Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
File: ktIQUcppgkCljUSA7ECtdTdo3-0.cer (raw, json)
Hash identifier: nE8ESyTOzTP1Z1S6oNUCOi9PLuxjFmGaCXOH4FzxTsE=
Subject key identifier: 92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A15D3AC5B20817F58102F9681A544BF8A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 Oct 2026 06:51:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.225.4.0/22
IP: 2a0d:8c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:3a:c5:b2:08:17:f5:81:02:f9:68:1a:54:4b:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 06:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92d21051ca698240a58d4480ec40ad753768dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:16:f4:84:cd:70:49:87:fc:bb:3b:b0:da:
d6:a7:14:f5:4d:33:91:ce:32:a6:98:0b:ee:0f:2e:
0a:8b:32:46:bf:1a:82:c4:94:96:c4:ec:59:83:e7:
4b:ae:9e:43:25:8c:d4:5d:83:b4:6e:41:ed:75:3a:
c1:48:67:aa:d6:04:eb:08:94:ef:f6:1b:e2:e4:50:
b0:79:31:6b:25:43:19:1f:d4:b2:06:91:8c:cb:0a:
a4:8f:a1:95:9c:d2:8b:a5:8f:15:7e:1d:2f:d2:60:
49:4f:0f:fe:ef:e0:87:c3:81:56:49:8f:2f:58:1a:
62:1c:13:72:8c:6d:fb:5c:10:f8:e9:65:b3:a9:c7:
fc:d6:76:38:96:51:33:0f:0c:81:5f:1f:21:20:fa:
48:46:42:fe:b9:88:ed:c8:a3:21:29:8a:81:4e:d1:
c9:39:e4:7d:52:82:4e:82:7a:d5:ca:71:a2:ca:e5:
36:2f:b6:5d:a9:ea:9b:26:17:f3:d1:6c:84:61:65:
a2:a3:2f:2e:7c:26:a0:f0:82:25:4b:bc:8b:0d:a4:
7e:17:ef:ae:8e:7f:0e:91:93:20:8c:a0:58:eb:d1:
d7:ba:5c:c6:c4:0a:12:fb:e5:57:82:70:35:75:8a:
b9:73:77:88:a6:4d:36:c3:ea:22:ba:6f:4a:0b:c2:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.4.0/22
IPv6:
2a0d:8c00::/29
Signature Algorithm: sha256WithRSAEncryption
41:0b:57:50:e5:bf:a8:1c:95:ef:85:bb:79:58:f3:ea:f0:f4:
4f:62:11:1e:40:71:dc:90:77:bf:3b:02:ee:ed:8a:83:9a:56:
96:70:94:8e:2d:82:1d:c4:9e:ba:f7:b1:2e:11:9f:f2:c1:4c:
66:98:24:57:cc:1f:e8:3d:a7:23:31:da:33:51:5a:18:74:41:
de:e3:66:f2:26:84:32:ab:89:46:aa:aa:a6:e2:13:54:b4:6e:
72:ea:bf:ae:44:f9:0d:3f:25:91:e7:64:b2:66:dd:e1:3b:8b:
e5:97:15:44:96:26:90:bd:ec:13:c5:dc:a6:64:9a:18:ad:d3:
fe:00:a5:7f:6a:f5:44:1c:e9:c0:77:84:08:f6:71:87:54:61:
6b:84:00:db:f3:ff:15:56:65:52:54:79:54:34:65:28:e3:dc:
4f:c1:2a:2b:ab:85:7b:54:16:00:fa:fa:58:23:a9:65:c7:d2:
18:59:71:76:3c:92:bb:6f:ca:74:15:d9:bf:0e:aa:1d:0f:72:
2f:fa:2e:99:32:11:a9:b5:fa:9e:13:e1:f5:00:ea:81:68:6b:
75:d1:87:53:96:b6:c4:1a:6c:4c:db:be:e4:e4:b3:fb:b5:05:
50:42:74:e6:af:6d:d9:26:a8:bf:89:a4:76:93:67:9e:80:91:
b2:ac:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:13:49 2026 by rpki-client