Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
File: J00tUy6xkrSkwQbK-s0azJzigmY.cer (raw, json)
Hash identifier: fg/v1OgZdZm4iSf2ixygUDuY6UwFn5MqNbGkVKPUaEk=
Subject key identifier: 27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E3F962A1E2D167F110630EF72A1A7F457
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 May 2026 09:34:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.214.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:96:2a:1e:2d:16:7f:11:06:30:ef:72:a1:a7:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 09:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:a4:88:cd:b6:8f:50:6e:d6:f3:1e:39:7c:
f4:81:36:a3:4c:43:86:0a:1a:29:23:72:25:f5:25:
17:62:8b:9d:6a:52:7e:25:a5:dd:cf:e2:9c:0d:2f:
e0:94:cb:a1:75:eb:79:89:2a:09:e0:ba:f3:58:fc:
38:60:10:b7:52:3a:20:06:4f:ea:ec:04:20:da:45:
58:30:85:77:bc:2f:99:29:c1:60:b9:52:90:09:02:
d6:ed:c4:e9:d8:89:3e:7a:b8:9b:ba:39:82:4b:31:
7e:8d:2d:51:e2:65:41:7c:bb:29:99:ad:6e:6f:8c:
ee:e0:4d:2f:50:29:2d:7c:ed:7d:27:23:59:7a:ee:
b3:ee:15:bc:b3:20:bc:7f:d5:42:91:e1:43:47:35:
9b:30:ca:2b:e0:92:5f:86:5a:06:4d:1c:b9:10:2f:
a8:5c:48:05:da:4f:5b:d3:c7:4f:fd:a0:8a:3d:00:
26:64:6a:3a:5e:3b:8d:0b:eb:9c:2f:3c:4b:82:45:
e0:c2:9a:5b:7f:9c:66:19:11:03:66:b8:93:61:99:
72:9e:e0:8c:7c:b2:33:96:5c:67:0b:0e:17:25:92:
24:d8:90:88:31:60:f7:a0:41:c3:fa:79:b2:b4:a3:
23:ad:cf:c0:74:55:47:30:d9:2e:e0:f7:61:a6:70:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:d6:cc:8c:56:f3:5d:54:43:2b:5e:b0:f2:1b:24:0d:c3:27:
41:b3:03:76:75:1a:80:31:f3:49:c5:75:67:5d:29:c8:61:fa:
5c:22:d4:bf:bd:f1:af:a9:46:9b:0d:27:82:5b:3f:db:60:f8:
62:c6:63:98:76:dd:7d:b5:63:02:6b:09:44:5f:45:99:6b:60:
6d:c2:5c:80:9e:df:73:1b:4b:32:53:b2:7c:54:94:d9:22:41:
0f:1c:45:9a:ea:c6:4a:1e:a4:35:47:46:87:46:1c:53:7f:8a:
dd:9c:15:6e:e1:d9:f0:ac:c8:f0:cf:3f:50:59:4d:dc:02:fc:
3e:65:3a:b4:47:a9:8d:6a:f4:f6:d2:40:cb:cb:1e:49:9d:3b:
5b:5d:ee:2c:0b:ef:ed:2d:a7:9c:22:b9:18:e0:28:f9:6c:b8:
6f:8d:6b:49:80:b6:55:92:55:fa:10:71:08:53:39:20:0a:1b:
32:1e:b0:5d:23:54:2b:7d:1b:b4:b2:74:d7:b9:64:45:73:80:
37:9b:5e:5a:58:1d:91:46:1d:fa:da:0d:e7:9d:cf:b3:61:35:
c1:4a:4c:69:4d:83:ee:16:c6:6f:53:e6:60:61:36:8c:75:1a:
d4:c4:56:f8:ba:b1:36:5d:96:2d:b8:25:cc:85:91:08:21:42:
2f:04:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:23 2026 by rpki-client