Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
File: 0PhWqIToYidB9eFo7Hqno95vK8M.cer (raw, json)
Hash identifier: VuC+Cb5dBRyCs8ITaRjlSFQmFE6RzdnlxKffupHjoi8=
Subject key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8D94F759A3CC26F2F516668139FE3DEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 13:03:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.128.186.0/23
IP: 2001:67c:2e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:94:f7:59:a3:cc:26:f2:f5:16:66:81:39:fe:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 13:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:eb:b4:7d:c7:ed:ec:7d:9d:48:fc:50:ad:
db:6e:de:96:d1:78:0b:97:b4:fc:31:5d:7c:7b:03:
5d:30:a9:e1:1e:13:e4:6a:75:a0:f8:4f:be:b3:13:
fc:23:24:30:99:1e:b0:04:17:6d:e5:3f:d4:e5:c2:
37:70:44:f1:56:67:dd:5f:2f:e5:49:0d:95:57:62:
ec:73:d6:d9:16:d4:ce:49:f2:d1:e4:76:b1:40:a4:
c4:67:80:0b:54:da:c6:28:8d:eb:54:f5:79:b1:ef:
1e:47:95:c2:c3:83:e2:fe:31:02:ac:6a:9f:7a:6c:
5b:33:5d:4e:35:e1:6e:78:2d:11:c5:f3:d8:29:da:
fa:dd:6a:00:3c:01:fa:35:6a:02:05:a6:fb:1e:47:
b9:4a:69:41:17:37:0d:83:23:03:e6:0e:64:da:89:
9c:21:76:9c:4f:89:dd:80:6c:18:3b:78:c9:f2:df:
ba:be:92:67:82:44:4d:15:04:73:0b:d4:8e:b0:09:
9f:e4:2a:dd:9d:8f:b0:c7:35:66:db:e4:18:82:60:
a5:b4:72:9a:af:92:c1:32:61:fd:52:18:13:90:c0:
90:26:3a:c9:e3:cd:e5:84:70:a2:eb:b2:03:59:12:
7b:b1:dd:23:c6:9c:b3:11:72:d4:5b:93:54:5f:d9:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.186.0/23
IPv6:
2001:67c:2e4::/48
Signature Algorithm: sha256WithRSAEncryption
88:3b:c6:6b:be:b1:ba:fc:7f:4c:ce:51:c8:2b:e5:6c:70:44:
17:94:0d:31:7c:a1:a4:a9:cb:02:e3:63:2a:26:c3:78:79:9e:
2f:48:af:44:eb:79:4d:a8:e2:a0:16:97:04:c2:62:bd:f1:f3:
ae:53:1d:9e:33:2f:e8:d7:9d:93:84:1b:dd:e2:bc:5e:3d:d9:
f0:23:ee:c6:96:90:2b:85:5a:88:df:4e:0d:40:69:31:8c:d9:
bd:70:d1:78:fe:19:bc:cb:fe:e8:43:4a:a8:b1:9e:ab:cc:cc:
ef:dc:c0:22:13:99:1d:92:d9:be:18:32:c2:82:7a:ef:64:1f:
88:32:b1:d0:10:56:b9:a4:58:fd:ba:49:25:57:86:7e:86:2d:
51:d8:35:cf:4e:f6:b7:a5:83:14:45:41:70:9c:6b:12:f1:7d:
93:d0:41:b1:a8:0c:89:f4:cb:41:c5:ee:33:ea:9d:19:5a:7a:
61:78:67:95:44:38:8b:10:dc:86:17:81:40:12:41:8f:65:0f:
29:9d:dd:8f:7d:d5:3c:d0:55:fa:b2:e1:fd:a9:31:0e:e5:88:
39:83:8b:fd:b5:57:04:be:9b:e0:db:49:34:14:ff:ea:89:c7:
af:6a:f7:31:66:be:d1:e2:14:06:27:b2:fa:c6:68:09:93:51:
b6:d2:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:55:32 2026 by rpki-client