Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
File: JcD6eLaa0vVeql_nVQHcRcnpE5U.cer (raw, json)
Hash identifier: FCLms3bSmYVlv0PbIi9GpUC7okeIvdVeg85DTspg7c0=
Subject key identifier: 25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F97F53EE8EBCFD9893DEC12443409C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214706
IP: 217.65.129.0/24
IP: 2a12:6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:7f:53:ee:8e:bc:fd:98:93:de:c1:24:43:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:ce:28:ef:98:fd:fd:15:54:98:78:67:c9:
27:8a:cd:19:e8:a1:ef:06:20:fd:68:55:0d:cf:43:
81:fc:50:8e:3a:5b:00:8f:bf:25:34:a4:76:a2:f9:
dc:26:d0:f4:f7:a4:e2:bb:8a:97:ce:74:38:0f:e3:
24:7b:fb:64:e3:1f:d4:3f:e0:3b:fe:59:55:fd:13:
01:70:af:d2:53:cb:c7:ed:a7:79:29:52:cb:dc:b0:
90:51:fa:e8:55:2c:cd:29:3c:94:80:37:40:38:22:
eb:92:69:30:7c:23:4a:d3:92:48:78:92:b9:9e:6d:
e1:5b:60:09:86:e0:58:6c:2f:73:e2:bd:48:6d:b7:
52:ce:c6:f4:bc:c9:84:61:0e:e2:69:cd:1d:0f:e9:
60:54:0e:54:df:ce:c3:ce:6d:07:25:7a:06:30:6f:
63:e2:7e:57:57:a9:f1:a5:3b:29:73:da:6b:0e:c1:
a7:8d:d7:49:7e:d3:e6:11:0f:54:d4:c1:6e:4a:94:
75:0f:d9:ae:2e:a6:89:0a:bf:c3:58:89:1a:0b:9b:
09:52:6b:5e:71:e1:46:ee:2a:27:96:03:c0:83:ef:
b8:4c:a5:cd:0a:f7:8a:12:d4:8e:c9:38:a4:a9:64:
f6:c4:26:e3:75:04:72:2d:05:3b:5b:1a:43:66:b3:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.129.0/24
IPv6:
2a12:6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214706
Signature Algorithm: sha256WithRSAEncryption
70:84:e2:e9:87:08:27:87:b4:79:39:e5:13:8f:13:c4:92:ae:
a3:dc:44:ef:85:17:0c:b5:03:3f:c4:ff:0c:3a:79:5a:44:f1:
cd:1f:59:e8:99:cb:78:2b:ea:35:02:18:50:b5:d3:d6:16:50:
51:20:bd:09:cd:3c:09:65:f4:9e:f9:44:c2:b0:0c:36:49:72:
f0:1d:0d:5c:81:84:4c:f3:f9:21:e8:d0:ae:73:92:18:74:b4:
d9:a3:9a:77:1a:b2:30:fe:bf:11:e4:fd:6a:ee:25:b7:7a:76:
8f:b8:31:fc:4c:84:65:d3:4e:cd:c4:14:32:c3:b2:b9:15:d0:
94:d8:78:90:f0:4b:5f:a9:65:81:6a:b9:ba:cc:f5:b6:2d:94:
ae:80:18:87:d7:be:c1:31:f6:15:6a:80:62:6a:86:25:70:09:
31:29:ff:c7:e4:55:e3:e9:cc:82:24:36:cd:15:e5:86:41:aa:
e1:df:fa:81:9e:72:d2:22:34:83:9a:4c:ba:61:87:6a:5d:9c:
7e:64:05:c6:ea:ef:1d:3d:58:cc:bb:af:49:0f:0b:0c:35:17:
c9:6b:b3:20:34:fd:7a:ac:e1:34:c5:c9:fd:0f:ec:ec:d5:75:
78:d8:02:a6:7d:1b:a5:83:a0:81:b2:b4:4a:3b:9f:e7:49:4e:
39:96:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 19:21:14 2026 by rpki-client