Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
File: KHSJcFRraILv-bc41w7-BsYBwzU.cer (raw, json)
Hash identifier: 87QkxiQpyRKUxJaFfMqa4RzkMRJSpF5I5Wk7q7YCsrE=
Subject key identifier: 28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01D2BC5D86A584716B879C189B37AE5A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Aug 2026 03:16:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213802
IP: 195.242.189.0/24
IP: 2a14:8800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:2b:c5:d8:6a:58:47:16:b8:79:c1:89:b3:7a:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 03:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28748970546b6882eff9b738d70efe06c601c335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:51:0e:ba:56:54:f1:5d:a7:ec:06:c2:22:
9a:13:ee:7e:e5:70:ab:16:8c:69:03:1a:09:b2:ed:
fe:0d:ce:f5:df:0f:51:da:e4:62:63:0b:6d:f7:6a:
93:dc:01:57:17:b4:5f:4b:78:56:22:12:3b:08:16:
24:36:e4:51:6e:4d:bc:5d:4c:06:75:0b:bf:52:6a:
2d:da:b5:51:c2:f7:26:4c:86:8a:4a:83:42:65:89:
6b:64:0c:40:f4:f4:07:05:77:65:4e:b8:4f:1d:20:
95:d6:ac:d2:9a:6b:bb:61:86:d3:e5:15:9b:14:f8:
34:69:83:13:f2:18:b4:2b:ca:ed:98:39:d2:f0:2b:
b8:67:64:53:fc:35:6c:3f:5d:a6:61:a6:fd:f7:3e:
1a:13:76:bd:dc:ed:a2:65:a3:01:68:4b:4f:d7:4f:
32:3c:1f:b6:42:ae:ac:df:c0:b8:75:8b:79:a1:05:
71:f1:7f:bc:8f:fc:c5:a3:43:ca:99:91:94:d1:28:
3d:d9:df:89:b4:18:f9:a8:0f:44:56:8a:e7:fa:d6:
e2:0b:99:12:0c:fe:6e:81:9c:b2:46:df:f7:4a:12:
aa:b3:48:50:c9:a2:b0:55:b0:61:15:5d:c6:89:db:
ad:27:11:75:85:50:fd:e3:60:a4:14:15:3d:9b:b9:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.189.0/24
IPv6:
2a14:8800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213802
Signature Algorithm: sha256WithRSAEncryption
97:7c:2f:19:ab:f3:de:cb:0a:5c:cf:36:ae:d4:e6:b1:13:2c:
9c:6d:ec:d7:ca:15:17:52:a9:b3:61:99:ab:45:f5:3f:cb:b0:
ce:25:7a:f3:9f:07:f3:30:d6:0c:b7:7c:51:39:b9:0e:1c:f4:
c3:99:93:6c:5d:1c:46:0a:9b:f3:80:ce:0e:92:90:04:69:01:
0b:1b:7f:95:13:22:e1:a9:b2:00:00:f0:7b:b8:7a:80:d9:77:
6d:4e:9b:ab:85:3b:fc:4f:f3:82:ff:1a:eb:11:35:64:5e:4b:
88:51:01:19:e6:86:cf:02:5e:0e:a5:cd:2e:27:10:da:fa:50:
76:09:2b:b8:f9:d5:13:c7:2b:2c:4a:a1:0c:f1:bd:99:6a:4a:
b7:f1:ab:6e:45:90:35:d2:45:67:bd:37:1d:fe:df:06:e8:31:
1b:32:14:b8:1a:e5:d8:50:32:f2:4f:55:84:58:c0:a0:3b:a2:
4b:60:1b:3e:94:c4:1f:6b:59:34:9d:f3:85:46:de:09:4f:e8:
d2:99:ae:b9:13:e6:c8:23:2c:9c:56:46:47:f0:f9:71:48:f1:
6f:02:54:70:2e:f7:c5:69:91:1f:fb:de:59:74:b7:56:02:b2:
dc:30:63:2f:47:43:c6:1b:f5:5f:9a:97:38:90:63:be:dd:75:
54:26:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:05:53 2026 by rpki-client