Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.cer (raw, json)
Hash identifier: J1y4f5ZG6JsQook7W3VwiLLsqglF7qpbEmPv9FIe40o=
Subject key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B3599912BD609BF06431913C022523A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211649
IP: 185.251.71.0/24
IP: 2a10:af40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:99:91:2b:d6:09:bf:06:43:19:13:c0:22:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dd003af04774dd3e39730497989a3a171516252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:97:c1:f0:63:b3:fd:c0:03:ac:fe:e9:8f:
1e:68:de:6e:82:dc:e6:c8:3d:85:43:21:86:06:0e:
5b:ca:13:2d:86:a4:91:07:d4:0b:f8:2e:3a:b3:55:
98:9e:fb:b3:c5:2d:9b:1b:ff:3e:3f:1c:b3:02:8d:
3a:10:f3:78:9b:df:26:f0:a1:bd:a6:07:62:64:6f:
3f:e8:41:1d:5e:11:e1:80:ad:dc:e9:6d:c8:4d:45:
9e:38:3a:ac:62:28:84:e9:fe:08:e0:0c:c1:3a:18:
d8:d7:4c:8b:6d:ab:ef:48:07:e6:08:cc:64:b4:3e:
3c:bb:30:42:c9:ef:f4:f2:7e:dc:c5:33:e1:a2:8d:
9e:e0:04:be:1f:57:ea:e8:35:e0:22:83:18:ea:b6:
9f:6f:6a:ff:62:df:26:46:82:20:79:22:ed:74:af:
4b:99:74:47:2b:a0:6f:4f:47:dd:9c:3b:d2:7d:ff:
7f:66:19:fb:c8:61:3d:cc:2b:a3:0e:5f:28:d5:2d:
c8:97:59:71:94:aa:e2:84:5d:65:c5:40:10:86:ab:
43:24:74:4a:85:36:e8:25:1c:e2:95:28:09:cd:87:
af:d9:e0:f3:a1:f0:87:e5:3d:03:6b:b4:09:6d:a1:
9a:96:c8:78:0e:99:51:87:bd:ad:3c:e2:a9:33:84:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.71.0/24
IPv6:
2a10:af40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211649
Signature Algorithm: sha256WithRSAEncryption
92:ad:e4:6c:7a:43:9d:46:e6:d3:ce:b6:68:9b:92:36:a3:23:
60:0c:de:0c:53:24:83:6c:58:ad:34:df:0b:45:30:4a:d2:09:
e9:cd:1d:9a:3b:9c:4c:08:12:9e:2e:c6:d3:2d:4b:e1:e8:83:
0d:76:79:1a:11:24:64:83:7c:fa:2a:81:dc:62:e3:64:1c:96:
97:30:55:be:23:15:e2:da:16:32:78:9a:4b:4c:bd:37:1d:b1:
ff:11:46:ad:0f:34:1a:ab:ee:f8:2e:86:f8:73:65:62:73:12:
c3:c2:ac:ec:6c:f5:c0:5d:c8:e4:b9:1f:ef:57:36:5c:14:2f:
5f:8a:e1:13:28:08:cc:6c:b9:c2:5c:11:7e:3a:42:0c:fb:e7:
14:0a:b2:17:d7:c9:d3:a1:ba:de:0c:44:56:54:08:e5:0e:0d:
f6:c9:79:bc:71:4a:b5:84:32:88:8b:a3:b1:12:37:62:7a:7d:
2a:88:63:a7:8a:07:0a:61:24:35:13:58:ea:e0:3d:00:e9:6f:
14:16:41:30:83:72:de:1f:28:c2:c0:a5:78:95:c8:9d:e3:07:
ef:9d:38:9b:c1:66:4a:32:f9:d2:70:68:fe:79:fd:38:d0:28:
0a:2a:dc:ba:56:5d:84:8f:81:33:c4:13:c2:ae:40:2f:64:fc:
f9:a1:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:14 2026 by rpki-client