Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
File: fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer (raw, json)
Hash identifier: EpbvByCJlio3ePYO9ArdBpCcJtKZWIh5eYfnOqtxLgc=
Subject key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB6BACFA57C61B6402840898F60927
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212815
IP: 91.209.71.0/24
IP: 185.171.202.0/24
IP: 2a10:4640::/29
IP: 2a13:89c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:6b:ac:fa:57:c6:1b:64:02:84:08:98:f6:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:f3:1d:d2:cc:30:74:b7:31:7b:42:f1:c8:
4f:7d:6f:5c:05:68:1b:0a:ea:a9:01:76:24:4c:c6:
94:77:13:84:a0:de:19:98:9f:56:dd:3e:ff:24:98:
e7:34:3c:a4:d8:f9:76:bd:83:96:72:4c:cc:25:04:
ed:17:90:0a:60:be:f5:6a:8c:76:a4:42:db:78:86:
87:01:f2:4c:d8:f2:72:db:3c:2f:0b:65:e7:ee:23:
b4:74:a9:cb:1c:dc:cc:74:c1:64:c7:9d:f9:3b:51:
c2:24:dd:6a:c4:fa:b4:91:73:be:c5:2d:c4:8e:6c:
d1:de:fa:17:0f:12:6d:7d:5c:f4:98:88:f2:41:7d:
f3:ee:dc:21:7a:3d:d2:83:90:33:e1:bf:a4:32:95:
9a:dc:b4:26:c4:20:a0:3e:c2:94:e1:72:9a:55:ef:
0a:51:98:63:b8:6f:07:33:d1:b0:7d:7d:2d:68:9b:
9e:2a:c5:b0:41:73:dc:77:ea:69:10:f0:e4:07:ad:
35:5a:e2:80:b9:c4:0a:14:b2:af:89:4f:80:95:4d:
56:3c:21:f9:2a:22:e4:00:f7:ae:36:56:66:1a:8b:
eb:1e:de:2d:e2:64:81:53:4b:2f:82:33:6d:04:f3:
fc:e8:47:c9:64:25:39:4b:9a:ad:bc:f8:de:e1:22:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.71.0/24
185.171.202.0/24
IPv6:
2a10:4640::/29
2a13:89c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212815
Signature Algorithm: sha256WithRSAEncryption
0b:26:d5:3a:48:0a:7c:a3:3b:ed:71:b8:66:e9:f0:70:40:ac:
fa:ce:24:74:e8:1f:75:8f:d5:17:1e:9b:77:8c:54:ca:9f:c4:
68:de:19:87:a2:cf:f8:e4:ba:27:a7:c4:eb:70:1a:5a:65:fe:
05:d1:22:01:82:3f:08:c9:9a:7d:60:75:2b:1e:ea:37:31:5d:
fa:c2:ce:d1:77:fe:3c:67:6d:20:bc:81:d8:b2:29:01:46:4b:
48:bc:67:84:c1:11:63:05:00:88:14:6c:f1:de:20:2f:84:c0:
21:ba:b4:4d:8b:6d:67:50:fb:bf:78:bd:6a:80:b4:0e:10:6b:
09:a0:d1:67:46:08:c1:80:cb:30:92:05:4b:18:6a:3d:98:f8:
25:16:94:b7:76:39:9f:6b:a8:b9:76:28:07:38:0f:c9:82:67:
41:37:e8:5e:73:2a:16:fd:c7:50:ac:6f:6f:6a:3d:b1:34:4c:
cb:c8:c9:99:5c:6f:dd:6c:9c:61:7c:d6:5d:17:6d:07:7c:d2:
de:67:b4:18:93:ce:1a:e9:f4:4c:66:2e:df:69:b6:bc:7c:6e:
9a:5a:4f:f0:15:34:87:27:31:08:f0:3d:a3:9b:a3:4f:bd:fa:
36:9f:b1:61:a7:c6:93:e7:eb:03:fe:0f:27:be:9c:10:2e:93:
1c:17:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 14:54:13 2026 by rpki-client