Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
File: lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer (raw, json)
Hash identifier: /5SAcEDN6cUPbZ6xYZ9jufZVwvhyVBYw4qEC9VEBN+k=
Subject key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB2D525A32E4FB71F41C16783541C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 79.110.172.0/22
IP: 147.189.16.0/20
IP: 147.189.224.0/20
IP: 185.111.40.0/22
IP: 2a0d:1b40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:2d:52:5a:32:e4:fb:71:f4:1c:16:78:35:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:71:8b:4e:9f:03:d0:3f:70:a1:73:cb:b3:
2c:94:b3:5f:c2:00:b6:49:df:0e:75:d1:63:ef:93:
ee:5f:e5:95:73:71:0f:c4:f9:52:b5:ff:9d:a8:c5:
6a:04:2e:93:3d:56:2b:8c:02:05:09:b2:b8:7b:74:
0d:c5:d4:30:b0:a7:fc:d3:d8:9a:67:92:14:a5:5a:
20:d4:62:8e:c2:24:9e:5c:22:2a:ac:68:ef:b8:9f:
8b:30:81:6b:cf:f6:9c:33:85:f2:90:b6:c6:92:f2:
1a:5e:86:ad:33:47:53:ac:d0:a2:7d:06:74:b9:af:
f7:de:9b:50:3d:5a:3d:ff:b0:2e:85:20:f6:ac:dc:
cf:40:f1:8a:27:93:d6:96:cf:23:44:14:a5:ca:b1:
5a:59:22:e6:42:a9:26:c9:43:00:33:0c:33:03:55:
df:40:c1:46:56:c4:5e:aa:1c:1d:90:21:6c:58:d4:
b6:0f:e6:6e:fa:2d:da:0c:61:b3:8c:df:ce:20:e1:
66:5d:ff:3c:6d:c6:a0:0a:2c:d3:34:4d:57:1d:b3:
bd:64:59:aa:31:9e:db:91:0d:9f:6b:9c:58:8e:42:
cd:78:fb:a1:40:eb:fc:f4:07:f3:4b:ec:0d:ed:85:
d5:83:8a:7f:0e:42:9e:12:94:36:49:29:17:f0:54:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.172.0/22
147.189.16.0/20
147.189.224.0/20
185.111.40.0/22
IPv6:
2a0d:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
30:75:67:7d:cf:c0:d2:d4:15:b5:6a:7a:4a:6e:63:f5:9e:86:
fb:5e:15:bc:f3:64:39:42:6a:58:f4:59:68:af:da:ef:21:a8:
bc:85:3d:a5:c5:f1:47:37:3e:cf:d7:bb:7e:e4:44:a9:a8:ad:
f6:e4:96:3c:c2:e5:70:e7:14:47:87:78:88:f9:94:e0:11:65:
ef:31:46:07:2e:15:00:14:fb:d6:ec:f1:a9:f5:a5:81:7a:64:
bf:b7:8c:20:de:c8:b3:67:30:eb:16:16:9b:6f:10:c6:cb:8a:
67:c2:01:e7:d9:9a:38:bf:48:c7:0f:77:38:f3:89:f5:4d:04:
a4:0c:96:8d:68:73:a3:27:40:de:7c:aa:92:9f:b4:39:d2:f6:
89:c8:12:d2:26:22:5b:0a:20:cd:18:2e:8c:75:a3:cd:b0:ed:
de:13:9a:ce:e7:23:66:a3:5b:4c:d6:4c:e8:02:b8:db:0f:0c:
8b:62:94:23:82:97:e9:2a:b8:77:38:82:02:79:7f:ee:7d:f1:
9c:d4:e8:2d:21:25:8f:88:b9:47:92:15:e5:73:2e:06:f5:6f:
dc:4f:77:a0:ee:60:4e:fb:d7:94:1f:6d:77:59:bb:65:3d:89:
87:f5:94:01:36:6f:6e:d8:47:e3:cd:f3:d3:15:a0:fc:fd:a7:
2d:b2:a6:24
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZ8Y+y1SWjLk+3H0HBZ4NUHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQwZDQ4Y2I4MmVhY2NmMTk4ZWUyNzJlZjRmYTYwZTQ5NzU0NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOpxi06fA9A/cKFzy7MslLNfwgC2
Sd8OddFj75PuX+WVc3EPxPlStf+dqMVqBC6TPVYrjAIFCbK4e3QNxdQwsKf809ia
Z5IUpVog1GKOwiSeXCIqrGjvuJ+LMIFrz/acM4XykLbGkvIaXoatM0dTrNCifQZ0
ua/33ptQPVo9/7AuhSD2rNzPQPGKJ5PWls8jRBSlyrFaWSLmQqkmyUMAMwwzA1Xf
QMFGVsReqhwdkCFsWNS2D+Zu+i3aDGGzjN/OIOFmXf88bcagCizTNE1XHbO9ZFmq
MZ7bkQ2fa5xYjkLNePuhQOv89AfzS+wN7YXVg4p/DkKeEpQ2SSkX8FRUpQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFJRA1Iy4LqzPGY7icu9Ppg5JdUX0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzljMjUw
OC1mNjliLTQ0NGItYjg2MC1kYzBlODFhOWQ3YjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvOWMyNTA4
LWY2OWItNDQ0Yi1iODYwLWRjMGU4MWE5ZDdiNC8xL2xFRFVqTGd1ck04Wmp1Snk3
MC1tRGtsMVJmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCT26sAwQEk70QAwQEk73gAwQCuW8oMA0EAgAC
MAcDBQAqDRtAMA0GCSqGSIb3DQEBCwUAA4IBAQAwdWd9z8DS1BW1anpKbmP1nob7
XhW882Q5QmpY9Flor9rvIai8hT2lxfFHNz7P17t+5ESpqK325JY8wuVw5xRHh3iI
+ZTgEWXvMUYHLhUAFPvW7PGp9aWBemS/t4wg3sizZzDrFhabbxDGy4pnwgHn2Zo4
v0jHD3c484n1TQSkDJaNaHOjJ0DefKqSn7Q50vaJyBLSJiJbCiDNGC6MdaPNsO3e
E5rO5yNmo1tM1kzoArjbDwyLYpQjgpfpKrh3OIICeX/uffGc1OgtISWPiLlHkhXl
cy4G9W/cT3eg7mBO+9eUH213WbtlPYmH9ZQBNm9u2EfjzfPTFaD8/actsqYk
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:49 2026 by rpki-client