Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
File: 2ddyZTONdKLvZWzYmC0-ee4scws.cer (raw, json)
Hash identifier: RLU2LnluaQtP61AiRyt3u3c8M0zxJiZ4T9sr6JISp7Y=
Subject key identifier: D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0808D33A282B3092020A81DE6B095BC53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 10:25:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203126
IP: 185.142.0.0/22
IP: 2a07:27c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:8d:33:a2:82:b3:09:20:20:a8:1d:e6:b0:95:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 10:25:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:cd:3b:28:bc:da:3f:ec:79:ee:d0:f7:26:
48:fd:e1:fb:a3:42:df:ca:d6:20:ec:d1:55:d0:cf:
4f:ce:07:94:fc:5c:a7:2c:b0:20:6e:41:74:ca:ab:
0d:0e:8a:2c:e2:c5:d9:13:4a:db:f7:ef:27:0f:95:
d5:72:5d:bc:7f:fc:8a:d5:61:d3:18:f8:ed:0a:ef:
9d:a5:c7:ba:ab:3a:64:c1:19:6a:e2:f4:f6:f6:db:
50:6e:31:94:bd:1d:3b:b5:12:10:d5:45:e9:46:06:
19:bb:26:00:f7:df:9a:72:17:0d:34:6c:3e:cc:41:
f0:9f:08:14:f3:32:d6:26:b0:97:a0:6d:0f:af:a4:
cb:a0:f0:64:4c:3b:3a:51:aa:2a:ff:98:b8:92:25:
e2:54:df:7e:75:ee:f2:07:bd:1f:8c:35:3d:d4:6b:
b9:b2:57:c7:7b:a1:1c:65:ea:b8:e7:0b:75:d0:3c:
f8:d3:71:94:ad:9d:90:2b:a9:84:e9:b5:76:27:2c:
f1:e1:6f:31:eb:d7:8d:fd:63:46:aa:62:6d:23:9b:
4d:11:d9:42:c2:8e:05:81:36:d9:a2:bb:40:74:49:
5a:19:08:27:af:9e:a2:e1:fd:29:38:19:cb:34:4c:
83:1d:36:d8:89:cb:9a:33:b0:10:c1:33:20:6a:8b:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.0.0/22
IPv6:
2a07:27c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203126
Signature Algorithm: sha256WithRSAEncryption
7f:6b:38:72:4b:1b:74:c2:07:9a:21:2d:05:9c:c3:31:84:31:
44:fb:73:4c:33:86:10:c6:95:7e:20:ca:b2:d4:e9:a0:96:fb:
4a:32:e5:ff:9d:12:a1:7e:ad:c6:f7:8c:fc:4c:c3:4c:b8:2e:
81:76:1d:e9:84:41:28:39:ee:71:a5:4a:d8:29:cc:ec:5f:89:
8b:a5:be:5d:ac:d0:a5:e6:13:16:7f:b0:7a:ff:51:aa:39:87:
36:ac:48:0d:78:2f:ed:47:35:5b:30:87:cf:48:a7:94:a3:63:
a5:e6:30:ed:8f:65:02:7e:0b:fb:ea:d3:7f:60:cc:c7:a2:50:
15:02:56:a7:3a:34:08:27:3f:e7:df:75:88:24:ad:42:58:e0:
bd:d2:12:18:ab:62:5e:e4:85:d9:3a:93:05:9a:50:de:6c:43:
f5:2b:4a:dd:a1:64:08:c6:23:f2:cd:57:c0:9b:5b:59:6c:ef:
7c:b2:a5:43:71:83:f7:18:4b:b4:1b:56:bc:34:36:dc:c9:fa:
92:c5:a6:04:3f:d4:87:1e:d2:b6:97:d0:2e:d8:50:37:b2:79:
70:2b:36:b2:9a:33:9a:ad:e4:05:c2:d8:77:c8:b0:4d:e3:bf:
2e:f8:58:6d:47:4d:c0:16:63:04:39:ec:b3:03:ce:e8:49:ee:
2a:64:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:21:50 2026 by rpki-client