Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
File: d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer (raw, json)
Hash identifier: hzqpXumI3+qKEiSgjQojrNOl5lgy6eg/56YylbtTuW4=
Subject key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F960183CDE6EF8D139CC78A6F5C17D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.238.56.0/22
IP: 2a0f:100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:60:18:3c:de:6e:f8:d1:39:cc:78:a6:f5:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:26:70:ce:6e:3f:67:1c:c4:c3:33:33:c8:
71:9a:48:74:09:e3:5a:ae:12:eb:22:ae:d6:65:61:
db:5e:9b:6f:93:79:c6:2b:2a:4c:6d:10:22:e0:a0:
9e:86:5e:e8:0b:8a:5c:11:e9:99:86:57:97:0e:ee:
b0:a2:c0:ca:a7:48:3c:6f:4a:41:14:b0:25:43:9e:
2e:16:2f:00:a1:a6:bf:ba:b0:fa:1f:42:4a:b1:98:
20:4c:40:13:18:e5:04:02:61:61:8d:01:02:b0:c1:
a1:1a:2c:54:b6:7b:46:6d:f8:2d:64:c6:f1:7e:84:
16:5a:04:6d:7f:d4:05:19:bc:a6:a4:f9:54:10:aa:
59:59:bf:57:63:08:42:98:7f:3e:2d:95:9f:88:b4:
67:c4:f3:6c:a6:b0:49:ff:5d:b3:ac:e0:14:c1:aa:
84:9b:1f:f2:88:d8:74:e7:e4:9b:60:f7:2d:78:ed:
bd:9f:22:0f:f3:7d:05:1c:ae:90:eb:ce:1e:3d:7e:
6c:ff:c7:96:24:cf:7a:4f:91:f4:26:2e:30:be:5c:
28:35:3a:66:81:00:aa:85:92:68:29:67:3e:5c:f6:
1e:91:0e:8f:a8:0f:76:11:7c:98:d9:46:88:b1:c7:
15:83:da:e2:69:df:97:56:5d:b3:3b:ad:a5:96:48:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.56.0/22
IPv6:
2a0f:100::/29
Signature Algorithm: sha256WithRSAEncryption
7b:43:ac:4a:8c:2d:87:e2:68:43:9c:ff:d8:1c:8d:fe:1a:cd:
c0:b5:ac:2e:c6:c4:c4:22:c3:49:50:96:9b:7c:9e:10:87:ff:
8a:cc:97:c3:7b:d1:03:e8:75:98:a9:29:93:71:19:5a:b0:4c:
85:d7:86:2d:8f:e9:af:a4:a3:0f:27:b3:50:c9:48:b0:33:86:
0d:43:55:b8:39:ec:b0:b8:6c:50:90:3b:2a:c8:c6:16:78:a6:
f0:a1:7e:a3:dd:56:3b:a8:34:f1:0c:cb:71:b8:fe:ee:c0:ce:
bf:51:28:79:04:d1:63:80:b0:93:87:28:13:b0:14:7e:1d:53:
28:3b:55:cc:13:b8:fb:e8:64:47:c5:74:2c:ca:cb:9c:33:ba:
d3:d1:d7:f1:ee:4a:57:fe:88:b2:68:2a:1e:83:49:60:03:aa:
55:c1:d4:b5:03:3e:74:44:2d:21:53:45:84:95:9e:a8:65:9f:
c5:df:20:fb:aa:7c:d3:14:d0:c6:fd:3c:7c:75:f0:60:aa:76:
3f:b6:c7:6b:57:49:9a:d7:6c:e9:e1:10:6e:2c:92:4c:3b:c6:
87:14:c2:0e:b8:03:93:76:08:0b:97:98:d8:9f:09:89:12:a8:
0c:b8:81:3d:92:8c:b4:e0:c6:43:05:55:10:da:9e:b0:d6:e4:
12:ed:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:45 2026 by rpki-client