Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer (raw, json)
Hash identifier: mZf3DpnGd0UFh+bnpqZxLEnwd++eE62SJuOM1Comw60=
Subject key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5CC9C6B2784AB5E619C63E295B855D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61425
IP: 5.198.128.0/22
IP: 185.239.216.0/22
IP: 2a0c:6380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:c9:c6:b2:78:4a:b5:e6:19:c6:3e:29:5b:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:5a:ae:65:44:3b:4f:1b:5e:53:7b:2d:d9:
a6:27:5f:91:ea:7d:91:91:95:59:20:f1:54:25:ba:
0a:7a:ed:1a:2d:5f:65:8b:71:5c:8e:ac:3e:30:ad:
90:36:f4:79:43:6d:63:cf:a8:9b:bb:20:6d:38:f6:
e6:fe:ee:06:6b:a6:5c:26:64:7c:a0:4c:a7:cb:06:
97:57:b2:2a:c5:f7:a8:bd:08:a8:90:ff:53:68:51:
9d:fc:00:de:8f:ca:0a:58:10:44:3d:07:23:a9:f9:
9c:57:d4:be:14:d6:c5:a2:7f:74:81:4e:b8:79:70:
ae:75:19:ec:05:49:96:d0:7b:68:08:83:9d:50:3f:
17:e5:12:0a:2e:d0:21:58:8a:52:95:5a:60:97:b9:
db:db:ba:8b:08:31:0e:e5:ef:0e:ee:b8:4a:a0:7d:
d6:75:49:83:eb:3b:48:d6:13:de:83:5b:21:9f:59:
6b:0a:f5:ff:03:8d:28:61:0f:d9:a4:cd:3f:99:66:
b5:a5:f6:72:cc:95:d4:7c:09:de:48:93:b3:c3:6a:
f7:4f:45:39:26:c1:ea:bd:a0:69:a6:29:62:45:a3:
3b:47:71:e3:1b:03:f9:a2:26:a1:59:cc:c9:29:e5:
2b:67:64:ce:fc:8e:72:7a:37:2b:ba:35:58:df:b4:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.128.0/22
185.239.216.0/22
IPv6:
2a0c:6380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61425
Signature Algorithm: sha256WithRSAEncryption
62:1c:35:17:4f:2c:0c:05:bd:94:bd:13:fc:d7:40:4a:45:82:
de:61:7e:da:f8:9e:36:91:5d:e6:b3:64:13:d4:18:e4:e5:9f:
09:69:be:e4:3f:f7:12:f4:fa:67:d3:51:d1:d6:b8:f9:82:3f:
b9:6b:c7:9d:06:ab:f6:9d:43:f4:66:32:0f:92:39:62:1a:1a:
1a:a0:52:e5:dd:e2:ca:50:0f:14:2b:76:15:f3:1b:c5:6e:26:
76:96:7d:58:1a:97:33:49:39:b1:09:b1:57:da:df:45:2b:02:
4b:c3:c1:7b:ed:53:3e:4f:d1:f9:31:62:23:13:1b:aa:bc:5e:
28:bf:8c:36:af:cb:35:34:a9:17:2d:b7:e8:ae:4c:67:1b:58:
9e:64:3b:2d:0b:88:3a:c9:6c:90:7f:47:04:7e:19:1f:fa:f0:
60:0a:66:dc:5c:b3:2b:85:2b:47:96:89:99:76:2d:df:2e:67:
25:26:39:21:e8:14:9a:2f:88:d0:fa:41:f7:3e:fb:e3:68:60:
24:a1:e3:6e:10:c6:d3:63:89:8c:4a:ce:53:14:ba:dd:90:aa:
7c:94:00:46:a0:6b:99:4f:2c:f3:76:86:d5:f6:66:81:93:0b:
c3:c9:52:dd:59:00:ed:d7:b5:0b:11:66:e1:1c:2f:40:1d:5b:
a7:0a:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:49:58 2026 by rpki-client