Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
File: Xo08C2QUychuPJSnFN-yactekWk.cer (raw, json)
Hash identifier: cqFElhMZywZiVQs95aXuC3c6IAhwmS7iRfZJAXUVvj4=
Subject key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E44F2B448FEA080FEEB1FF29206E2F1C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 10:33:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.93.0.0 -- 192.93.19.255
IP: 192.93.24.0 -- 192.93.104.255
IP: 192.93.110.0 -- 192.93.120.255
IP: 192.93.122.0 -- 192.93.147.255
IP: 192.93.153.0 -- 192.93.157.255
IP: 192.93.162.0 -- 192.93.165.255
IP: 192.93.168.0 -- 192.93.223.255
IP: 192.93.227.0 -- 192.93.255.255
IP: 192.134.0.0 -- 192.134.131.255
IP: 192.134.143.0 -- 192.134.255.255
IP: 194.0.9.0/24
IP: 194.0.36.0/24
IP: 2001:678:c::/48
IP: 2001:678:4c::/48
IP: 2001:67c:1348::/48
IP: 2001:67c:2160::/48
IP: 2001:67c:217c::/48
IP: 2001:67c:2218::/47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:f2:b4:48:fe:a0:80:fe:eb:1f:f2:92:06:e2:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 10:33:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:db:e0:66:0a:9a:a5:1d:9b:55:f1:45:8d:
ca:c9:52:f7:58:7d:b5:05:88:fd:6d:d3:8b:20:b7:
9b:67:8b:74:ea:ba:4e:18:80:a5:47:8c:b5:c3:c6:
6b:9f:41:bf:1c:ad:11:6c:3d:77:73:11:36:a5:65:
59:31:ca:f6:50:00:bb:12:8c:65:ac:31:87:98:c3:
f9:15:1d:b5:67:5a:f1:8e:b3:da:d2:00:17:d9:a7:
2d:5c:48:4b:bb:ff:cf:f7:93:0a:10:69:02:5e:c1:
26:cd:3f:a9:ac:02:b4:a0:fc:16:e9:86:9d:bf:d5:
49:47:41:93:89:b2:ef:56:df:b3:4b:40:06:93:17:
fe:a9:ce:e4:a0:c1:16:ee:6b:cf:40:fb:d0:75:ef:
9d:60:fd:0d:9b:04:ac:2c:dc:52:a0:a6:cf:46:e3:
fd:4e:0f:24:05:9d:12:c1:6c:fc:dd:00:73:fe:09:
66:c3:ef:d3:18:d0:59:10:3f:fb:3b:1b:35:09:d8:
85:08:cc:7b:c8:14:90:bd:9d:b6:8e:9e:3c:2b:0c:
c8:45:68:22:93:02:21:a9:37:6c:73:80:3d:ad:c7:
f7:4d:18:f6:05:a3:87:4a:fc:fb:56:c3:49:53:75:
29:b1:3a:99:ea:4e:fc:df:65:6b:51:5a:46:90:c0:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.93.0.0-192.93.19.255
192.93.24.0-192.93.104.255
192.93.110.0-192.93.120.255
192.93.122.0-192.93.147.255
192.93.153.0-192.93.157.255
192.93.162.0-192.93.165.255
192.93.168.0-192.93.223.255
192.93.227.0-192.93.255.255
192.134.0.0-192.134.131.255
192.134.143.0-192.134.255.255
194.0.9.0/24
194.0.36.0/24
IPv6:
2001:678:c::/48
2001:678:4c::/48
2001:67c:1348::/48
2001:67c:2160::/48
2001:67c:217c::/48
2001:67c:2218::/47
Signature Algorithm: sha256WithRSAEncryption
8d:1b:52:70:f5:65:69:a9:f5:c1:c9:75:2e:7b:c9:3c:db:41:
7e:aa:e3:50:98:65:e2:bd:18:09:82:1f:c6:3a:07:e0:54:87:
df:7d:e0:fc:5a:e2:c7:d9:a2:19:5d:bb:9a:cf:06:35:27:ef:
92:3f:b4:4b:9f:e7:bc:fd:95:1e:44:fd:44:61:59:e4:14:0b:
f1:f6:09:9e:94:d3:c6:32:43:0f:ed:f4:fe:19:ed:39:bf:28:
40:5c:e9:87:74:7f:97:b6:68:cf:16:86:2a:8d:28:a5:bc:07:
eb:d9:e1:ee:ea:2c:2e:81:81:bd:12:71:c4:f2:45:6d:9b:f5:
37:53:0c:b8:4b:88:0d:83:8e:eb:f1:4a:0c:96:41:14:3b:30:
80:73:4f:4c:bb:59:06:77:21:0a:7f:de:f0:18:77:d4:53:24:
5d:09:62:21:af:0b:b3:cf:94:f9:9e:85:99:94:0d:46:ae:0b:
02:86:94:4c:74:ae:6a:01:6a:ca:5b:9c:eb:8f:15:cf:14:a5:
63:e0:88:7e:98:ea:59:5b:18:f9:0a:a7:a3:2e:ee:9b:07:48:
52:d1:49:2c:93:00:9d:1b:96:71:ad:75:cf:77:42:93:8e:52:
14:6d:9d:37:60:2e:e3:01:d1:b3:59:cb:2b:11:b8:6f:90:2c:
67:9d:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:41:09 2026 by rpki-client