Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
File: cLpEaydfH7B3gkLA1jNipZqs81M.cer (raw, json)
Hash identifier: rXqhrh+FzplxXMb+AjV1b/8UEoHCA2td+9k2akPqmlU=
Subject key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B775963DCDDE02ADAC05EF205539E87AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205340
IP: 46.251.250.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:63:dc:dd:e0:2a:da:c0:5e:f2:05:53:9e:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:3f:6b:e8:0b:92:ed:50:f4:dc:64:6b:34:
49:9f:3d:63:c8:09:2d:4f:22:2e:8c:26:4a:87:40:
17:d3:3e:cc:3a:ef:18:6b:94:7b:8d:33:8a:2c:f2:
1e:11:7e:9e:12:d5:95:98:ac:44:be:d7:5b:d8:70:
47:36:88:c2:bf:11:80:ab:e5:0a:e9:59:7f:a7:62:
9f:c8:d2:d9:bf:f9:10:28:8e:7d:f4:e3:ae:aa:09:
0f:1f:9a:13:6c:4b:49:bd:88:3e:3f:25:d7:eb:23:
ef:18:37:fb:f2:33:51:45:62:14:48:38:65:6a:e2:
f0:31:b0:5b:e1:b3:80:88:1e:aa:23:c0:79:55:f4:
78:54:7e:d4:c0:dd:d2:41:72:45:8a:ae:57:b1:0d:
d1:7f:3a:d5:c3:ac:35:81:57:95:7c:2e:13:9d:83:
33:fb:76:81:e3:79:84:c1:01:4b:7a:da:43:d4:b1:
f4:aa:aa:ea:48:e2:77:d0:ea:30:05:9b:88:ab:0b:
d0:43:70:86:5a:aa:a4:7d:76:1f:0f:65:df:9a:62:
50:61:c8:df:41:dc:03:e7:cb:c8:27:3a:dc:d0:43:
28:5b:e5:25:fe:02:0d:20:3a:27:6e:53:5d:c1:ea:
5b:34:26:97:f9:f1:31:71:92:fd:ac:0b:2d:64:f1:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.250.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205340
Signature Algorithm: sha256WithRSAEncryption
69:24:6d:0b:ce:7e:af:1c:5f:ca:26:82:4c:4d:d2:e0:bc:c7:
e6:3b:a7:8f:0f:b4:0f:80:1f:ee:2b:c7:ff:00:9e:01:54:c5:
1b:3a:79:b1:3f:49:ad:5f:71:bf:b5:15:39:c8:09:11:6c:62:
1a:ad:81:5e:bf:cb:c5:55:fc:08:7b:bd:07:5a:8b:34:90:3d:
81:46:4c:28:3b:5d:8a:67:42:9c:5b:84:80:41:d9:0c:d4:05:
56:82:02:d1:10:83:5f:b9:f5:44:0c:bc:ae:25:69:fd:e1:79:
33:1f:bc:b5:9e:c5:7c:1c:2f:fd:9d:85:ad:cb:99:a9:2a:0d:
44:e8:34:b9:3d:e0:30:7b:d6:61:12:25:0b:c9:f3:96:2e:08:
2e:e3:8e:9d:39:92:7d:33:56:82:67:03:20:a9:be:9c:69:5f:
81:da:bc:43:bb:70:94:f0:41:4e:3b:6e:87:21:fa:60:30:32:
f5:74:d6:c2:ad:c7:37:0d:28:1d:93:d3:19:f2:0a:5c:b1:51:
c9:ba:fe:60:c4:94:b8:1c:73:1b:8c:30:1c:5f:8f:ed:d4:88:
17:97:1d:c3:c7:a0:28:74:c8:74:db:72:15:c8:ce:b9:41:06:
5d:81:ff:19:29:af:ff:c7:cf:8c:07:8a:f1:d4:43:7c:ee:2b:
aa:d2:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:52 2026 by rpki-client