Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
File: tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer (raw, json)
Hash identifier: UjbzPuHN+iZneU3+/NmEd1xJR+0rCvLLzeiye/HIg/Q=
Subject key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB710DB8371B0CE1F3F09B59D0C15267B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
caRepository: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
Notify URL: https://rpki-rrdp.warpnet.xyz/notification.xml
Certificate not before: Fri 31 Jul 2026 07:26:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 38168
AS: 199918
IP: 130.78.8.0/21
IP: 164.138.200.0/24
IP: 196.1.104.0/24
IP: 2001:67c:34::/48
IP: 2a04:5a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:10:db:83:71:b0:ce:1f:3f:09:b5:9d:0c:15:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 07:26:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:06:49:97:b8:e4:e8:60:32:3a:ce:ae:c8:
ea:c8:b3:2e:ed:d6:14:ff:4a:f3:3e:6e:fd:c7:5c:
d6:e2:c0:6f:67:6f:89:14:a3:65:46:5c:b8:51:66:
6b:b5:97:1e:aa:e6:2f:3e:fb:0c:48:d8:ac:54:fe:
6d:6c:4d:ab:00:90:68:3b:5b:02:bc:50:07:7c:2e:
be:6c:b3:4e:5e:64:b3:e9:36:54:45:ea:43:bc:13:
59:05:27:d3:93:ab:aa:36:c5:76:8c:f8:b8:66:ce:
80:5f:63:ce:f2:a2:0a:21:35:20:59:39:de:36:0c:
b8:d9:42:15:a0:3d:f8:f3:1a:16:1c:43:23:1c:e0:
a1:70:27:5d:d3:4a:57:f7:ce:41:b5:72:33:68:7d:
ca:40:37:36:5d:3c:47:04:ea:73:e5:83:cd:83:4f:
3e:8f:50:f8:60:51:42:6c:5b:45:ef:aa:58:e9:76:
eb:df:3f:2f:c7:2d:8b:93:ff:31:d0:4b:bb:21:b7:
23:d6:f1:79:b0:7c:1e:c9:5f:c2:ae:9b:53:8c:ee:
33:5b:93:44:79:3c:ca:66:76:8e:27:6e:ac:34:61:
a7:7e:f1:24:67:1e:5c:c1:d1:03:5b:a5:c8:92:01:
27:f8:71:93:e0:32:0e:66:af:51:a1:e8:72:ac:be:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
RPKI Manifest - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
RPKI Notify - URI:https://rpki-rrdp.warpnet.xyz/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.8.0/21
164.138.200.0/24
196.1.104.0/24
IPv6:
2001:67c:34::/48
2a04:5a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38168
199918
Signature Algorithm: sha256WithRSAEncryption
4c:01:b8:2f:24:ce:57:d2:9f:0c:83:f1:04:eb:81:5c:54:29:
12:e3:ff:8d:f0:26:b5:05:1c:dc:66:5a:cb:e3:ff:5c:30:b8:
d2:8c:3a:dc:bf:a5:95:82:cd:90:e0:18:50:d2:e7:88:5c:65:
be:30:38:14:97:55:88:12:bb:ea:94:17:1b:6c:8c:a2:56:bb:
55:26:a8:87:a5:41:2d:01:d1:bc:c9:02:af:8c:c2:64:ea:09:
5c:31:c9:ea:2a:3b:8e:03:ad:4b:b1:10:6f:18:9c:e1:47:ef:
cd:f8:8e:5d:a9:d9:e8:57:de:23:fe:4f:0e:4d:29:cd:d0:90:
83:da:e2:c3:0d:e2:e9:79:1b:e7:1b:25:94:55:61:f3:00:19:
7b:d0:2e:26:7a:3c:44:14:7f:21:0f:f3:e1:f1:fe:23:06:d6:
d2:e8:06:5b:1a:c7:15:25:98:01:99:35:45:04:58:b2:21:a2:
7b:3d:f8:b8:b3:e9:d0:10:e6:58:5d:9d:2a:39:2f:3f:a5:de:
a4:c9:b4:a0:bd:fc:cd:52:9f:e6:39:23:35:f3:da:07:4b:d4:
2c:86:6c:27:47:7e:36:82:2e:fd:c4:6c:c6:ae:bd:e1:84:68:
26:be:8e:96:b1:05:03:5c:6e:61:8d:64:ec:01:a7:a9:af:51:
f3:94:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:59:27 2026 by rpki-client