Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
File: czsHKLegVDWEws0LSLdHjEGU7wo.cer (raw, json)
Hash identifier: 35db2lS+6uzGbK8NOqaaZ4p72Q629bbIqLonIPZthm0=
Subject key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A014445DDB4E1C4DEBE79A2FDE5984258E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Aug 2026 09:46:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218935
IP: 145.83.0.0/16
IP: 2a04:ec40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:44:5d:db:4e:1c:4d:eb:e7:9a:2f:de:59:84:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 09:46:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:c7:69:72:85:ad:8d:b7:07:d6:24:9f:05:
25:d1:47:aa:e2:fd:39:62:a8:30:b2:a7:8a:89:33:
92:10:60:66:2c:14:64:cc:29:a2:8c:dc:7c:7c:c5:
84:b5:fe:92:d6:f9:67:05:04:d2:bf:70:0e:8a:b8:
e5:5f:da:5a:2b:af:17:da:81:41:5b:f8:5b:1b:c1:
ae:19:e8:e0:a2:30:bc:8e:62:57:65:70:e9:5d:69:
3a:6c:19:dd:3a:14:1b:e6:e7:d2:06:d3:0a:90:d7:
fd:cc:78:ae:33:48:ab:64:02:3c:ca:e3:36:9d:3c:
ce:2a:30:45:cc:1f:a4:6e:a7:3b:16:13:5d:ad:92:
01:79:c1:35:81:8f:74:f8:4a:bc:04:cc:e3:d2:cd:
5a:f4:f9:05:1a:f6:52:d9:3f:39:95:99:93:40:ed:
6d:e9:4a:87:b6:4f:1c:ef:ef:fa:89:73:4e:be:74:
a0:ed:af:cb:6b:4b:93:ad:d0:8a:cb:27:be:c6:34:
dd:44:4e:88:02:6f:3b:e4:15:d0:5b:76:10:97:2c:
00:8e:9a:8c:d9:67:79:96:e0:dd:be:6b:93:15:93:
5b:6d:37:be:64:f0:59:2e:f0:7f:11:14:66:c8:1e:
1c:d2:fb:80:2d:ff:b6:64:84:05:43:13:98:e8:1b:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.83.0.0/16
IPv6:
2a04:ec40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218935
Signature Algorithm: sha256WithRSAEncryption
92:b2:38:5a:05:4f:e0:dc:55:15:3c:b1:37:7e:97:ca:2b:33:
c6:fa:26:c2:7c:e6:7d:e4:80:43:1e:17:8f:9e:7b:73:38:27:
f3:79:54:c3:d5:e2:6a:f0:98:d8:b0:a3:aa:8d:e0:8e:e2:6e:
9a:a5:db:6f:15:3d:cd:55:3b:95:43:49:08:4d:18:d2:59:f6:
87:34:8c:30:84:8d:6c:15:60:70:1b:3c:0c:24:14:80:5c:61:
cd:91:75:08:70:25:9c:28:4b:88:0b:9a:5b:66:b7:8b:94:e6:
c7:6f:e9:a8:a4:4f:78:57:48:ae:5e:db:15:79:10:98:81:cc:
15:99:28:61:0b:d1:4c:48:c7:e9:fc:53:ea:cb:b0:3c:e1:42:
51:b6:9f:63:c4:8f:08:1d:b9:87:94:6d:b5:d8:47:9c:d1:e9:
01:0c:51:99:ce:fc:eb:1b:80:58:7a:2d:86:2f:c0:03:14:03:
b7:0c:80:58:60:e2:00:e3:19:07:28:85:61:9e:bb:78:6a:71:
cc:f8:42:47:f7:5b:35:86:85:5b:d7:d0:d5:ce:c5:30:d6:91:
6a:f1:6e:af:68:9e:cc:9a:82:10:d9:4c:6d:9a:c8:24:12:48:
78:2c:e9:77:6b:a4:88:55:17:5d:97:4e:94:fa:1c:23:7f:f8:
9b:d0:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:36:19 2026 by rpki-client