Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
File: C0BTBtBWGjedd4lHK3j7IraHCpw.cer (raw, json)
Hash identifier: 7DzLGX+JByWPGrCZReBGNdHvPNzi9lueoJ+UKoIi2I4=
Subject key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C893F113905D752438FDABED13A212FFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Feb 2026 06:45:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39817
IP: 81.91.208.0/20
IP: 185.181.184.0/22
IP: 2a02:2310::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:3f:11:39:05:d7:52:43:8f:da:be:d1:3a:21:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 06:45:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:92:08:55:ed:7d:3a:e0:91:8e:17:36:3c:
3c:b1:3f:c4:8c:a8:07:1d:45:77:fb:3f:bc:23:e5:
32:61:b5:fa:de:1d:49:4d:6e:db:e3:0c:05:25:e0:
6c:44:cd:58:85:41:0d:fb:b6:d7:f9:c0:00:18:40:
a3:8e:60:a6:9a:59:df:37:e9:c4:09:53:38:7e:5b:
21:07:51:0f:62:d3:2f:46:13:e8:fd:ba:73:47:bc:
8b:30:2f:0c:0a:4e:d6:62:f3:2c:d9:c6:5f:a0:9f:
2d:c0:59:51:dc:92:17:d0:b3:02:42:52:97:fc:df:
ed:96:75:2c:e2:5d:b1:16:c9:02:b1:3a:a0:84:e8:
ce:1e:f6:9f:83:39:c1:f4:87:53:bc:e6:36:df:8a:
c4:c5:6d:07:7e:50:8a:ae:cb:c1:38:6f:1d:08:8a:
3b:47:5a:bc:ad:7c:11:6d:41:a0:f5:6b:82:95:59:
10:df:5b:34:19:96:c0:fe:95:21:eb:5b:0e:67:2d:
c5:7e:98:11:98:22:79:e7:6a:f9:c0:65:17:3d:08:
c4:e6:f6:df:44:b6:8a:6d:87:7c:46:f6:a9:64:e4:
ca:2b:e4:bb:7b:ee:3e:c7:09:e6:21:c2:51:fe:dc:
f9:10:3c:eb:14:29:10:09:91:e1:41:1b:8f:27:69:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.208.0/20
185.181.184.0/22
IPv6:
2a02:2310::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39817
Signature Algorithm: sha256WithRSAEncryption
a9:29:8e:f2:e9:51:55:f1:24:54:fc:d7:a4:34:26:d5:d2:1a:
41:80:7c:87:04:d2:22:29:03:80:ad:e9:30:ad:e0:f5:89:df:
1b:e7:d6:96:d2:b3:f2:ae:82:12:cf:d5:3b:22:be:86:21:ab:
3b:89:e8:1b:a3:7f:44:0a:e2:23:a6:91:be:23:98:53:7d:08:
d9:0f:a3:db:7c:9a:c6:01:33:d8:36:84:4c:47:dc:f9:12:fe:
d3:e7:f5:13:df:4d:f0:46:88:43:d5:19:4f:eb:fd:50:18:5b:
00:43:cd:35:5c:0c:6f:3c:e1:a9:b5:ff:c1:bf:18:a4:ff:b0:
de:a8:4d:9b:fe:86:e9:04:06:fa:ff:61:90:92:5b:98:9e:31:
c9:81:5e:54:d6:7c:90:70:68:9f:eb:52:69:8c:ac:b2:8f:22:
d5:48:e3:e9:27:fe:68:b5:0b:71:53:64:a0:f0:f0:e5:81:e7:
0b:52:25:d8:e2:04:ce:2f:16:18:86:e4:28:95:9e:9b:4a:40:
c9:e0:0b:79:4a:7c:0b:2e:c1:ca:4f:85:dc:66:98:35:13:7f:
eb:ea:ba:bb:06:15:63:4a:13:62:3b:db:ab:90:ea:95:b5:db:
fb:42:6f:f1:b5:1f:7f:6d:cd:95:cb:ca:3e:d3:35:fa:ea:e9:
4a:b7:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:06 2026 by rpki-client