Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer (raw, json)
Hash identifier: Im+dlCWSSw6tT9qDwkQh4MbiMqjUIzaO4U8LNGQAn0E=
Subject key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE1BE6D0A4872B74F72C0DC683A7A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25181
IP: 195.2.32.0/19
IP: 2a00:1310::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:1b:e6:d0:a4:87:2b:74:f7:2c:0d:c6:83:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:51:4b:88:df:fc:04:fa:3d:dc:c3:23:23:
7f:51:9c:fd:34:96:f1:6b:c1:41:45:b1:b9:10:9b:
c5:4c:24:ae:52:74:92:9b:28:ce:e1:f8:20:65:77:
fd:a8:95:f9:5b:cc:68:97:5b:d0:17:d0:bd:b5:f5:
c8:f5:63:c8:b2:eb:23:c0:c8:dd:3f:40:39:77:15:
95:40:03:4f:13:dc:bf:4e:3d:82:c4:2d:a7:fd:e4:
1d:32:ee:1a:01:60:ae:3e:a5:0e:41:2d:b2:cd:e8:
38:f2:24:bb:b2:1d:40:e5:a2:d0:88:97:16:bc:2e:
cc:39:36:1e:c6:c6:66:55:ec:d9:41:89:ab:a8:e0:
c1:9b:36:f6:b8:74:f6:ed:b9:6b:df:b1:7b:d3:5b:
9b:cf:df:cd:f8:a5:3c:8a:e1:15:a0:12:43:27:67:
6c:9a:99:2e:db:15:70:bd:38:c1:73:fa:a2:ba:96:
c7:4f:2d:98:4b:50:04:95:c3:10:8f:3e:b1:ed:d6:
3e:34:0c:8e:0c:e8:68:ff:1c:d9:19:18:93:c5:23:
70:bf:54:54:0d:36:60:84:bb:65:c7:37:53:ad:ba:
0a:38:c3:ed:36:d1:af:cc:bf:e2:3b:2b:75:87:da:
59:cd:2f:6f:b2:b6:2f:2d:4b:13:dc:66:0e:e5:72:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.32.0/19
IPv6:
2a00:1310::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25181
Signature Algorithm: sha256WithRSAEncryption
38:fa:84:2d:1c:75:f7:8c:9b:0b:f4:13:16:50:ac:4c:69:92:
84:62:9f:12:28:47:28:f3:0e:ef:b2:03:b8:38:41:ee:3b:79:
ef:c6:5c:a9:16:b5:29:91:ae:7b:df:45:9c:62:08:52:93:7c:
4a:aa:bc:98:44:23:4e:e6:05:f6:c6:11:05:b8:b6:39:74:93:
9e:76:e2:15:54:b0:d8:bd:00:6a:ce:d4:a1:26:d2:72:9b:39:
62:ce:3f:d5:22:9e:bd:23:0c:31:81:12:98:79:dc:93:71:f8:
f9:a9:30:1c:03:96:fd:c8:80:05:22:0e:5f:5c:65:ad:06:e5:
16:ab:5d:24:53:31:22:4e:e3:4f:df:53:f0:fb:22:f7:76:6c:
ef:a2:a5:a0:66:4b:2f:c0:07:3f:16:81:74:f7:06:40:87:ab:
98:00:ba:57:6b:cd:dc:b8:7b:73:97:67:1d:ae:52:f1:fa:a6:
c5:3c:1e:a5:b0:d1:d7:a9:ee:3e:94:d3:c5:19:63:29:2e:d4:
22:32:9f:36:9d:2a:0b:4b:16:bd:c4:f5:ea:c9:da:e3:55:bc:
fa:af:d5:8e:89:a2:d4:b5:e5:aa:24:9b:81:9c:d1:df:73:83:
95:e9:85:23:48:5c:2b:d2:df:64:e9:58:5f:a6:cd:d4:2e:a2:
89:69:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:24 2026 by rpki-client