Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.cer (raw, json)
Hash identifier: 1kRsYTDR7CeivDLye3uBwIZ1ASbm96LwqBkfY47X6DE=
Subject key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE2585853DA91C1F7F735B4AF3A76A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.166.140.0/22
IP: 2a0a:ea00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:25:85:85:3d:a9:1c:1f:7f:73:5b:4a:f3:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:f4:58:f3:6c:64:bc:bd:25:8d:ba:fe:63:
33:c6:32:36:fe:4b:d6:f3:83:5f:05:31:17:45:51:
b9:a9:12:19:26:62:8d:d7:0d:a2:f7:78:5e:cc:c6:
8c:7a:70:21:0f:67:e7:bc:68:c3:16:27:6a:5c:57:
24:32:cc:8b:b0:18:51:62:6b:1b:d8:52:03:82:0a:
e0:a6:81:eb:f0:d4:22:0c:2f:43:3f:c2:d8:f2:91:
18:22:ea:18:c4:8c:ed:1e:dd:4a:6d:73:00:44:24:
60:7e:d0:52:9d:4b:7f:d4:e1:ef:34:4d:4f:36:bb:
bc:7d:c8:2b:b8:4d:b7:06:8b:5a:aa:e3:ec:84:38:
71:30:20:cb:58:e4:ee:2e:fd:c1:bc:c1:5b:fb:a7:
42:6a:a7:7f:19:a1:31:99:61:02:be:d7:b5:13:3a:
78:e3:42:2a:03:bd:d3:ec:c6:10:d2:92:a6:00:0a:
9f:52:fe:00:f1:ca:9c:30:5c:8b:9a:00:f7:61:e0:
bf:88:d3:29:9f:bd:86:d9:45:f6:bc:4c:f7:00:d2:
1b:87:08:6c:b5:1a:95:c9:00:97:b9:e3:09:8a:01:
76:08:ac:19:0e:cf:d3:e9:dd:33:2e:fb:63:ac:dc:
37:db:51:e5:f3:5a:19:41:b7:f5:21:18:09:56:67:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
IPv6:
2a0a:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
a2:27:54:3d:96:f7:12:37:f3:72:7c:c1:5f:d6:d7:1f:93:9e:
b4:e2:8f:c4:99:36:c2:a1:26:56:58:d4:01:83:24:4c:28:b7:
89:4d:ce:83:bc:1b:3e:3f:6f:f3:6f:77:cb:a9:0c:28:0a:ff:
1a:bf:23:b3:37:e2:81:56:e5:60:80:b9:49:ad:9d:6f:cd:00:
7b:ac:67:9e:f6:ff:ba:f7:27:10:01:c4:00:f2:ef:b7:0c:95:
61:f4:03:84:e0:1b:94:c8:d6:a6:ad:5b:d2:3a:df:99:19:16:
b8:8e:39:d0:41:96:62:96:3f:6c:e6:96:a5:b6:75:c8:1c:d3:
2e:8a:08:b4:94:13:6c:b9:bf:af:5c:bf:83:3e:59:20:77:97:
a1:2e:cb:7f:ab:05:b1:81:08:07:0b:f9:bd:4d:6b:aa:83:d0:
75:e2:6a:22:65:c6:fb:73:c5:b7:e6:77:b9:7d:5c:63:50:f7:
1c:08:fc:8d:23:b6:b9:47:21:d0:2a:81:66:1a:96:18:c2:00:
5b:45:71:09:54:d2:d8:90:3f:41:27:7b:9f:07:4f:1e:5b:d7:
9a:92:a6:d6:ac:69:fc:bb:ba:dd:5f:38:22:3f:21:20:bd:46:
bf:11:82:dc:44:34:e4:4d:13:22:9f:fa:dd:cb:dc:d5:24:55:
1d:58:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:04 2026 by rpki-client