Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
File: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer (raw, json)
Hash identifier: lTrDPBz/Vw5x8wppCF0MjYPYmVrv0P1SxFVzelS2WTU=
Subject key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA9293736CE70A7B8A708680C805441A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Jul 2026 14:37:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215716
IP: 2a0d:22c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:29:37:36:ce:70:a7:b8:a7:08:68:0c:80:54:41:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 28 14:37:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:1d:29:d9:76:f0:13:5a:f9:e3:20:6f:0a:
b8:14:77:6a:9d:83:e4:5d:7f:a4:bb:e9:fe:ab:f0:
19:aa:99:63:df:4e:0f:95:b6:6a:ec:ae:2c:4d:08:
f7:1d:10:a3:4f:55:69:9f:67:6e:65:40:f6:c1:ed:
72:25:e7:9f:c7:c4:1e:30:98:1e:c5:89:42:11:e6:
0d:9f:5a:9e:59:ba:38:75:2a:dc:4e:3c:30:0f:03:
ef:5e:5f:b8:5b:ad:77:9d:74:09:d7:7c:55:7c:1a:
c6:17:6f:ca:6e:1e:5e:44:64:2e:5d:fa:12:e5:9e:
32:d4:5d:90:96:8a:6d:ca:27:20:07:5c:9b:b0:2a:
12:07:16:5e:34:1c:5c:7e:c2:5e:18:73:be:82:47:
88:e6:d4:a6:3f:35:69:e2:40:83:4d:bd:a8:52:e3:
6a:de:5c:00:15:6d:9f:5b:e6:1a:3e:88:51:bd:96:
dc:47:72:47:89:95:43:e8:40:2c:8f:19:1a:87:ee:
30:c8:ed:67:8d:73:23:cd:07:e0:98:e9:91:59:cc:
0f:8a:4b:94:46:46:ca:f1:4a:dc:d1:c0:0a:7a:dd:
e6:67:09:fa:8b:d3:de:13:d8:68:0d:77:82:9b:c0:
c3:53:87:ff:05:a9:b5:ed:99:6a:5a:c1:cd:4a:03:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:22c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215716
Signature Algorithm: sha256WithRSAEncryption
27:78:f4:c2:91:02:7a:bb:46:fb:79:37:2e:2b:22:de:ce:b1:
65:3d:00:bc:35:93:38:b5:ad:8e:51:22:63:e2:3a:1c:8f:80:
04:c2:71:d2:fb:57:f4:d6:8e:ed:48:f4:2f:7b:46:97:3f:44:
f6:a9:03:c5:cc:dd:68:05:c4:af:4a:7a:9e:b7:ea:56:33:9a:
37:9c:89:b3:ad:aa:e6:f6:6c:be:1d:df:cd:d5:5b:c6:1f:3a:
cf:14:0d:4c:46:fd:47:94:b9:32:7d:6b:f9:35:05:15:64:1d:
69:f2:cc:01:88:cc:dd:41:d2:c3:93:1e:18:4a:73:d8:9f:2e:
78:28:09:89:f8:2d:2c:67:5c:92:af:d5:05:11:ba:1d:e8:2e:
5f:7d:1f:b5:62:29:4d:0e:93:ba:2b:e5:96:03:3d:5f:6b:4b:
b0:da:4e:8e:4b:b6:ce:ae:76:92:53:34:e8:9d:9f:c8:d8:63:
d8:33:2d:4e:a1:f6:e5:15:76:89:99:c1:84:64:b2:d5:40:22:
80:bd:ea:65:fc:bf:34:a7:36:45:48:82:e5:85:38:c4:6b:5f:
20:0a:04:aa:19:33:8a:18:b5:6b:91:f4:9e:bb:69:3e:c8:b9:
3b:78:0c:9d:1c:5b:9d:1b:c6:97:9a:2c:fb:29:f7:7c:4b:8b:
a3:b8:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:40 2026 by rpki-client