Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
File: kN2X5P39zztPGp92Hs2Fs2hifow.cer (raw, json)
Hash identifier: Rsj4O3iCtUG4JNBI27xTFjjjiaoTeusbPrLCaFCO5Zg=
Subject key identifier: 90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F995423E25C45F27D3062871E517E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.62.108.0/22
IP: 2a0c:fd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:95:42:3e:25:c4:5f:27:d3:06:28:71:e5:17:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:c5:f2:72:d3:7c:32:cb:d3:33:82:c9:46:
63:3a:ce:47:86:d2:9e:d5:14:1a:d0:b7:1c:c5:20:
26:95:55:f5:4f:fa:fd:04:b4:52:c3:7a:f5:1a:4f:
0d:c7:6d:c0:d1:54:0e:32:bb:72:8a:e3:86:2b:7f:
c5:17:9b:b7:17:4a:1d:cf:04:ce:af:cb:91:04:60:
09:47:f3:88:40:14:2c:d7:9f:56:10:00:c5:93:61:
c6:af:f7:e5:03:9d:31:5c:c7:85:91:f4:cc:96:66:
09:6c:07:9e:00:8c:3c:15:a5:5c:7a:2c:7c:4d:22:
7f:9e:9d:f9:9b:7e:2a:36:b9:75:a5:79:39:0b:7f:
47:47:85:ed:49:4b:d8:d5:dc:da:68:96:8f:d5:77:
64:38:60:fa:8e:bf:53:9a:42:98:b3:60:13:f2:b3:
7a:72:89:8e:7a:f5:89:23:76:a1:0c:6b:96:1e:b0:
be:b6:14:c5:48:40:77:89:54:01:f5:9a:35:0a:63:
08:fc:c6:3e:72:0a:0b:a3:d0:ab:6b:4f:e5:47:5e:
58:94:21:b9:51:40:00:80:2e:95:c4:69:6e:a7:73:
7d:3a:66:c1:47:77:d9:29:87:27:7c:99:ec:2b:78:
21:9c:3f:41:90:44:86:41:8d:b9:a9:2b:73:d5:c8:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.108.0/22
IPv6:
2a0c:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
51:a1:c2:fa:92:bc:0c:3c:d7:c8:22:35:c7:f3:a3:b8:3f:07:
fa:60:bd:e8:1f:be:a2:5a:1a:5c:84:52:3c:6e:16:f9:63:fb:
a8:be:88:62:2f:41:d3:15:7d:03:e4:55:82:7a:91:40:bb:33:
f7:ec:14:11:77:99:c4:9b:d6:f2:69:8e:99:b4:e2:0d:97:31:
8e:24:87:32:ab:e5:7e:a3:41:86:e2:1d:cf:9c:66:55:7a:53:
14:33:3c:12:80:ab:69:4c:9f:c4:99:54:de:59:83:f8:35:26:
a7:cb:94:3b:5f:bb:8d:c4:93:fd:42:bc:95:e8:9b:2f:92:05:
16:da:8c:e8:96:c9:e5:97:ac:f2:ba:ea:08:03:86:52:1f:91:
ce:b1:f2:7d:66:48:8e:47:89:48:90:50:03:a6:47:1c:08:f2:
10:01:c2:06:10:a1:7f:ba:5e:43:a0:aa:12:a3:6f:a0:c8:60:
52:80:6a:58:97:bb:77:dc:c0:74:00:37:a5:7f:64:55:2d:da:
4f:a6:3e:07:ba:5a:16:2e:bf:74:33:d8:4e:33:42:6c:ea:3c:
5a:b8:4e:a1:6c:79:66:a9:76:f5:76:ce:7c:ea:f0:96:a2:5b:
bf:13:b0:9b:5c:bc:79:be:79:f1:0d:6f:4a:72:a2:1a:ba:52:
db:5b:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:10 2026 by rpki-client