Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.cer (raw, json)
Hash identifier: 868rFTMiVtjQOiY/L+ArgoQFYJ9suzoWdqphrwCPWko=
Subject key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A061D2615CD7180CEDDCA5479BAC4309D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Sep 2026 11:12:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208122
IP: 195.254.180.0/24
IP: 2a06:78c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:d2:61:5c:d7:18:0c:ed:dc:a5:47:9b:ac:43:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 11:12:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:9a:49:ae:eb:f0:bb:51:37:a4:30:47:b6:
ad:6f:47:02:7d:08:c6:b6:00:23:5a:43:b8:0f:96:
24:8b:d9:d9:04:b1:65:7b:0c:d2:e0:4e:03:6a:ef:
b9:84:4e:f6:c4:d8:11:a8:46:0e:7e:63:e6:00:bc:
69:f5:46:40:03:50:a5:49:86:3c:91:c3:6c:4e:36:
e1:fb:c7:17:41:c8:19:8f:07:e8:41:d9:3e:81:f7:
10:28:7a:1a:82:40:3e:5d:0d:ed:5b:4e:67:bf:67:
d7:47:38:dd:9c:ca:7a:4a:b4:6a:97:5f:e7:83:38:
f9:87:a9:7e:9d:90:71:de:e9:3c:f1:3a:0a:81:f2:
fe:a5:1f:67:c2:8d:cd:d8:69:f9:33:48:ef:67:60:
ca:15:77:62:9d:b9:3a:c1:a7:45:c8:35:20:53:f6:
60:4a:e1:54:f6:bf:87:d0:81:f8:48:7c:fd:b0:72:
99:68:60:ca:25:c5:92:13:10:9f:a5:87:fd:87:c3:
4e:e4:10:c5:06:4e:b5:db:a5:92:9e:f1:51:e1:cf:
4e:12:1c:ef:cc:82:8f:14:ba:d5:94:19:98:ac:c1:
c6:03:8d:8c:0f:38:00:a7:97:75:96:d4:f7:53:32:
0a:73:ab:4c:66:3e:8d:24:57:18:3c:90:26:42:2f:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.180.0/24
IPv6:
2a06:78c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208122
Signature Algorithm: sha256WithRSAEncryption
4e:99:39:ee:20:ed:11:e7:d2:2b:9c:24:bb:e1:56:44:48:d3:
05:ce:b3:84:1b:9c:3e:78:e9:f9:ca:b1:3c:c8:a0:59:8e:dc:
19:d7:61:70:dc:f5:23:1b:8f:a8:9c:74:b5:63:66:a3:a4:af:
2a:c9:8d:35:a7:20:15:1e:9e:e7:5f:d1:95:39:53:f2:52:cf:
1f:c2:46:59:45:a4:80:92:2f:bf:db:36:21:5d:18:7f:a0:4f:
a2:2b:26:7f:11:86:4e:21:97:7d:9c:29:38:74:3d:64:f4:78:
21:f2:9a:d9:ad:cc:2d:72:cd:d1:e7:f9:94:d8:8c:05:af:ed:
ff:31:8e:19:72:f3:80:41:c0:11:f0:94:85:e1:78:9c:bc:0c:
69:5a:52:9e:49:d9:dc:04:ee:8a:61:25:b5:d4:54:2b:f8:c3:
ba:2f:88:1e:e9:9e:93:51:7a:b0:1c:db:ac:4a:f8:cd:82:80:
f1:b8:e1:38:07:8f:9b:e3:a4:79:6f:0b:ce:3b:24:a2:c4:55:
e7:7a:ef:cc:53:54:47:6e:4a:65:b3:76:73:78:d4:4a:e7:a7:
07:34:ce:4b:71:1a:ac:f9:ae:ea:af:8b:c3:a2:42:de:d3:b5:
61:2c:f5:1c:93:df:77:d1:f0:0e:4a:89:30:c4:0b:db:d3:42:
ce:39:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:01:10 2026 by rpki-client