Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
File: atcO8l5SLA0m6Xeh0k_3fq062hk.cer (raw, json)
Hash identifier: QPZIB8zZn8tO45QdO3Ig/wWIDRDCaBAU/fqbvf6xhxw=
Subject key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCA58BA11CC6697CF09B2FC5726CA18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21058
IP: 80.83.160.0 -- 80.83.169.255
IP: 80.83.171.0 -- 80.83.175.255
IP: 2a0e:30c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:58:ba:11:cc:66:97:cf:09:b2:fc:57:26:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:9e:a1:50:f7:98:5d:b8:3a:e7:61:a9:68:
bd:ea:d9:ef:0f:16:95:0e:3b:7f:ac:b0:ed:9d:34:
e9:cc:da:d9:b5:d4:d6:8e:d6:dc:ab:b2:4a:9d:f8:
a8:5d:d3:5f:22:44:48:f9:4a:a0:ed:da:00:7e:b5:
27:38:84:5e:db:d9:cf:3f:65:c4:b8:87:6f:f6:2e:
b0:05:5e:e7:bf:40:5d:26:44:66:43:93:58:f9:43:
de:df:76:64:2b:f9:32:ab:d2:1b:a5:54:05:bb:79:
47:e2:94:2e:2c:79:78:99:f6:77:f9:15:ae:36:80:
50:97:f7:80:b2:32:a5:65:f1:1c:75:05:d7:81:a6:
82:68:a9:2c:b7:5c:98:b6:64:3e:49:d3:19:5b:49:
8f:6c:0d:00:ad:9a:41:ee:d6:88:ab:ba:3a:fc:a2:
34:44:6e:dd:24:4e:99:60:6a:bc:60:c0:e1:ea:6c:
b7:11:ed:63:f2:a3:b9:6d:5b:81:e4:9f:5a:03:c7:
a8:19:d8:6e:a4:e3:27:02:56:82:ce:fc:44:bc:e0:
64:32:7c:50:a6:e3:2d:0f:46:29:23:a5:eb:18:25:
c4:c5:44:9f:df:09:cb:bb:e2:12:75:f7:76:ef:73:
d1:fb:fd:2b:90:d4:50:1e:0b:91:3e:35:3e:2e:2d:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.160.0-80.83.169.255
80.83.171.0-80.83.175.255
IPv6:
2a0e:30c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21058
Signature Algorithm: sha256WithRSAEncryption
65:7f:3f:b0:d8:a9:bf:67:9e:cf:d5:e8:df:64:f6:f6:2f:c5:
07:eb:2e:bd:75:03:cf:8e:5d:83:47:50:33:3e:0d:e9:17:2d:
fc:1f:d8:a9:c8:d6:ba:32:1d:89:f1:98:81:db:1b:ee:c8:31:
c6:e8:8b:a4:26:f1:59:26:9b:2b:eb:12:1f:08:1a:91:ea:f7:
57:a0:52:0a:19:63:04:e0:b6:8b:d7:8a:6f:62:79:8f:5a:b2:
51:e8:33:74:73:c6:8e:b6:98:d6:99:61:82:3d:87:a0:f9:f8:
52:bf:82:7d:65:54:2b:14:22:4b:2f:fb:74:d8:27:80:dd:8c:
50:b0:df:12:ad:e2:9d:1e:0e:6e:4e:20:03:6d:ea:40:0c:77:
58:00:f4:ba:d9:f8:a7:ab:62:7b:22:38:9d:67:3e:a3:c7:bd:
02:87:0c:79:a1:7a:95:4e:ab:ed:4c:15:17:1f:7d:27:8b:a8:
c5:d1:18:c1:4d:35:1d:2f:d4:ca:de:38:06:a0:77:49:14:36:
0a:53:41:87:f6:11:33:85:62:d7:67:67:b6:ef:d1:fd:9e:0b:
b0:6f:57:5a:59:8f:4e:15:ba:37:14:aa:e4:ea:80:61:0a:90:
c3:2a:75:7d:1e:86:51:a3:2c:4e:6a:e9:70:f5:2e:2f:52:9a:
59:6f:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:57 2026 by rpki-client