Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.cer (raw, json)
Hash identifier: dIXr4Io1r4ZQ4Zu3Jv6n1FHragL6zIhXEh2hDkwuJ+0=
Subject key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FE046F36A21E6F00021D0E23353CD5147
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 08 Aug 2026 07:29:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200680
IP: 109.207.68.0/22
IP: 2a0d:47c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:46:f3:6a:21:e6:f0:00:21:d0:e2:33:53:cd:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 07:29:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:6a:16:87:50:14:bd:69:a8:6a:5f:3f:41:
3c:12:8a:60:7c:d6:cf:19:c6:4a:80:80:32:3f:a7:
51:06:c2:f9:eb:1d:07:ad:28:a9:e0:7f:01:49:50:
0f:ec:86:39:fd:df:07:43:c0:cf:df:e8:85:42:f8:
f2:60:53:e4:02:1b:e9:15:3b:99:ee:43:5c:cf:cb:
21:21:0b:6e:19:66:9a:e6:42:a4:2c:71:5e:c6:16:
1c:26:33:da:85:e2:12:49:94:36:9b:05:c3:78:8c:
2b:78:69:68:b0:c1:97:76:8b:f2:98:74:65:60:e1:
53:99:82:60:1e:95:ee:05:b0:c2:cc:8a:61:58:8f:
b3:7c:15:d4:b6:61:e3:7b:16:12:06:ec:24:ab:04:
95:c6:be:d9:2d:58:0d:21:63:ac:22:ea:64:c0:1f:
56:5e:bd:46:85:50:71:01:7e:86:0a:4b:90:20:b2:
6d:22:55:ee:11:27:a0:d5:1c:e3:52:d2:9d:42:2d:
0c:85:8e:5a:a1:d8:e5:5c:17:fa:ed:6d:59:3b:6e:
e0:11:b9:aa:03:1b:a4:01:d8:32:cf:04:b8:29:d1:
d0:e3:e5:50:c6:80:a2:fd:25:69:47:4b:43:c3:d8:
b0:ea:94:39:60:06:96:49:3b:a5:98:0d:53:56:b1:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.68.0/22
IPv6:
2a0d:47c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200680
Signature Algorithm: sha256WithRSAEncryption
9c:c7:18:44:c1:3c:ff:35:1e:83:f3:7a:07:a1:d5:b8:8d:0a:
eb:e9:a3:61:b5:28:67:ce:44:c9:d4:2d:9a:da:fe:92:b8:23:
d0:8d:7b:85:05:6d:1d:71:d4:73:88:ae:c5:14:ca:de:9c:57:
59:53:91:f2:70:7a:d1:0f:28:b1:34:bf:a3:2b:e2:ce:cc:d2:
6a:ec:4c:db:9d:71:df:ce:c4:5d:f9:fe:c9:3e:98:4d:34:2e:
cb:0a:13:09:5d:6e:04:59:fd:37:1b:73:c4:d1:b1:4a:78:78:
2c:91:dd:5f:81:94:de:76:d3:96:f5:1a:2c:1f:29:59:4c:d8:
b3:bb:e9:e9:b9:12:ac:1b:02:ac:30:c5:14:39:45:fc:29:1c:
d1:05:8e:69:b9:08:dd:8c:f9:6c:b6:48:5b:b6:77:1a:3d:17:
b0:24:96:e0:28:80:8d:be:13:2d:27:5d:89:19:50:f6:7e:ad:
42:22:43:9c:4f:7d:94:4c:bd:a4:3d:9e:a9:b7:93:cc:3d:c2:
88:5f:a8:c2:90:51:41:1f:db:1a:bb:5f:45:ba:89:ea:0b:65:
e6:90:ab:b0:3c:e3:7e:9c:d2:ac:86:62:1a:b0:8f:54:ab:f7:
98:0e:b3:34:a4:cc:a2:57:c9:dd:8e:b3:de:e6:23:14:26:5e:
c8:e2:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 04:30:08 2026 by rpki-client