Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
File: RACrbRbCQdJkectXvk11NNdirGQ.cer (raw, json)
Hash identifier: CoyYqIv1fgcL5MPmFW1kyFAWY+zkdPeDQqGKRAdvWNY=
Subject key identifier: 44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE0C8B9932C7F1C94CF74AA01AC203
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200509
IP: 185.66.56.0/22
IP: 2a05:5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:0c:8b:99:32:c7:f1:c9:4c:f7:4a:a0:1a:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:27:a2:2f:9e:ef:12:e5:39:da:c7:9f:91:
d8:cb:82:d7:94:2c:de:3d:29:ad:32:14:43:73:a9:
ea:5e:83:4d:32:fe:dd:eb:0d:82:ca:e8:cc:dc:16:
85:fe:0d:17:98:39:a6:7f:18:64:29:bc:71:64:3b:
d6:ed:ca:a3:42:44:91:0b:7c:97:98:6a:42:9b:7a:
ce:68:48:ad:f4:ba:6b:03:05:56:2a:a1:30:74:1a:
af:f4:b3:41:a9:da:a8:c8:22:71:74:9e:f6:bc:ae:
0d:f7:d9:af:72:b3:b9:4c:13:8b:51:fb:c4:2f:5c:
0b:60:94:0f:55:12:8b:f7:17:1c:21:1d:ac:ea:b7:
37:09:4a:8b:d0:e8:3c:c8:80:cd:b5:3d:5c:56:a4:
be:08:e7:c3:eb:1a:1c:08:ca:e2:13:f2:28:5c:99:
8a:a6:f7:68:05:90:d6:3b:4f:87:f1:ec:de:6e:7f:
53:ea:0d:3d:ff:a0:bc:59:ba:a7:08:3c:b7:53:a7:
45:e5:2a:5b:f4:2f:5e:38:33:e9:04:a2:e2:dd:1e:
85:28:9b:42:b6:15:73:c9:4d:0d:e3:13:ca:11:4b:
c2:51:a3:fd:61:b0:2e:8d:87:c9:54:3b:57:5e:f0:
ab:7d:94:c0:b9:92:7d:42:f0:64:24:da:54:ce:b5:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.56.0/22
IPv6:
2a05:5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200509
Signature Algorithm: sha256WithRSAEncryption
66:0c:00:0b:87:51:18:6f:a2:4d:90:d3:01:80:45:d7:bf:e9:
42:d8:e7:aa:3e:ea:af:a5:d6:b5:23:7b:65:0c:31:56:7e:79:
dc:01:61:f3:48:e4:c0:bc:6b:39:00:5b:42:bb:02:62:41:a3:
1d:ff:c9:81:13:e9:bb:cb:dd:a8:f9:e1:fa:2a:43:28:78:d5:
ff:5a:04:00:e9:c1:fc:14:df:4d:51:e0:fe:71:37:91:fc:f5:
91:8e:7c:f1:f8:93:e1:08:1c:eb:26:4a:d6:17:e4:0a:b4:41:
86:91:3c:51:57:6d:e1:a2:a0:5e:3a:5f:34:41:4e:3e:0e:bd:
b9:c3:5d:dd:45:5c:23:39:1f:04:f7:4c:0e:ff:66:c9:b1:a1:
d6:09:56:dc:62:07:46:79:79:ef:92:be:5d:8d:38:0c:ae:10:
e0:97:73:cc:0b:be:ee:4c:4b:35:18:a3:c8:9f:9a:8a:02:49:
7b:da:58:e0:3a:db:ca:d8:a1:6b:1a:f5:14:d0:ec:1c:6c:9a:
6a:6f:a4:2a:ee:d4:00:be:5b:13:60:4c:7f:6e:2c:45:ef:59:
3c:ba:e8:87:ec:34:1d:09:c9:5f:04:f3:60:8c:61:6e:91:c6:
4d:23:c8:a2:ca:7c:f1:6f:4d:38:56:fb:13:41:cf:64:1c:e6:
c8:37:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:44:56 2026 by rpki-client