Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
File: IPpO3bIfCQGSPBifQej1x0mmWCk.cer (raw, json)
Hash identifier: PuHTUt9mKrt93gtLPLdQ/0eh069jvTZnSOyhZtdvQEM=
Subject key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEF9BE1BE540A7C10469064D7FEEF0B93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jun 2026 13:53:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200302
IP: 94.242.0.0 -- 94.242.47.255
IP: 195.140.216.0/24
IP: 2a00:1838::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:9b:e1:be:54:0a:7c:10:46:90:64:d7:fe:ef:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 22 13:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:66:f1:42:7d:14:fd:17:1a:61:b1:e4:c0:
14:ff:1e:7c:75:f5:54:17:d7:9b:b1:90:a3:c9:ef:
37:67:d7:8b:ec:d0:ad:1d:f0:91:5c:b4:15:d4:cc:
f6:f0:98:92:1a:91:5a:c7:66:fe:42:55:89:0e:91:
46:cb:70:95:ef:65:c0:4c:0d:6c:a4:30:34:15:14:
c0:32:53:d0:e4:aa:ce:60:d9:ae:0c:f7:97:5d:57:
ee:7f:db:1d:e4:88:e9:fe:9f:43:e8:e7:bb:ad:d7:
14:65:a6:ca:c1:0f:b7:36:18:40:03:9c:e0:06:68:
4f:25:12:80:59:08:75:da:17:31:8e:12:c5:d9:d1:
88:d8:4d:ea:12:d7:64:76:f7:81:7e:e9:e9:66:96:
af:8c:82:c2:92:ef:09:86:bc:30:33:13:41:e5:0d:
0c:b1:22:07:e0:31:61:fc:66:db:10:53:26:a0:9e:
e7:4b:5a:e5:1f:b1:1a:da:92:50:a5:f6:94:a6:65:
e7:c7:70:96:59:bf:ae:09:d6:2e:71:e9:57:2a:f9:
a6:3a:e4:ad:1c:00:c7:42:9a:dc:bd:7d:e8:2c:56:
3d:7e:f5:de:2f:d5:65:6a:db:4c:8f:f3:4c:a5:0d:
59:b5:10:cd:77:26:99:47:bf:07:5f:fd:ba:61:bc:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0-94.242.47.255
195.140.216.0/24
IPv6:
2a00:1838::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200302
Signature Algorithm: sha256WithRSAEncryption
3f:6d:34:aa:01:42:1d:0c:20:a5:f0:5a:15:8b:bd:d5:59:5d:
62:4f:b8:81:a3:4e:b4:38:6b:b4:9b:22:be:4d:54:1c:ca:a5:
b8:fd:67:0f:da:d4:ce:84:98:d7:c1:a5:b5:ac:00:1a:fe:38:
39:a3:29:85:26:f1:fd:60:9c:7f:f1:d0:b3:b7:da:10:1e:15:
7a:10:8d:1b:41:1a:e0:91:6a:30:ad:d6:6f:d0:f5:fc:91:1c:
0d:a6:83:ec:09:a5:1f:b4:b7:fc:fa:92:54:be:af:6c:0d:1b:
a2:a2:c3:37:8f:5c:9e:4e:ed:6f:de:19:56:ee:de:d5:f2:2b:
3b:b2:ad:94:41:bb:a8:05:bc:3b:0d:e3:1b:a0:29:5d:d9:a6:
dd:e5:52:2f:b8:f7:ae:82:d3:14:78:32:03:43:c9:27:cf:7d:
3e:b1:dd:48:e3:3e:3f:a1:0c:47:6a:07:60:a8:c9:b3:e2:a2:
24:a7:91:ff:38:80:33:6d:d7:06:68:43:97:9f:d4:3b:66:eb:
68:02:0c:ba:35:c7:55:f7:c7:2b:1e:57:ad:90:4e:e6:02:eb:
c5:44:f7:39:69:97:4a:66:2b:f8:33:60:68:93:9e:48:1c:d7:
05:d4:eb:47:fb:97:dc:67:1f:a6:67:7f:9e:77:48:62:10:9a:
b0:bf:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:27:39 2026 by rpki-client