Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer (raw, json)
Hash identifier: AO6uPvIuSQq1hAYQmOmZvMRifluh26gmsCujtPEwwk4=
Subject key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A024A1E8332D6B3B021EE1CDDDEFD57004
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Aug 2026 14:03:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 78.159.140.0/22
IP: 80.70.192.0/20
IP: 147.75.224.0/20
IP: 159.100.192.0/20
IP: 185.94.16.0/22
IP: 185.114.76.0/22
IP: 185.152.128.0/22
IP: 212.59.80.0/20
IP: 2a09:6b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:a1:e8:33:2d:6b:3b:02:1e:e1:cd:dd:ef:d5:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 14:03:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:0b:0f:76:dd:bb:a0:6c:60:8f:7e:58:85:
59:16:15:9b:82:51:91:2d:14:1d:0d:40:f0:da:2c:
4d:23:67:60:25:65:82:db:05:1d:2d:44:2f:62:f3:
25:25:8a:27:49:d2:86:33:1f:33:de:e0:67:a0:d0:
a5:98:f1:9b:68:c7:40:91:a2:28:e1:54:30:21:76:
59:c2:9c:6d:eb:01:0e:06:a9:20:c1:e0:94:83:0a:
fc:9b:2c:44:81:6c:8d:db:9e:37:46:b2:95:2f:d4:
4e:4a:33:5c:58:87:1a:5c:7c:6b:86:8a:26:31:c6:
cd:c0:95:58:9b:43:dd:aa:98:96:e9:ae:21:b5:ce:
5c:7e:32:ab:ff:04:4b:d1:9b:36:7c:80:f8:50:3f:
de:42:aa:c1:8e:31:06:71:5f:76:75:cb:ec:ce:07:
8c:dc:ce:c9:b0:66:e5:ba:5b:b0:2f:49:4e:c3:62:
53:e4:e8:6f:25:26:90:0c:1a:fb:d6:0f:3c:1b:bf:
f4:40:4b:45:9c:ec:6c:fa:0f:f3:5f:ff:e0:81:4d:
2f:28:05:f0:3a:3b:e1:67:8b:34:27:a5:9d:ce:73:
01:4b:43:89:91:e7:56:20:3e:7d:3e:aa:f4:91:a7:
98:c2:c2:f1:ee:e6:17:96:e4:32:45:7c:6b:e7:29:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.140.0/22
80.70.192.0/20
147.75.224.0/20
159.100.192.0/20
185.94.16.0/22
185.114.76.0/22
185.152.128.0/22
212.59.80.0/20
IPv6:
2a09:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
0f:85:5b:0c:67:7c:bd:a8:b9:4d:ab:c9:18:ca:65:63:3a:42:
6e:6b:6a:7c:14:ce:02:ca:37:20:18:2b:08:df:9c:d9:09:01:
df:c0:f2:1a:ef:40:5a:69:6c:10:51:b0:4b:15:46:c7:1a:09:
52:36:59:c9:ee:9b:fe:34:d7:ef:6d:84:97:7d:e5:ef:1b:47:
0a:bb:98:80:7e:0c:6d:ca:45:2a:61:55:53:39:55:cc:fc:df:
e0:cf:20:e5:51:8e:65:8f:92:49:c4:01:e2:d3:0a:cb:d4:77:
c3:f5:27:30:ab:cc:65:d9:28:9c:01:0a:3a:b4:cc:f9:24:45:
48:b2:5e:93:e1:91:7d:6c:35:29:c9:7d:48:06:b3:4b:7d:4d:
5a:1e:af:cc:d5:ed:64:08:ec:6d:ea:aa:7f:52:73:a9:2a:7f:
3e:7c:1a:d2:00:7f:22:e4:df:55:ee:2a:90:9c:05:29:ee:c7:
59:10:06:93:0c:f8:50:59:9e:5e:fb:20:c9:d2:73:72:d2:be:
62:bd:1f:43:b8:b7:65:9d:87:2b:62:75:0a:76:34:58:c8:b1:
60:88:74:39:e5:80:ac:1d:0a:60:8a:10:72:a8:82:27:8a:9d:
f3:cf:a6:c6:52:0e:a5:a2:24:b6:ea:a4:0c:fd:0b:6f:93:d5:
3f:1c:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:55:12 2026 by rpki-client