Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lpu26k54_NvU3eAHRFe8Alb5i9k.cer
File: lpu26k54_NvU3eAHRFe8Alb5i9k.cer (raw, json)
Hash identifier: wDrPGNrd7t1qGPMK7mvIb/T0Rx5geYutndglpAbrq1c=
Subject key identifier: 96:9B:B6:EA:4E:78:FC:DB:D4:DD:E0:07:44:57:BC:02:56:F9:8B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F095F378261BF88A33D253376B627CD27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/lpu26k54_NvU3eAHRFe8Alb5i9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 27 Jun 2026 13:57:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214485
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:5f:37:82:61:bf:88:a3:3d:25:33:76:b6:27:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 27 13:57:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=969bb6ea4e78fcdbd4dde0074457bc0256f98bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:af:62:6d:12:55:b7:f6:3c:cf:cd:34:b0:
37:1d:d2:ab:ce:39:c3:49:ae:c1:86:23:c2:70:98:
95:aa:d2:4a:01:59:c2:a3:ac:6e:4b:a6:be:8a:52:
5d:21:e1:41:b6:e4:d6:e4:97:2e:c8:de:1c:e1:8b:
a9:31:32:21:71:85:b7:5d:69:f7:91:92:31:09:25:
94:5e:1a:e7:27:6e:a5:43:29:cc:2f:9a:c0:e4:18:
ca:dd:10:79:49:dc:a2:f7:3a:06:92:89:5c:4e:e3:
49:6f:2b:ae:07:de:3d:7a:9c:ce:a8:93:63:40:0f:
3d:d9:a8:4d:03:8e:db:c4:f2:e1:d4:d2:f5:65:7e:
e2:db:e9:49:01:ee:dd:6a:23:b4:84:14:89:df:c7:
1f:c6:ab:d0:7a:68:ed:23:70:33:52:bd:69:90:85:
df:28:ec:3e:32:4e:2e:28:0e:a6:8d:d7:c0:9c:e3:
2b:d5:5b:42:e1:f1:1a:6b:90:84:a7:d0:d5:32:46:
82:e2:8e:0b:ea:94:09:c7:b0:c2:de:7d:57:13:00:
76:d3:07:d9:bb:2d:4f:2a:48:45:09:4f:f2:3d:71:
f2:da:11:7b:9d:c7:a3:67:2e:1f:9d:68:d8:04:42:
ec:40:a2:09:07:11:b6:72:a1:fe:a9:50:70:30:dd:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:B6:EA:4E:78:FC:DB:D4:DD:E0:07:44:57:BC:02:56:F9:8B:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/lpu26k54_NvU3eAHRFe8Alb5i9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214485
Signature Algorithm: sha256WithRSAEncryption
48:6e:8f:71:2e:2d:2f:8c:a1:5b:66:a5:75:cd:d8:41:cb:3c:
d8:a4:9b:d4:c1:3a:0a:53:fc:0e:d3:f1:1e:b7:ba:56:7b:e4:
4b:08:1a:d4:ab:ed:17:12:1b:e7:9b:db:46:fd:14:84:50:ea:
44:93:6d:47:fd:f8:35:94:d4:80:e7:5e:5c:98:ba:8d:80:65:
19:c7:36:a3:65:5f:00:10:c1:fb:15:9d:b0:c5:d6:c8:06:e3:
5c:99:90:a3:63:48:61:66:29:89:05:7a:83:f7:5e:46:67:73:
e4:fd:46:3f:e9:70:97:1a:05:78:6f:ff:da:70:16:cc:60:1a:
c6:76:e4:bf:39:92:a7:c3:fd:a1:f4:9b:4a:87:c2:c6:c8:9a:
27:aa:f3:7e:42:01:a9:c9:2f:0b:c0:8f:8f:b9:b2:23:b4:bf:
f0:b0:ca:cf:94:11:01:fc:39:cd:37:06:97:5f:43:b1:ee:3d:
fe:dc:b2:e0:43:ac:57:91:77:dc:83:43:96:b5:6c:6a:7f:4b:
87:4f:11:2d:4a:0b:6f:78:b1:f6:6f:0f:b6:f6:6a:c8:44:e8:
b8:d7:f6:95:cb:15:36:36:a3:9c:6c:30:e1:97:1e:60:e5:cf:
68:3a:a7:61:18:88:88:31:e9:9f:90:a1:0a:d6:f8:f8:46:39:
3b:37:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:09 2026 by rpki-client