b:64:3f:fe:92:1e:
ec:57:3c:31:ad:79:39:97:9b:71:d2:0e:2e:b5:91:
0c:90:26:29:45:f7:36:aa:2c:8f:aa:cb:e8:f5:87:
e8:2d:c8:66:fd:0d:a9:1e:e0:1b:28:2b:b9:2a:7f:
8d:71:4c:87:26:89:57:d5:d4:22:12:dc:e3:22:19:
00:e8:1a:f5:01:2a:ca:38:ee:3e:93:9f:b5:11:60:
f0:49:b9:39:40:2b:71:2e:3c:49:c3:02:88:72:15:
fe:b1:d2:5a:86:b6:9f:2c:7f:65:cd:0c:7e:74:0c:
23:f8:9f:9c:df:f5:f6:3e:13:ad:1c:cf:91:05:8a:
d3:8e:03:3d:dc:5d:04:3d:d6:e3:0e:b5:e9:a9:be:
f5:ff:f5:16:d8:4b:69:d8:ed:55:b0:ce:0d:71:29:
73:f6:da:c0:13:34:9d:1f:8e:65:67:c9:54:a5:45:
b9:b3:7e:40:0a:30:99:5a:2f:eb:53:80:ed:a4:72:
15:64:60:25:3a:86:af:c6:55:ad:6c:e2:bd:ae:8a:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d680::/29
Signature Algorithm: sha256WithRSAEncryption
84:0c:12:21:ad:85:57:87:48:2e:7a:51:43:fc:c3:57:92:c7:
2e:f8:06:b0:b2:13:8c:69:f6:d8:eb:c6:5a:35:b0:d8:30:c9:
d1:d4:89:86:bd:68:b7:c0:f3:89:7f:13:2f:b3:f6:23:8b:9b:
20:a4:89:b5:68:94:d5:82:ea:2f:5f:f2:4c:71:d2:91:c0:a3:
1b:ea:9c:63:8c:95:c7:06:ed:fe:ee:ca:65:11:e2:c1:47:c4:
0c:d3:e1:ed:ee:96:02:01:66:72:d9:12:4f:77:a2:80:50:45:
a6:82:86:98:39:ee:21:b6:88:37:e9:65:a8:a3:3b:96:be:7b:
85:6a:05:dd:ab:84:54:6b:d8:90:d2:7e:4b:92:51:08:75:12:
98:f8:40:c2:41:64:00:f3:4e:95:fc:80:8e:04:08:53:46:0e:
14:b3:1d:26:2f:f4:d8:a7:83:1d:58:e5:0f:5b:80:a5:f3:fc:
db:6f:1f:a3:72:9a:50:bd:d5:72:ab:63:47:a0:c0:f3:15:92:
cf:52:c0:5b:f8:35:b9:3e:40:e4:a1:a9:53:7f:f3:f0:00:36:
ca:46:75:e3:3d:88:af:24:2b:bd:e1:53:0c:2c:4d:b5:a8:10:
03:a6:1c:f2:5d:85:93:d9:93:1e:50:eb:2a:26:89:2d:2b:36:
08:5d:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:55:58 2026 by rpki-client