Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
File: zXXolNaajeSsnxixZzCGj8JY5Jg.cer (raw, json)
Hash identifier: OI7mvRF1xx1O/D+1J2/Pp+WYJA8qLh8pz20SWQfk2no=
Subject key identifier: CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FEB75C843794DF9593F399EAC552AB3DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Aug 2026 11:36:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.105.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:75:c8:43:79:4d:f9:59:3f:39:9e:ac:55:2a:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 10 11:36:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd75e894d69a8de4ac9f18b16730868fc258e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:00:a4:a7:77:4e:51:cb:21:02:27:1b:25:
9f:80:9b:e8:90:76:a1:4a:de:8c:67:9d:c9:46:f7:
84:90:12:03:74:86:05:46:81:5c:7d:85:1a:e4:95:
93:64:af:5c:3d:82:9f:c4:19:30:d7:de:ff:bf:93:
2a:49:62:ed:fc:d4:16:0f:4d:a4:1b:40:28:ae:b7:
f1:9b:dc:08:84:0d:6a:2e:45:75:5f:c9:1b:0d:49:
44:4c:09:9f:0b:05:a6:0d:4a:25:5b:4b:15:c8:7b:
ac:37:6d:8e:3a:c0:35:38:37:24:39:c8:ac:88:6f:
8d:18:cf:f4:68:3d:f1:f1:30:24:6f:82:3d:99:13:
54:12:15:94:6e:45:65:38:4c:7e:58:11:74:1d:e4:
8f:fa:9f:f1:f8:5e:b6:ac:03:2f:8a:8a:1f:21:99:
b5:12:e0:87:11:38:07:79:58:fd:a1:35:08:64:e7:
23:6c:c7:47:73:34:d0:a7:fd:45:82:35:20:4e:7e:
0c:9a:d8:f1:10:5b:ca:50:58:b9:89:40:86:1a:fe:
68:c4:31:c5:1a:8c:a3:95:b7:90:f8:1c:e0:22:e8:
38:34:a4:ae:65:4a:a0:e7:2c:23:2b:93:39:34:d0:
6e:b7:d1:78:d1:a5:f3:51:9f:6d:76:dc:cc:f2:54:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c3:ec:8f:93:84:1f:b9:18:70:03:d5:9a:6e:cb:6e:45:08:
40:42:98:14:80:3f:d5:9f:94:e5:2c:1b:fe:97:54:28:de:4c:
e3:b3:4a:fb:04:e2:dc:c2:bf:3b:23:18:aa:a2:ce:0d:13:5f:
2a:00:78:5d:29:5e:ee:73:2a:9e:9a:9b:b8:d3:09:71:f4:10:
ce:fd:f8:47:12:32:37:77:a8:f2:da:2e:4a:f7:86:0f:47:1a:
38:62:01:be:59:24:bd:e2:1d:df:04:f4:aa:ab:10:fa:fc:51:
7c:e7:17:63:a2:22:00:d6:65:ae:8b:08:b1:60:52:02:f2:bb:
3c:dc:a6:9a:b2:b6:fa:a7:08:0e:d6:2c:69:3d:27:f4:13:42:
a2:02:36:d2:7a:de:ab:e5:ea:5c:e1:dd:c3:c3:8d:14:3f:47:
1e:af:80:4b:12:d5:2d:38:59:26:11:3a:b9:b2:f8:d0:13:d0:
72:5c:62:a8:95:f1:0e:53:f1:96:98:67:34:0d:9f:72:1e:6f:
f2:52:ea:2c:f0:db:9c:2b:f6:2a:05:0d:72:22:2d:e2:de:86:
6d:c9:a9:c8:6f:86:38:7b:33:3e:58:ce:18:c3:2a:7f:93:28:
7d:aa:87:1f:30:80:07:75:0a:50:1c:6a:ca:79:dc:e8:b7:ea:
e0:ce:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:40 2026 by rpki-client