Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer (raw, json)
Hash identifier: bPQLEw7bq0Mg55kKh6zUGOp8v64kieoXRTddu7TXpQE=
Subject key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DFD483B4CA439699F360E433990B3E2CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 May 2026 12:34:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.37.176.0/22
IP: 2a00:a1e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:48:3b:4c:a4:39:69:9f:36:0e:43:39:90:b3:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 12:34:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:4d:b4:83:19:1a:42:d2:7d:c2:b5:05:14:
dc:78:5e:53:60:3d:76:fe:94:9f:96:90:a5:71:99:
ae:93:3c:7a:29:f1:5d:da:17:35:d0:fe:c0:88:3f:
5a:0a:93:75:d7:d0:13:43:24:d4:d7:40:c3:68:ac:
c7:a4:69:2b:c8:cd:e7:8e:be:2f:a3:d9:88:44:fe:
85:c6:bf:67:05:f4:b2:84:86:5e:b7:d3:83:1d:8c:
5f:14:3b:3d:06:27:78:e0:e6:de:e2:b1:9f:7d:48:
71:b9:6a:dd:13:2f:c5:3c:4c:b9:e2:a2:22:42:93:
59:7b:6c:fc:c9:e0:4c:de:49:61:22:63:51:2c:a3:
ac:d6:13:32:69:37:65:c7:4e:01:f3:6e:c9:a1:10:
25:99:80:0e:35:39:8e:a5:eb:44:d3:a2:d3:35:1b:
70:89:a8:b1:4a:7c:4a:a7:0d:92:01:7c:3b:31:cb:
96:4e:b4:99:f7:ad:eb:bd:67:2a:b0:f0:ac:6f:f8:
95:ed:e1:4d:ed:d0:ab:5d:30:49:68:4f:4a:f9:65:
c1:ce:75:de:d4:9a:9c:ee:0e:53:09:92:b8:86:e8:
0e:2a:9f:75:f7:1d:f9:c1:77:e1:b4:10:53:72:15:
37:d2:96:7c:7b:b1:84:eb:c7:64:b9:cb:dc:ab:49:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.176.0/22
IPv6:
2a00:a1e0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:d5:c6:56:39:81:30:34:5d:7c:f4:31:cc:58:d1:60:20:a8:
4c:c6:6c:ac:8c:9b:7b:76:6c:c2:56:b0:b8:99:3c:b6:a6:c1:
d5:c4:e6:4d:bc:16:c6:76:41:c9:67:45:ff:71:aa:57:f5:53:
72:a7:ad:7e:00:98:1c:c5:7c:51:5b:82:f3:b5:db:3f:3d:64:
29:3b:73:e1:cc:f1:16:bf:94:d1:22:62:3e:21:d4:e2:8b:23:
5e:3a:df:2b:d9:6d:d6:f1:16:71:09:10:4c:a6:21:ba:ef:cc:
e6:ab:0f:f4:ea:c6:c1:f6:41:60:1b:c0:e3:b1:f6:bb:42:07:
e6:11:f0:62:5c:4e:95:2e:6e:7d:c7:d8:ac:e4:52:e2:7a:d9:
a2:6f:60:82:47:91:b6:ab:50:b5:56:0f:36:41:02:6f:96:ae:
b1:b5:f3:27:c5:e0:e9:11:d2:f1:15:79:df:30:af:85:6b:b5:
8c:68:ed:57:b9:bd:46:e1:79:e0:79:09:19:5c:7a:14:33:09:
ce:9b:a4:40:00:c5:2a:dd:ce:fe:4f:1d:9e:29:03:c7:e0:68:
71:d5:45:9a:a3:28:ca:1e:2f:34:74:eb:ba:6d:36:62:69:35:
8a:89:e3:20:9e:04:4f:a5:a0:4d:f6:3d:aa:05:1b:69:70:3f:
e6:69:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:16:35 2026 by rpki-client