Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
File: j6VObsfsEXOqJ66PZpoFuPEgti8.cer (raw, json)
Hash identifier: MCaax2ERT8qgTy8E2nurMG5mk+S2z6ofMPb7f4OOj1Y=
Subject key identifier: 8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAD18AD8952B3C608D15A31B3CF0B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24944
IP: 194.50.84.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:d1:8a:d8:95:2b:3c:60:8d:15:a3:1b:3c:f0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:98:a2:2a:a0:7a:2f:a0:78:f5:fb:e8:1e:
77:2d:e8:c1:c3:43:d0:00:79:a3:9c:f2:0b:a6:c7:
47:65:b4:59:01:5f:bc:45:1a:49:7f:2d:f2:5e:20:
43:68:f9:20:40:a2:95:e2:d5:d2:26:23:6f:4c:f2:
a8:ce:cd:51:82:dc:a8:95:71:8e:e2:c1:08:c9:a5:
a1:74:8c:bd:f0:46:f8:6e:cf:92:8f:59:05:e2:0b:
14:66:13:4d:00:85:b7:f8:8c:56:df:53:50:e6:0b:
8e:d6:c1:cb:08:05:9e:ad:9f:05:db:e1:95:55:f0:
da:c4:65:3b:93:d8:ac:f7:7c:c9:05:93:b1:22:1b:
da:cc:5a:58:aa:29:66:73:72:d8:1f:d1:3f:65:4b:
93:e5:6c:84:8e:a0:78:dc:5a:93:b1:2b:ca:fc:a7:
e5:e4:64:92:03:5a:da:8e:1b:cc:d2:78:02:02:0d:
b6:8c:0d:e4:9a:40:c1:44:4f:2e:ed:ca:68:83:cb:
56:e0:0d:05:64:22:21:23:d2:78:38:f6:2b:3d:d0:
ed:06:44:7b:9a:13:d2:7e:07:9a:2a:4f:99:8d:94:
d8:e0:29:86:58:e9:35:07:a3:e8:0c:ac:8e:97:a6:
73:85:49:58:b7:3a:de:cd:73:c6:c8:52:2c:54:df:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.84.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24944
Signature Algorithm: sha256WithRSAEncryption
36:f4:2e:7f:15:cd:bf:61:41:42:bf:a6:fe:0f:92:ac:9a:37:
d4:5d:3e:5d:86:0d:11:ec:f5:9f:73:7b:60:5a:2f:11:8e:cd:
8f:c8:d5:2f:ad:94:44:52:b0:ad:64:39:24:e8:80:64:cd:ab:
5f:a9:79:97:ac:67:c2:44:fe:7b:76:d7:2c:9a:5e:0e:bc:b4:
3e:4c:d8:c7:b1:05:07:4f:ef:96:3f:01:b8:39:f2:58:9c:07:
f1:c9:80:7c:b6:bc:04:52:d1:ed:e1:89:d2:f5:51:e4:68:02:
14:42:78:4a:10:35:86:45:fa:a9:04:82:0e:cd:6e:c1:58:1d:
ee:27:57:dd:30:65:5a:0a:80:ff:2f:30:75:0d:b5:7d:f1:38:
fa:ae:61:45:45:f6:4b:05:18:e2:23:3c:87:84:34:2c:b7:64:
ac:95:e1:e0:c6:f5:82:b8:7c:cd:4b:b5:e6:0d:bf:d2:5c:98:
a8:5d:17:9e:3f:1e:4e:1a:94:58:4c:dd:da:ff:52:55:af:dd:
96:36:51:ea:b5:d5:07:70:c0:1b:1e:b5:0e:2a:a5:3c:ba:13:
83:d2:35:80:5b:68:26:fc:d8:0a:41:cd:a1:4f:37:40:89:18:
ff:13:e3:10:37:66:39:8a:0a:fa:03:92:63:1f:ef:6e:0f:51:
77:91:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:40 2026 by rpki-client