Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
File: kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer (raw, json)
Hash identifier: DWuHYUoVUcxC0aKaZu1yZuua/u9b6jwuEatOHFv+zk8=
Subject key identifier: 92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB3730B3746D0E53A9A4F7A4BD3CFBA31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jul 2026 14:34:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207666
IP: 185.235.145.0/24
IP: 2a12:b240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:73:0b:37:46:d0:e5:3a:9a:4f:7a:4b:d3:cf:ba:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 30 14:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92f77382d8154e8c994a94ba46c89eff34382a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:e4:4b:d6:2c:fb:48:da:a1:9f:22:3a:01:
5a:07:f3:1a:a3:df:aa:67:12:d9:42:03:41:d4:98:
da:3f:b2:a7:fb:87:97:5d:06:f2:7a:27:fc:87:6f:
bf:63:36:be:0f:e0:be:38:af:04:65:d5:8f:fb:e0:
ea:67:e2:76:43:17:a1:22:b1:6e:0e:4a:6e:11:ee:
2e:d5:b2:22:4b:b5:10:99:5b:0a:1c:94:69:32:d2:
f0:4b:43:43:93:00:b2:d5:9c:e4:20:5c:9a:94:3d:
43:f1:6f:e8:86:57:41:62:bb:84:3e:fe:31:25:60:
51:a4:4d:83:69:5f:54:3d:e8:11:9b:67:64:2b:c3:
89:df:b6:85:01:4a:5b:4f:3e:8c:bc:86:e6:e2:cf:
a6:23:65:08:c2:a2:dc:0b:f6:ae:de:be:2b:77:2d:
47:e8:57:ac:19:b3:56:25:6d:dd:91:7b:0e:00:16:
59:10:70:93:d5:56:3c:82:b0:fd:83:5b:db:7b:05:
b9:eb:df:d1:56:d0:bf:ef:b0:d6:cd:63:15:9f:11:
f8:8f:6a:96:3d:7a:b6:d3:6c:ce:85:08:cf:19:3e:
ec:06:9a:ef:91:86:6e:81:0b:5f:72:88:af:64:b3:
30:5e:ef:57:ba:a6:87:88:1e:9a:47:a2:15:e3:ae:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.145.0/24
IPv6:
2a12:b240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207666
Signature Algorithm: sha256WithRSAEncryption
a7:70:e5:53:fa:db:a5:c9:16:6e:db:e9:84:f1:1f:5a:27:df:
cf:f2:b5:7b:f8:31:3a:15:d4:fb:db:c5:d9:d1:50:8a:0b:eb:
e8:31:97:a9:ea:77:1a:f1:e8:a8:7f:96:d0:ac:03:71:19:5f:
0e:20:f5:92:c5:b6:47:12:6c:28:f9:87:7e:09:e6:c9:61:ea:
59:6d:ad:9d:3d:f0:96:54:3f:c8:e8:6c:d4:63:df:d0:5b:fc:
00:9f:6d:9d:22:6c:23:eb:93:73:2d:b0:78:7e:19:37:bd:10:
22:71:c0:5c:2d:24:50:ec:85:7a:f8:98:72:cf:84:78:9b:d4:
38:cb:bc:0f:f0:fa:fc:de:3c:d4:20:13:6e:15:78:75:26:69:
b1:00:a0:fb:82:7e:45:84:4e:a1:10:6b:66:5e:3f:14:c6:6e:
0e:6e:f8:eb:73:35:ea:b7:ce:e3:7c:7e:73:1a:9b:ef:13:c6:
80:3e:cb:7d:06:9c:50:7b:99:e2:07:4f:b0:a4:e0:73:65:9e:
6e:e2:f7:7f:e0:fe:8e:e9:c4:cc:78:5b:b4:0e:2c:4e:82:10:
d7:c2:b7:d3:03:a0:54:ea:8e:40:0c:de:46:ab:fd:a9:76:7a:
89:f2:2b:79:8b:95:ad:2e:09:e1:2b:a9:bb:7b:c2:07:73:c7:
10:ea:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:36:28 2026 by rpki-client