Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
File: IpRcZ95iIC3YbfmripBuZv4XcYY.cer (raw, json)
Hash identifier: ZqIsPl34RGXZrD9FDz6AzEAVkxv2Sn2dR7P6N7AQwj4=
Subject key identifier: 22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD650AFAA9AC78A96B8C1ED15B9D0047F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 09:03:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.245.66.0/23
IP: 147.78.8.0/22
IP: 185.200.171.0/24
IP: 2a09:1a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:50:af:aa:9a:c7:8a:96:b8:c1:ed:15:b9:d0:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 09:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22945c67de62202dd86df9ab8a906e66fe177186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:a3:76:09:6b:a5:53:61:f0:28:ca:1b:18:
61:23:cf:e5:9b:d4:c8:8a:b9:4a:09:c1:82:2b:73:
28:86:0f:2b:4d:24:9a:96:3c:ed:b2:66:23:30:b3:
84:68:a3:1c:3c:cd:41:1e:47:a3:75:00:25:0e:72:
32:29:59:45:2a:cf:07:65:5b:5e:74:c8:74:b8:48:
a5:2e:15:bd:f7:56:70:6e:48:13:f9:2f:cc:33:02:
cd:b0:92:47:19:45:af:fa:21:42:11:86:a0:c8:1e:
b5:9e:12:c2:e5:f3:73:94:80:5a:98:b1:dd:8f:11:
95:56:2d:af:94:d6:51:30:12:b8:f7:14:9c:ff:82:
56:45:7f:be:66:02:c2:fb:70:fb:23:e7:b6:99:43:
ef:d4:1b:67:19:2f:11:d9:e0:f7:4f:29:a0:5c:eb:
26:98:52:aa:41:7d:34:ef:56:ef:d4:55:0d:5a:d1:
28:da:26:16:0d:bd:ac:88:fb:5e:bd:ab:19:bc:a0:
86:e4:df:a4:33:78:72:d1:e8:f1:51:f8:9f:88:23:
dc:91:0d:97:74:a7:26:3d:40:cc:ac:09:a6:5d:2b:
f6:e7:1d:8e:6b:3b:ea:ae:0c:0d:12:ec:d9:94:b4:
25:30:f8:6d:d9:95:75:c1:52:54:b6:42:92:72:9f:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.66.0/23
147.78.8.0/22
185.200.171.0/24
IPv6:
2a09:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
24:6e:3f:5b:a0:98:2e:48:5f:35:8e:41:40:bb:4d:be:33:61:
a4:38:f9:11:6f:b3:ad:10:39:25:61:b4:6f:48:92:03:90:c8:
fb:bb:c0:72:e3:5e:5b:00:fa:3e:1d:ad:74:79:a3:0c:6e:db:
50:d3:27:17:44:07:a2:60:3f:14:1b:50:71:b7:69:88:82:10:
92:10:8e:e4:c6:55:bb:da:39:f8:d6:12:8d:28:c8:36:5b:74:
4a:4b:a6:3d:16:75:54:80:5c:3c:0d:5c:6f:ed:ba:16:5a:f8:
de:0a:5e:f4:aa:24:d7:4b:61:87:33:15:1d:12:44:b8:ed:00:
86:46:58:87:d7:8c:5b:8f:4a:3f:64:97:ba:79:bb:9f:e6:8a:
ee:3b:ac:a9:9b:79:2d:4f:ba:3d:b6:5e:ec:2a:78:cf:4c:73:
db:7d:a6:6a:78:c2:65:c9:84:b7:ad:52:c5:96:6e:44:ce:c0:
7e:27:93:90:df:3b:7e:3e:24:f0:85:0f:d5:51:61:a9:08:6c:
35:50:cf:c0:2d:61:e5:17:c7:0b:3a:5a:d0:0d:ee:fb:e7:24:
f1:c5:49:24:e6:2c:8e:aa:ed:55:4a:d5:f0:c7:0d:d6:28:63:
e1:e9:84:10:52:21:9b:6b:c1:8f:b3:16:78:98:e6:67:0e:e9:
8f:0e:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:15 2026 by rpki-client