Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.cer (raw, json)
Hash identifier: AYaEFjw7XhToezc7A5RbWVYuPn83XhhVXCOXB9YIuek=
Subject key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6ACBF7554DE5F91FB41780B2D85EF8E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 08:51:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 85.209.42.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:cb:f7:55:4d:e5:f9:1f:b4:17:80:b2:d8:5e:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 08:51:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:fe:9d:81:ce:80:06:fb:74:e2:57:b1:ac:
f3:24:b6:9b:70:44:1d:24:5c:bc:d1:87:b2:de:2b:
19:29:69:18:3c:e4:9d:45:cf:9c:db:b3:c9:b5:a2:
19:0c:2d:01:f1:ef:1d:10:2a:a6:2b:f5:7c:21:94:
1b:fa:af:b4:30:d9:78:b7:f0:f4:19:d8:88:31:96:
12:fc:43:21:de:7c:89:a3:89:a7:ac:82:46:72:92:
33:d5:90:55:1a:f5:40:14:8f:21:d1:0b:89:54:8c:
53:a8:b8:d8:ca:c8:99:74:26:9c:0d:b9:85:43:4c:
3b:5b:59:be:c1:1a:c8:66:9e:9c:2d:e2:76:c3:60:
ff:06:8b:6e:34:55:15:8e:4b:cf:6d:17:75:bc:ed:
c3:5e:b2:fd:d5:e3:b4:bd:46:c4:76:33:4b:50:29:
11:4e:c2:33:f1:5a:16:6f:4f:cc:2e:09:5b:41:c2:
24:39:95:4d:fb:a5:c7:47:40:b9:1c:d1:20:0f:a9:
97:73:72:aa:cf:99:12:b5:ba:04:18:6f:47:c6:6b:
92:88:13:32:c6:ba:14:5b:18:74:a4:c0:9f:ba:c3:
da:d4:6e:a7:98:fe:39:31:64:16:64:7b:e4:ed:1b:
c8:09:53:a9:b4:e8:65:0a:d4:fe:80:89:c5:ca:e1:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.42.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cc:26:75:a2:8c:f0:c2:13:a4:0a:fc:ff:84:82:3f:67:63:
bb:c8:58:fa:d0:b0:54:49:e3:fa:53:f2:ed:fa:21:a3:07:b9:
05:d3:8d:e3:de:b2:23:26:48:a2:b7:58:c8:ef:dd:7c:b6:1b:
92:9e:49:fe:9f:ed:e3:4e:c1:2f:af:30:e8:d3:be:88:71:ed:
e9:58:b2:37:a3:d4:33:ee:33:3b:b3:8e:5a:d3:4c:c3:bd:90:
31:f8:55:4a:88:cc:94:37:42:b9:fd:e0:3a:ab:4f:34:ef:9d:
72:c6:cb:51:6f:55:e8:91:74:1e:41:d7:bc:9c:2d:b5:ab:21:
c3:9d:86:c2:36:a8:6f:9a:ec:13:eb:5d:07:70:bd:fc:6c:1e:
20:0b:5f:a6:11:5e:96:ac:6a:37:e7:d5:8b:e5:fd:a0:ce:ac:
11:de:aa:f0:c7:da:74:c7:6b:79:67:8e:24:da:05:30:89:42:
60:2d:65:52:1d:ce:4a:3b:8d:58:21:7d:64:47:c3:5e:8f:ec:
16:32:4f:f5:02:99:82:31:e6:c0:36:6f:dc:7e:a8:4c:2c:5c:
4a:a7:b9:9f:91:d0:d3:cc:cb:88:3b:b5:ce:fd:6d:ba:47:a6:
65:ef:e8:f6:93:21:92:58:d9:7e:ef:0a:92:c8:b8:df:6f:01:
07:22:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:42 2026 by rpki-client