Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
File: l8lOmcPZolKEsu228-qtp8Thjzs.cer (raw, json)
Hash identifier: sipXP02QkVSohjYEGXu5XWv7JQmTytdZ0bCwrJjACyQ=
Subject key identifier: 97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A091A3FC6CB0D7835A23886E8AABB0D0DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 18:03:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.106.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:a3:fc:6c:b0:d7:83:5a:23:88:6e:8a:ab:b0:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 18:03:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97c94e99c3d9a25284b2edb6f3eaada7c4e18f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:b8:13:a4:8c:80:ba:eb:49:14:8a:ac:dc:
c5:e1:6c:42:4f:9b:cb:02:1c:4c:cb:c7:54:16:cb:
6e:b8:2e:47:9d:42:77:55:9f:bb:fd:d8:34:96:4e:
db:9f:8f:9d:4b:99:9b:6a:f9:a5:8d:f6:93:75:80:
72:69:2a:84:54:45:f6:fc:03:5d:85:de:aa:55:72:
51:b3:4e:4b:b8:4c:6d:0b:f4:52:fd:5b:77:5e:2d:
14:cb:0e:fa:46:55:77:62:2e:36:51:13:f7:c1:fd:
d5:46:d8:c0:3b:46:8c:7d:e0:05:1f:6e:e8:96:80:
52:e4:9e:cc:27:d4:38:e7:48:0b:db:ee:cb:fe:de:
5b:33:b7:91:bf:02:1a:4b:a4:45:6a:fb:31:a8:67:
bc:3d:7e:1e:ae:09:ac:35:6e:61:f4:72:18:3a:f1:
d3:e1:1e:2e:56:57:cd:1a:08:ad:f0:60:f9:bb:6a:
03:d3:2a:ea:0a:4d:92:a3:71:aa:1f:05:8f:f7:31:
b4:fe:a7:f8:52:f5:c3:fa:26:7c:ec:0b:30:98:44:
d9:b0:fb:17:3d:75:a4:f7:ea:5a:a4:38:85:41:73:
4a:b5:6c:b9:28:7a:1c:fb:92:e8:69:63:d6:89:8d:
1d:d8:2c:b3:b1:ca:ba:79:76:bd:ae:e8:82:61:33:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f8:82:d7:81:56:9a:ce:ae:96:0d:7e:cc:bd:6c:99:ec:f0:
e0:43:32:00:dd:e9:8f:d7:cf:c6:51:30:6f:e6:fc:f3:9c:91:
bc:65:af:f4:c4:a3:ec:fc:ff:70:cc:d7:3d:7f:6c:6b:84:7a:
a9:de:2a:fd:3e:da:87:06:fe:d4:fe:54:8b:67:41:d4:21:95:
f7:48:2e:2f:94:07:60:dc:07:db:50:30:03:00:99:e7:74:87:
2e:8c:f8:8d:96:e9:c2:be:c0:53:d4:d0:40:d7:01:1f:af:39:
d7:dc:f8:1e:c5:cb:41:74:8b:3e:70:df:a4:f2:1c:37:0d:f6:
19:1a:93:cd:02:9b:35:7a:ac:51:94:a7:d9:65:20:7f:d9:f3:
f8:a3:d1:88:0f:f6:e4:50:4a:da:30:93:64:c4:23:45:73:b0:
f0:5c:15:05:70:fd:20:53:92:8f:8b:57:98:0a:2d:8e:66:71:
09:da:d9:1f:d3:54:49:17:09:53:02:24:90:91:ff:2d:08:80:
61:5e:a3:7d:47:89:ec:53:52:03:31:b1:a8:9f:d7:81:42:5b:
83:9d:6a:de:ff:fa:37:52:f0:4c:ea:e4:85:0c:9f:d9:2e:83:
39:4c:9e:e8:eb:5f:13:d5:fa:34:b2:59:69:59:3b:96:7b:0c:
ed:9c:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:23:35 2026 by rpki-client