Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
File: d2l0J3BW692_vbT4CPmoboJGA68.cer (raw, json)
Hash identifier: chWphRqlXnxoc3u7fXn29R/jWdZ+3JCp4UAx/qycvYM=
Subject key identifier: 77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA9D8722E63FD61E6C18E4C23F9BFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15966
IP: 95.128.0.0/21
IP: 2a01:a640::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:9d:87:22:e6:3f:d6:1e:6c:18:e4:c2:3f:9b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=776974277056ebddbfbdb4f808f9a86e824603af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:82:81:58:58:1d:49:1b:82:cf:96:6b:04:
68:52:a3:20:d0:e3:0c:26:1a:e3:c4:6c:68:0d:a2:
ed:e7:50:a4:10:9b:f4:23:6a:e9:7e:74:59:18:8d:
6f:68:62:fe:3d:fd:d6:67:be:45:b7:91:f1:bd:25:
5b:0b:42:50:02:14:da:c3:ae:7c:a3:5f:91:bd:3c:
bd:b4:44:62:d3:af:4d:c4:50:2b:a5:ba:6b:02:d9:
0a:d6:94:a1:b0:20:18:51:81:da:f3:83:d9:d0:48:
12:ff:b9:50:62:ed:69:8a:3f:03:93:a0:d2:28:88:
ab:41:db:30:0e:62:3f:16:1f:44:c5:a4:f7:e3:6a:
8c:9c:b3:21:f6:8a:8d:7f:ef:22:9a:b0:ba:c4:a4:
57:c9:c1:c0:aa:f5:ed:ad:d5:c8:0e:27:94:e0:70:
d1:ee:1a:3a:ac:cb:bc:17:d9:a6:32:0c:12:ef:24:
e5:25:1b:e0:75:37:7a:33:c8:d4:97:dc:5a:12:70:
73:32:b3:8b:f1:a8:95:e9:5a:af:3a:92:36:8e:99:
a4:78:30:0b:fc:c1:c3:bc:4f:ed:7a:3a:a8:fd:c2:
57:91:04:00:96:15:b1:cc:a3:14:b4:0a:55:f1:bf:
31:e7:6e:50:cf:1d:7f:42:c6:cf:ca:b9:02:cd:66:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.0.0/21
IPv6:
2a01:a640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15966
Signature Algorithm: sha256WithRSAEncryption
4b:52:ee:c3:5f:bf:d6:ad:9a:8e:57:b0:b7:c8:0e:c5:7d:65:
dd:c3:c9:27:5c:4a:b0:a8:5f:b9:44:be:07:9b:a1:83:cc:d1:
df:17:a4:1e:9e:6c:1b:82:1f:73:57:3a:4c:6c:38:b9:a4:17:
99:c5:cd:ba:87:f1:85:34:e8:9b:f1:bc:e9:4c:60:5c:57:62:
1a:66:03:cf:8a:86:fe:a4:9f:d9:a9:67:6f:64:1c:3e:23:5f:
57:99:45:18:79:d6:99:1b:aa:e0:c5:49:4e:d8:82:ca:fa:15:
c1:c9:35:a3:2f:a9:2c:51:fc:66:66:ec:4c:69:2a:09:85:f7:
15:52:85:c9:78:cd:da:b5:2b:7e:89:9e:6d:be:a1:34:a9:6f:
70:30:bc:d3:12:f4:ea:d1:a6:89:a1:10:23:2c:f5:82:32:ae:
d5:78:20:22:8f:c6:56:53:f6:3d:9e:37:19:2e:d2:6b:2f:5a:
13:59:eb:5d:42:29:02:6f:5f:a6:f6:55:39:e6:73:cd:d2:73:
9f:89:f1:14:d4:63:d2:80:52:a8:8f:1e:83:9d:12:1b:3e:65:
23:45:8e:95:a8:fb:72:3f:2a:19:5a:17:1a:6b:21:4f:a0:ac:
94:79:7a:02:a0:73:86:05:3c:55:d5:d7:5b:05:db:f3:c7:38:
bf:cd:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:18 2026 by rpki-client