Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
File: FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer (raw, json)
Hash identifier: QJmSPZmRWsn8z1nzErjQ4zKiMF19/W3JUdrL4ppwpxk=
Subject key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0393550E5E4C4D1BF5F401AC93B1C5894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Aug 2026 13:56:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 158.143.0.0/16
IP: 192.124.46.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:35:50:e5:e4:c4:d1:bf:5f:40:1a:c9:3b:1c:58:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 13:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:3a:43:40:77:fd:25:45:2c:61:6a:1c:a4:
b8:bf:82:b7:1e:95:1e:ad:d3:8e:aa:46:63:63:ec:
5a:ee:c1:66:40:c2:39:e1:18:c6:3f:a1:59:e4:96:
37:a0:61:40:18:81:34:53:ad:ef:ab:e5:28:8a:8f:
5a:bb:ba:8f:2c:f5:8a:a6:98:0e:92:1a:8f:64:eb:
bf:b6:d0:35:5c:95:01:82:61:98:c7:4c:e5:e2:61:
0d:27:27:4e:83:4f:21:f5:f8:77:07:07:a8:8d:95:
7d:5b:d9:13:a4:0f:65:2d:24:43:e6:7a:1a:b2:c9:
c8:b6:6f:ef:bd:bc:d3:a7:ab:e7:5d:ee:2a:96:2c:
d6:40:99:e8:a8:3f:fa:58:05:66:47:7b:22:14:ed:
29:85:c1:af:27:ab:03:37:bc:51:ed:02:33:29:cd:
ae:2c:53:c9:26:11:2a:c2:01:65:af:33:a0:b7:0b:
ec:ca:61:7f:42:2e:5e:d8:b6:a8:e0:a3:28:cd:86:
0d:25:d6:24:76:8d:05:18:7b:43:86:30:48:ec:0d:
bb:64:28:bd:ca:09:ae:20:1c:db:f6:7e:24:40:17:
f7:7e:b5:0b:56:46:84:1e:fc:3d:ec:3c:38:7e:82:
ec:33:42:dc:a8:40:0f:3e:ce:3e:5c:5e:bb:fc:7d:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.143.0.0/16
192.124.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d5:ae:43:8b:47:ec:a4:b7:16:5d:dc:0c:fe:2b:2b:d5:be:
fc:19:71:10:db:f2:3d:9f:a8:c8:61:b1:3c:77:ff:6d:a3:0a:
a1:df:ea:fd:c0:b1:79:f3:9b:c2:31:5e:b9:5c:20:f7:42:a2:
ac:c2:a7:b3:6a:f4:d0:6f:5f:3c:ef:c7:62:40:4a:cc:4d:39:
4c:30:1e:e7:3e:58:f7:08:53:d9:a8:b9:46:7e:35:3c:6f:ae:
73:a7:d8:e8:af:d2:3e:5a:45:56:2f:48:19:1f:1e:dd:f3:6a:
27:f9:eb:06:7b:4c:e6:14:6c:56:5e:00:42:9a:0c:28:22:69:
a4:26:73:b4:d3:b9:65:53:7b:0a:fc:6c:aa:bc:94:c8:c1:ed:
54:d1:85:68:49:3f:9e:f6:c2:be:12:d8:8c:b1:53:0a:88:d6:
58:ab:6b:3d:5a:e3:81:49:a6:91:2b:32:b1:18:b8:fb:ca:29:
b0:33:8d:0e:2c:f7:1d:27:e8:aa:c9:c6:aa:2a:99:32:09:b2:
93:41:8e:09:c7:e6:4e:89:a3:64:97:b9:9a:e7:20:bf:d3:7b:
97:89:7e:34:02:e0:28:44:db:36:a8:47:d3:91:bb:42:d7:c5:
a1:28:ab:a4:06:5b:37:60:3d:68:ed:54:60:b5:5a:cb:cd:2d:
15:d4:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:42:58 2026 by rpki-client