Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
File: HohQniSkFesNpjckz6i__buIqrA.cer (raw, json)
Hash identifier: y2MxgoNlDHcoDen45jctpMU/EFqTCZYUCjmUmo0p5UQ=
Subject key identifier: 1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F934D1B8737D9CCD84056DCFA1050B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207919
IP: 45.133.52.0/22
IP: 2a12:b180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:34:d1:b8:73:7d:9c:cd:84:05:6d:cf:a1:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e88509e24a415eb0da63724cfa8bffdbb88aab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:11:1b:7f:5e:b0:14:b1:dd:4b:bf:c1:e7:
65:bd:4a:78:b0:44:35:c2:d5:46:04:d8:32:74:ee:
ad:4b:40:ea:50:c6:80:af:b6:ec:5b:38:ed:e4:c3:
6b:1f:b1:6c:ca:40:26:06:20:cb:8f:04:a0:cf:9e:
36:e9:a3:db:62:70:d3:e6:4e:06:84:2b:72:2b:11:
24:4e:cc:63:97:e9:9b:8a:ca:00:5b:50:f8:d4:78:
6c:08:3b:fc:40:64:5c:72:20:7b:d2:d2:96:cc:9c:
76:9f:a5:8c:de:94:cb:ca:16:9e:d4:62:a6:34:ac:
64:e1:34:af:5b:f7:cd:55:f4:0d:7b:f5:ba:ff:44:
20:73:e1:42:21:02:f4:30:7b:90:18:c4:86:b0:30:
a3:bb:32:7e:48:6c:ac:01:21:d2:e2:3a:f1:2e:97:
60:c7:ed:94:6d:ba:11:f3:7b:bd:07:61:2f:f1:ef:
8e:f1:f6:31:d1:8a:fc:f8:e5:9d:b5:6d:bf:81:ce:
ea:cd:41:22:c6:6d:d6:3d:ba:84:b8:23:f1:de:6b:
15:2b:cf:da:aa:7f:03:40:94:43:0d:3e:80:34:a9:
16:67:e9:08:a0:93:fa:24:bd:8a:76:fc:33:12:a6:
47:ac:81:ce:57:03:c1:b6:d3:67:e4:15:54:23:a8:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.52.0/22
IPv6:
2a12:b180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207919
Signature Algorithm: sha256WithRSAEncryption
87:aa:ee:9c:77:ef:47:d7:54:90:9c:fb:7c:22:99:16:2c:6a:
c8:cc:2b:0c:d2:3b:35:49:ca:b9:4a:ae:5e:9c:d2:3e:a3:bd:
91:d0:00:41:5c:0b:ae:3d:54:67:ad:15:7e:b6:8a:31:b2:ef:
d8:7a:cb:b4:9f:d4:ca:1f:44:0e:3b:3c:d9:3c:b6:ee:d0:68:
82:b5:0f:95:5e:57:72:44:83:fd:87:30:3c:27:40:3c:f1:43:
11:ea:84:2f:6e:b6:ed:f5:c3:ce:73:52:b2:c3:73:1d:0d:79:
c3:55:5e:b6:ac:34:d2:7e:6d:60:de:68:03:98:6b:a9:3e:ea:
e5:1d:0f:3e:66:ab:2a:de:5d:92:b9:36:4d:06:fb:72:b5:b5:
c4:a8:01:87:0a:dc:d3:d5:c4:06:8f:dd:79:0f:ed:56:39:87:
23:0d:25:a8:28:18:86:fd:5a:14:09:73:0d:45:94:a4:d6:c5:
8f:79:33:18:1b:5d:20:95:82:c6:00:bf:23:7a:3e:0f:58:6b:
b4:85:6c:b4:6d:e8:e4:ef:17:1a:18:b3:c1:ab:60:7a:8c:5e:
09:fc:57:ea:23:ff:03:22:85:44:33:85:8c:14:e8:3e:86:45:
1c:54:09:6e:56:01:89:c0:78:b5:05:b8:48:ca:6b:b8:4e:91:
3a:1c:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:24:46 2026 by rpki-client