Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
File: HaNLZnNvDOLx8BzL9o-POcWTsUo.cer (raw, json)
Hash identifier: 7ofvZu6QatOBidOSFi1jrJUl+kXqFloj2ABAnWSZ0xY=
Subject key identifier: 1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFF0ED4FBA7C80B5ACB84B05331F48659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Aug 2026 06:56:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.5.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:0e:d4:fb:a7:c8:0b:5a:cb:84:b0:53:31:f4:86:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 06:56:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:ba:71:bb:43:1a:f1:4a:32:a1:76:aa:0a:
9b:fa:07:70:75:22:a8:8b:c4:20:82:ac:ae:8d:ae:
03:cd:cc:37:28:b4:5c:7f:85:ba:f8:36:ef:10:df:
8f:06:dc:c7:36:c5:6e:5a:13:b5:5f:d2:6e:1e:42:
0d:27:1a:fe:62:38:ae:65:e8:46:5d:8d:2a:d7:00:
c6:52:24:9d:c5:5f:32:69:b9:6d:f2:d0:b8:17:d0:
52:a6:44:9d:c3:c8:bf:dc:40:93:57:cd:bd:0b:e1:
3d:77:be:64:58:55:eb:28:bd:ee:0a:58:c6:16:3f:
94:b0:36:fe:71:a3:b1:eb:5d:5c:84:8a:d8:65:b7:
49:cc:bf:70:47:0d:74:a3:2d:16:14:a1:59:bb:62:
d3:ce:3e:76:fc:91:3e:9b:0a:35:49:4b:f0:3d:ed:
ca:07:31:39:61:92:50:0f:67:75:5d:4a:47:08:df:
02:07:31:e9:9d:c0:cf:bd:f5:ae:3a:6c:61:aa:73:
44:55:ae:e4:bf:3b:b1:d3:3a:bc:10:64:70:4f:90:
03:88:f2:7e:74:ac:59:a9:d7:1d:c2:65:f4:b2:3d:
f7:a4:59:d5:58:ed:4f:61:0c:0c:39:90:76:d8:92:
a7:60:2f:16:cf:67:b1:6a:42:eb:4a:c4:2e:c1:f3:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c4:9c:61:2d:5d:f6:9b:33:9b:1f:2a:56:5e:8f:45:a5:10:
54:53:06:61:94:f9:64:4f:d0:49:e5:04:bd:96:4d:c9:38:55:
38:2b:8c:ae:2d:62:45:9e:71:01:9e:9c:4e:eb:fb:e0:38:26:
d3:3c:dd:23:cc:3b:0f:ec:dc:30:a7:46:4e:49:b8:6e:74:72:
4c:e7:09:19:11:44:5d:0b:2d:81:58:26:29:62:86:52:59:02:
e8:31:e1:0c:89:97:9d:19:a8:6c:c6:7b:72:fe:70:78:75:5b:
d7:c9:94:53:98:e5:b4:da:5f:bc:7a:bc:7e:0b:f7:ee:d9:23:
1c:0d:4c:c7:c3:73:1e:4c:29:1a:7b:e9:9f:cb:b3:af:29:12:
b4:de:38:a7:91:30:51:33:77:db:76:fa:92:1e:79:9f:75:92:
20:40:37:94:ee:a0:a3:57:cb:eb:b7:3d:8e:94:c3:0b:c4:8f:
27:b7:52:c1:e7:a8:e5:7e:25:b5:7c:19:f2:51:69:6f:de:81:
a2:51:2a:ae:43:fe:58:4e:b3:a0:7d:68:6e:32:cb:fa:93:5c:
57:8b:23:82:86:ff:85:db:06:f3:48:d6:2f:d0:e8:c2:0a:22:
d8:c1:e4:aa:df:26:70:14:94:70:15:b0:46:f4:f0:5d:bc:cf:
74:7b:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:10:59 2026 by rpki-client