Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/DeH7BAgcX3CAdrXdUHceLMxlaUU.cer
File: DeH7BAgcX3CAdrXdUHceLMxlaUU.cer (raw, json)
Hash identifier: RnrAT/K8ohRZg8kp1WqKuxGL0UVAVTAObynOJmtIgag=
Subject key identifier: 0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD644A52BE3423729472C5BB6D6707028
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 08:50:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.15.233.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:44:a5:2b:e3:42:37:29:47:2c:5b:b6:d6:70:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 08:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0de1fb04081c5f708076b5dd50771e2ccc656945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:f5:11:2e:83:ba:34:8a:94:06:51:f6:c3:
53:58:56:e6:99:c2:77:72:8f:b7:d5:31:42:ed:08:
cd:04:79:6c:6f:ae:02:0d:50:7c:b0:d3:0a:dd:95:
db:9b:be:bc:17:d4:15:4f:26:4c:de:d0:34:af:a2:
71:86:b4:93:8f:b6:61:59:23:ec:b0:b5:c3:c7:d6:
95:8c:2d:b2:28:be:75:d9:cd:31:e2:d4:50:81:e4:
ad:74:cf:87:10:5b:20:45:04:cb:5b:21:68:6a:ad:
3a:60:ae:be:91:ec:9b:66:19:3a:c1:af:09:af:fd:
24:27:1d:d7:d6:01:c1:c3:c6:72:53:25:5f:f1:5d:
f5:75:ac:34:6f:22:f3:cf:0c:f1:3c:10:95:59:f5:
c6:05:39:79:ce:58:06:a1:4d:12:e4:95:44:3b:86:
d0:16:8d:8d:7c:30:03:bf:9e:e8:49:b4:0c:f6:d8:
23:da:9e:3d:8b:8c:ea:cf:e4:99:77:80:5b:dc:fb:
e3:ac:c5:e0:5b:c2:d2:7c:47:3d:92:db:3c:67:14:
75:bb:8b:6f:8a:99:9c:f3:4b:01:5f:a8:56:6e:a3:
91:d1:9d:fb:98:1e:21:b4:78:db:8d:f0:25:df:14:
e0:5d:ff:5b:ec:ac:e7:d3:58:c3:26:fd:17:83:9c:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:FB:04:08:1C:5F:70:80:76:B5:DD:50:77:1E:2C:CC:65:69:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0cc937-605c-4215-93e6-88af33cf5ac9/1/DeH7BAgcX3CAdrXdUHceLMxlaUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.233.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4c:bb:9b:26:a0:60:d3:82:a5:f7:9f:b0:8a:b5:5c:08:f2:
85:9b:fb:e4:cf:33:17:c6:ca:6b:83:cd:50:29:a9:88:1d:55:
a4:6c:62:3c:35:86:64:c1:64:85:da:75:d4:36:5a:88:a0:5a:
41:ba:87:a7:45:e8:19:28:6b:93:dc:aa:8e:2b:ca:b4:17:b8:
c9:37:e0:64:c1:e0:2c:ec:39:60:3d:c2:27:41:0b:76:8e:ac:
a2:2f:b9:18:a7:97:4a:5b:8f:34:34:71:4a:cc:e2:b9:2a:dd:
c8:56:e7:53:1b:cf:7e:f9:b9:63:89:db:1e:42:36:37:7d:fe:
de:4b:32:4b:71:18:95:54:02:9f:43:ec:b8:d6:b4:08:b2:82:
4f:11:47:b9:c3:00:00:86:be:3c:34:ee:b0:23:e6:33:1b:57:
aa:68:8f:ba:3a:ef:ce:61:e7:c4:d5:a4:ba:c6:54:2a:64:ce:
11:84:e3:74:47:a3:0a:a6:3d:7c:47:5b:2c:4c:22:a5:45:8c:
ef:a0:f6:c1:3a:f8:e9:7b:b3:de:65:91:ca:09:60:ea:31:b9:
8d:a8:5c:8a:05:3a:c2:35:1e:cd:7c:b6:fd:1e:77:ce:7d:96:
01:61:59:28:a8:1c:a6:59:60:3f:a0:2a:81:c9:94:37:00:d1:
ca:f1:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:57:29 2026 by rpki-client