Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
File: LEC2qPqheuUxi1cmX4bqVcofSwI.cer (raw, json)
Hash identifier: JFCqW3+cnKZ+YeZSoE/p0QQdxz10XPk2PimulPeybEM=
Subject key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4E1B3002A115B218861A61710512D3BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Apr 2026 12:11:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199714
IP: 2001:678:1220::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:1b:30:02:a1:15:b2:18:86:1a:61:71:05:12:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 12:11:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:fe:c5:64:12:f7:fc:3d:4f:41:af:13:08:
c1:30:1e:c5:61:0e:b3:3c:5f:2f:31:c6:2b:42:c0:
ca:5c:f1:b8:82:a0:bf:00:7a:dc:4d:f1:62:97:fd:
32:e3:86:3a:13:38:30:d4:a0:b6:e4:de:cc:79:a9:
88:54:dc:94:aa:16:d9:0c:03:a2:3c:c2:da:9a:94:
80:04:c2:0c:26:9e:97:19:a8:72:fc:d3:e0:7b:35:
5a:7c:2a:30:31:3b:20:e4:11:6e:3c:b6:be:ab:04:
e3:22:72:8f:2f:7a:74:a8:2c:7d:7d:73:97:71:9e:
7f:a6:62:23:9d:4e:56:c9:15:23:17:fd:54:17:6a:
2e:30:be:ab:ec:17:4a:eb:28:2e:8e:2a:b6:2f:9c:
06:6c:30:3b:0e:97:19:8a:ea:92:1f:e9:ab:39:7c:
fd:c6:eb:a0:59:81:98:94:46:24:c2:24:f8:19:2a:
e4:32:63:2c:6c:ab:48:4f:49:87:a2:eb:46:2b:7d:
33:60:03:b9:96:68:b1:4e:08:d2:38:b4:4c:43:55:
36:5e:a5:61:86:c3:71:8b:4a:b2:d5:78:9e:74:43:
22:94:2d:40:0d:74:c6:ce:2d:4f:68:10:24:1d:e9:
72:ed:67:71:c7:08:63:1b:1f:9e:f0:fc:a1:e4:67:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1220::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199714
Signature Algorithm: sha256WithRSAEncryption
8f:dd:74:2d:d1:99:04:cb:bd:6a:7e:52:7b:41:3d:80:80:aa:
e0:d1:e0:4b:e6:91:14:ce:cf:4d:5c:8b:03:92:f9:48:84:db:
a3:ce:8b:4f:2a:72:c9:ee:96:e5:71:09:6b:38:b6:f0:9e:ab:
43:c9:f9:e1:31:66:4b:34:2d:26:d2:98:52:ec:09:aa:7d:2c:
c7:0a:27:12:fe:63:dc:12:14:7d:d0:85:09:28:d7:cf:ab:15:
6a:62:03:99:6a:18:50:3b:dc:0e:9c:d0:33:49:b0:b0:43:89:
8d:97:93:d8:7c:76:24:6a:35:c5:4c:79:11:f1:80:d6:38:3a:
34:c5:2a:fb:fc:44:bc:39:45:81:1e:0d:c0:e9:30:46:d7:79:
b9:11:f1:54:68:26:08:07:dd:96:3e:e2:87:17:8d:63:4b:bf:
78:d8:77:43:13:a1:9a:b2:ad:dc:1a:53:0c:69:55:72:72:10:
9d:12:f7:5e:74:a1:32:78:aa:02:4c:74:13:ab:51:d4:a7:47:
3a:ef:72:56:af:bf:d9:12:b1:2e:d7:10:2d:a6:ea:fc:f1:60:
fe:c7:25:5d:9d:ab:86:3f:55:eb:b8:12:97:84:d2:7d:20:cc:
d7:a9:f5:e3:12:fa:21:a0:1a:2f:c7:ee:2e:f2:56:e1:3b:e8:
70:ba:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:09 2026 by rpki-client