Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
File: hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer (raw, json)
Hash identifier: tVxjSAeZxuCVoMN38RFgn1Zdrmz9DD1R7ouSNr1BzfE=
Subject key identifier: 84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE36DE8DB8BC5BADC3ACB584AA6087
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204711
IP: 95.142.151.0/24
IP: 2a05:8740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:36:de:8d:b8:bc:5b:ad:c3:ac:b5:84:aa:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:8c:71:c1:8b:9a:71:bc:d8:35:0e:02:3c:
0b:f4:39:59:db:f9:79:72:13:20:eb:05:a3:4d:f8:
b0:c2:15:cf:af:63:c5:42:ee:67:9b:23:56:60:b2:
e0:a0:99:8f:e8:61:08:42:9a:9a:f3:d1:97:15:0a:
83:d5:8e:56:44:cc:a8:61:d9:90:db:13:a6:36:a7:
8c:ff:0c:fe:0c:9d:5b:e4:43:46:23:a9:ef:71:ae:
e3:e3:04:83:bd:50:57:91:88:04:97:f7:4f:3b:54:
ae:81:eb:fe:c1:c7:b2:32:b2:04:c0:f0:f9:19:ba:
61:a8:8e:f9:92:43:63:6b:4e:b3:b1:5a:7a:a7:35:
9c:99:fd:5d:06:97:63:68:39:c0:2b:d4:72:2a:60:
22:86:f3:ad:3a:06:29:db:7b:3d:2b:e5:d8:10:ed:
e1:cc:a6:23:1f:0a:4c:56:c9:0d:ab:1e:ae:30:51:
c1:ff:ec:ab:f5:52:75:84:b5:ea:e5:44:fc:13:f8:
1c:c1:91:2a:21:4f:bc:dd:65:d4:c7:0c:f9:d3:5f:
54:48:e1:a3:83:de:41:ac:b7:b7:23:11:8e:96:cf:
96:6c:48:25:c3:14:0b:55:4e:24:60:fe:11:1d:f1:
26:4c:b3:dc:d7:54:b4:cd:80:73:79:cd:44:87:74:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.151.0/24
IPv6:
2a05:8740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204711
Signature Algorithm: sha256WithRSAEncryption
11:4e:87:46:d7:1e:a2:2a:63:fd:3a:f1:34:b6:a3:76:f8:46:
12:c5:f3:50:67:8d:ef:0e:9b:ac:2f:7c:84:7b:70:5b:ce:ad:
99:50:70:f9:5c:be:a7:91:11:5b:de:16:b0:83:c8:08:33:e8:
0b:4f:5c:52:96:2f:95:b9:7e:a7:7a:8e:59:82:48:66:f0:3e:
69:37:a6:e9:f5:dc:70:1f:49:07:c0:34:d6:74:ab:fa:cb:7c:
f8:ef:ee:74:34:07:f8:eb:aa:e5:75:be:3e:0f:c1:14:39:23:
43:25:2b:ba:e6:d5:1b:5c:25:b0:42:0f:22:87:28:ba:63:88:
d3:05:f9:55:86:8a:df:74:f1:f0:3e:d0:51:48:bd:6a:f3:4f:
7a:e9:82:a6:43:97:82:50:5a:7a:31:7d:8b:87:0e:da:d0:85:
af:02:13:da:f6:45:94:3c:58:1a:86:b2:e0:8b:0c:46:22:90:
81:6b:a3:b1:99:f5:3a:14:07:02:42:52:9c:85:11:9d:9c:d8:
9b:65:e2:40:fa:e5:20:c7:b2:cb:49:bb:6b:4d:c8:61:3f:f4:
d9:35:6d:05:a9:e4:6c:78:aa:6c:2d:d2:af:46:ed:4f:02:e5:
4d:9a:2b:1b:4e:e5:fc:b7:4c:1d:c6:17:f9:e6:6a:5a:35:b0:
ad:fd:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:36 2026 by rpki-client