Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
File: I1OA88jQvU73nc_B8qNk738QDTE.cer (raw, json)
Hash identifier: 2cDcAq8XVIO4TGf5Fgem9eKbhJeXNZLYnTHtlBxI0WI=
Subject key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB22523FA64E7EEF11371B54814351
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 88.151.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:22:52:3f:a6:4e:7e:ef:11:37:1b:54:81:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:ba:7b:91:07:91:eb:8c:36:e3:95:61:82:
6a:03:e3:5d:57:00:fc:29:d0:7e:9a:7a:52:89:9b:
2c:83:1b:7c:4d:9b:b5:d6:c6:51:1f:19:a8:6b:cd:
98:7a:50:e2:f6:53:b5:40:a7:98:a0:8d:e0:f8:6e:
c7:05:33:ea:69:19:1d:21:bd:49:f7:a2:0f:00:56:
30:ae:d1:38:f5:0f:44:fb:f6:97:03:af:b9:b2:d7:
8f:c3:94:e7:e4:2a:e5:75:f1:4f:06:73:3d:dd:28:
e5:89:5d:31:21:b7:1b:7b:d8:6c:f2:85:38:60:61:
76:ed:31:3a:83:c1:06:e1:f8:ac:79:45:5d:1b:c7:
02:63:4d:4d:3e:31:42:3f:8c:2f:83:c7:aa:a2:09:
54:d1:2b:94:cf:b1:97:17:fe:fa:4b:ac:be:04:85:
c6:fd:f5:4d:c0:e3:1e:7a:a8:f2:4d:b7:41:fb:65:
50:9b:0e:f8:44:86:75:a8:2d:07:ed:a5:48:fb:34:
05:5d:70:d1:cd:9f:36:0c:ef:29:85:b7:d0:57:41:
3f:97:80:5f:ce:a6:d7:74:21:d6:c4:3f:ed:04:d2:
63:6a:11:d7:75:ba:a6:93:b7:c5:69:3d:ef:24:42:
34:b1:7d:dd:87:9c:17:55:26:a2:8a:62:8a:7f:7b:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7d:37:c9:59:60:2e:5c:bd:0f:e7:dc:b6:fa:04:bc:a2:74:
62:dc:99:d2:86:db:11:d2:f0:0a:12:b1:a4:af:2c:cf:ff:62:
0b:71:13:36:bf:5e:68:b7:74:bb:48:31:70:41:33:eb:e0:51:
4a:d1:c4:01:e5:69:07:a8:ca:ca:66:a2:8c:10:57:e6:4c:0c:
a3:3b:52:b0:04:40:9e:2d:63:c6:70:6b:a8:f9:f1:fe:c9:68:
9a:85:6b:ee:71:c0:46:6f:e5:44:e9:95:38:21:65:00:dc:97:
94:da:51:76:a0:41:19:f7:e3:a5:5b:b6:cd:4a:f4:94:19:84:
40:1e:ce:b8:97:f1:27:2d:95:37:63:15:0d:5f:a9:18:b1:ce:
58:4e:a1:3b:bb:5e:d6:9b:88:58:40:3b:0c:10:2e:b1:ad:ff:
79:b7:f2:59:eb:f0:3c:11:d7:56:2b:5d:91:81:e7:71:1e:36:
52:2f:15:ba:15:5f:4d:93:9f:26:41:16:22:5b:48:2b:57:cd:
37:6a:90:84:a3:c9:2f:30:31:6e:80:4c:51:c4:6e:56:a1:ad:
e3:60:8a:5d:8e:8a:56:11:e4:1b:26:c6:cf:9e:ac:d1:59:93:
a2:3d:9a:da:37:70:7f:9b:84:dc:ae:9b:93:c5:8a:1b:99:8b:
82:0a:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:03 2026 by rpki-client