Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
File: AV8OZlqcdCI8S_4nChZZreTO8x8.cer (raw, json)
Hash identifier: 9/YsI7Rv3YO7AvvrAQV2g6vkB7Nn5icdRVzm/ar6vMw=
Subject key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E6EA7882082C6F5EA31F84BD047C2E71E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 May 2026 12:55:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.137.167.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:a7:88:20:82:c6:f5:ea:31:f8:4b:d0:47:c2:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 12:55:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:5b:71:1a:ae:ea:ee:de:0d:ab:42:23:18:
c6:39:1b:d2:30:58:3e:d1:ee:19:7a:a4:c5:f8:1b:
85:74:33:32:8d:09:3c:d6:2e:bd:0f:19:44:e9:35:
18:8a:4f:81:32:71:71:1b:fe:46:99:3f:9d:e2:d6:
df:72:f3:9a:3b:c0:d4:ba:b0:a7:83:5f:c4:42:ca:
8b:73:67:28:cd:72:78:cd:ec:f4:d3:0e:9c:7f:0e:
a8:f2:c2:49:bb:08:64:14:1f:d5:fd:50:06:4b:32:
cd:50:b7:dd:25:2c:ce:f6:73:d5:60:5e:b3:69:86:
0e:0d:26:1f:05:f1:7f:a7:d0:81:ec:4b:4c:a0:3b:
1c:a9:f7:f9:0b:0a:00:53:67:8f:d7:97:3e:f5:e7:
2e:e7:0c:d7:3e:df:06:c9:32:9b:e2:f4:cd:73:63:
73:96:1e:1c:b0:54:a7:25:ee:20:1f:e6:ef:e9:91:
6b:23:e2:1a:ef:b5:ea:fd:67:6e:bf:a0:ad:0e:83:
8e:74:dd:6f:c9:c0:e9:26:c7:a0:f6:8b:c8:28:48:
7f:2a:51:ed:5a:17:3b:4b:99:08:b1:10:9f:d6:23:
ce:db:fa:21:d6:1b:77:93:2f:50:7d:6e:9e:9d:42:
67:2e:6a:ed:89:fe:35:2f:0f:8a:0c:49:2c:a8:c8:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.167.0/24
Signature Algorithm: sha256WithRSAEncryption
32:cd:78:1e:1e:3f:58:aa:42:8d:a4:74:68:45:8b:7e:a8:6b:
70:18:c0:ee:d2:3c:25:97:e3:6a:70:84:cb:90:88:50:15:7f:
bb:2e:50:61:cf:3a:e7:7b:b0:25:89:2a:54:30:63:e8:62:a0:
27:59:aa:67:9a:39:24:71:75:2f:cc:0c:fd:86:45:a4:18:a4:
b4:f0:c3:e4:67:64:95:41:1b:b1:f2:b5:16:b7:0c:fd:fa:e0:
45:b5:fd:a1:b7:85:68:9c:d9:a1:56:68:93:f4:f1:b9:b6:bc:
b5:88:57:e7:7a:f8:02:26:33:ed:71:0a:c8:2e:f2:83:b7:a4:
a9:37:fe:d7:db:eb:6e:05:4e:c4:f3:30:a0:d3:1d:bc:86:fe:
d1:3f:e9:0a:df:29:6f:3c:ae:f5:ad:3c:d4:68:54:7e:2c:02:
fa:e6:84:f0:39:72:f3:37:70:b5:ea:31:ad:e6:fd:9c:36:19:
60:ed:f7:e0:e3:3f:99:69:38:f4:60:9b:49:34:ef:09:17:53:
4b:ec:83:28:76:de:c5:e3:08:77:d7:6e:ce:22:5b:b3:e0:b3:
87:01:fa:d3:bd:2b:db:cd:f2:3b:59:07:9a:9d:ac:9c:73:b5:
12:76:2a:d9:26:21:b6:1a:5f:e6:a1:d2:b9:0e:97:49:fd:9a:
4e:ab:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:08 2026 by rpki-client