Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
File: ahRjzDw0FHZhFRif2a-ORMXblBI.cer (raw, json)
Hash identifier: r43x7gNFIyRArHbdKxjSAYf581RzVo3rsrStttAkpsw=
Subject key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E3ABB910EE63250B0EA407AE81A06CED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 May 2026 10:57:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.53.0.0/24
IP: 2001:67c:2c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:bb:91:0e:e6:32:50:b0:ea:40:7a:e8:1a:06:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 18 10:57:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:f1:08:fc:6f:51:6d:11:a2:b0:a3:54:09:
25:81:0f:5d:4c:3a:ef:7d:c0:e7:8d:17:c9:e2:d9:
78:07:49:61:c4:c2:aa:2c:a4:5b:b8:dd:8c:10:0a:
ca:43:41:00:94:20:3f:e3:f6:4f:3a:ff:62:43:b4:
04:9e:95:9a:8a:a2:72:3a:5f:ff:bc:d8:5f:48:c7:
d7:3e:5e:38:a9:99:ff:1b:f6:40:c1:58:3d:d6:76:
a6:f8:44:dc:c2:bb:6a:80:12:40:ac:96:bc:e9:84:
5f:cf:a9:c8:ce:6b:12:a1:96:ef:e7:3a:1b:da:d7:
7c:e4:4d:1b:fb:f4:fc:ae:50:88:f9:70:a7:f7:e6:
1e:3a:eb:d8:79:01:a3:55:12:d4:a9:73:40:d2:45:
28:43:10:79:a3:0e:1c:48:b4:72:ee:9b:5b:5a:1b:
6a:ac:c3:8a:16:e9:5b:23:0f:2c:9d:a0:60:9b:a5:
5b:bd:db:a1:87:63:27:8d:68:39:ca:7d:3a:a6:b4:
1a:e1:67:f3:98:c3:14:c4:0d:72:9b:3a:fe:31:83:
5f:11:f9:11:8f:4d:28:9c:d9:15:73:c4:e7:73:7f:
1e:32:f8:ba:f8:c6:b4:87:1f:fa:76:72:84:4b:23:
cb:2b:88:55:8b:a4:4f:26:33:40:d5:5e:60:fe:62:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
IPv6:
2001:67c:2c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:10:dc:95:7d:0b:1e:f7:1f:d5:a5:19:f4:1d:3c:cf:cb:1c:
11:b9:6c:97:58:39:2b:cf:c9:6b:eb:0b:d6:68:6c:29:2c:71:
4a:68:61:4a:19:f9:79:8c:c5:cd:5d:b2:fe:2a:37:94:7c:1e:
e9:f0:1c:42:e8:ad:04:9c:d4:68:27:7f:14:99:59:34:99:ee:
33:8c:7e:2f:26:bd:67:33:96:51:f2:d9:0a:91:cd:6b:ff:c1:
09:14:b2:a6:09:94:1e:7b:de:03:2e:8d:9d:39:ca:b0:ed:c9:
27:99:87:5d:f6:db:c6:1a:25:38:1a:a5:84:ae:c2:cf:c2:f7:
9d:17:de:23:c4:5f:3c:e2:8a:4d:39:94:7b:32:28:c5:5c:4d:
1a:1f:94:40:41:92:0d:38:21:af:41:2b:e1:c9:6e:0f:fe:10:
46:f7:28:17:7b:5e:7b:12:5c:a1:21:1d:ce:a1:aa:6b:fc:9b:
6c:bc:fe:82:bf:6a:fc:71:9c:ae:7c:50:18:17:ed:4a:a3:3e:
61:55:6a:2d:26:76:0f:ee:6e:38:60:78:cd:54:e0:d4:20:a4:
a1:98:b2:ae:8b:7c:26:20:df:43:d2:40:f4:61:f2:8c:ea:e1:
1e:7a:8f:9d:e0:fa:51:b6:95:eb:e2:60:14:f1:8c:f8:80:d8:
b8:30:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:44 2026 by rpki-client