Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer (raw, json)
Hash identifier: W2U+T/b5/1renXK0Mn55TMypWs3E7+29tzC/zYa11vA=
Subject key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E4A1916F65C28F73AFDF99612829C8B67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 May 2026 10:33:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a01:f4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:19:16:f6:5c:28:f7:3a:fd:f9:96:12:82:9c:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 10:33:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:78:a3:c3:8a:e8:a2:59:3b:27:93:36:ff:
e0:91:c4:9f:96:09:43:e2:73:be:7d:3b:18:89:90:
dd:f3:c2:17:f6:16:7d:7b:3c:3f:e3:03:ee:c4:25:
1a:cf:de:b1:67:91:96:d4:89:03:a5:8e:15:f0:b8:
36:2e:ea:20:89:f1:aa:9b:b0:43:d1:4c:3f:a7:02:
c5:64:0b:7d:a4:32:13:24:1f:26:ba:02:b9:57:2f:
cb:bd:e2:9c:b6:d7:07:34:2f:e7:55:9a:da:ee:3f:
1c:7b:a6:c6:07:2c:a9:b8:df:28:79:78:a0:1a:c1:
3f:91:c6:36:55:c8:91:d0:77:b9:40:54:ba:50:17:
03:27:e8:7e:33:eb:49:52:4a:f8:18:8f:6e:20:e7:
a5:3e:15:dd:99:61:4a:db:63:a0:84:e1:23:9d:c5:
e8:3e:fc:17:2a:11:c7:18:94:15:d3:43:f8:4f:c5:
4b:16:41:74:eb:bd:8f:73:3b:bd:4f:23:a4:67:ab:
4d:e1:85:de:ea:3c:14:7c:00:58:ae:f5:94:60:e2:
54:28:05:d9:65:fc:01:88:38:9e:0f:84:c1:cd:0f:
fe:17:33:ef:84:51:99:64:65:08:81:6e:11:7f:b5:
11:a7:ed:00:74:c8:6d:77:a1:af:28:7f:db:e2:1a:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:a0:32:8b:5d:7a:47:3c:57:a2:bd:0f:fa:fb:9c:cd:2e:e7:
f9:d2:b9:1c:c5:78:ad:8e:06:d7:98:39:69:dd:71:3d:83:1e:
01:eb:08:df:d8:f6:c3:c4:38:62:da:1d:35:12:48:7d:29:d2:
aa:cc:86:bd:63:18:b1:74:80:29:7f:41:ec:19:61:78:76:72:
8a:b8:cb:32:02:f1:ec:7f:14:bc:e9:58:16:5f:82:eb:45:26:
6f:fd:8a:93:4a:16:77:9c:0c:15:4e:73:51:25:06:db:ec:d1:
79:39:03:71:50:4a:64:8e:b5:cd:ec:fb:a5:e7:c0:73:42:db:
84:e6:1e:d7:5b:0e:cd:72:c0:29:57:98:8d:86:3c:bd:d4:73:
39:fd:60:ce:dd:c0:f5:a6:2c:a2:fc:26:e0:8d:4e:14:26:b5:
19:e4:c6:4a:28:77:06:03:f0:06:d9:ae:ba:b9:fa:0e:fc:6f:
18:d9:65:6e:37:26:c3:8d:a6:59:38:2d:52:28:43:41:13:be:
ba:7f:ef:dc:2d:58:79:2b:66:8e:1d:65:03:dd:b4:52:d9:ea:
05:a2:62:11:c3:14:93:a1:77:00:bb:2c:c8:fa:fe:fc:da:c7:
1a:16:a8:0e:5a:c2:23:b5:6f:16:f1:03:ce:7e:2d:17:b4:8f:
31:3c:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:43:20 2026 by rpki-client