Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
File: lZ-XIanIo9qPwjfG5j5suEJKV7k.cer (raw, json)
Hash identifier: +Ol377aGkEQgP/wFNJVHhtzO20+Be/Xnqj/pLAJAE5E=
Subject key identifier: 95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0622046E41BACB2C5D6477434BBE2F1ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Sep 2026 12:37:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.177.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:20:46:e4:1b:ac:b2:c5:d6:47:74:34:bb:e2:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 12:37:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:2c:cb:96:e0:e6:63:11:63:ec:a0:7b:69:
8e:1d:06:dc:2e:bc:f8:3e:1e:3a:d1:d5:92:a3:97:
e9:00:d2:fb:03:eb:68:4b:cd:ba:c4:33:d1:2e:e3:
c1:33:94:d8:96:0e:2a:ab:cc:33:8c:85:ec:b3:d3:
49:f3:2f:1a:d1:14:12:5d:e2:72:00:d1:29:7c:67:
98:ac:ee:31:8e:e1:f1:62:fa:3f:ee:5d:4a:58:15:
06:7a:d1:40:20:ac:ed:57:06:46:82:85:5b:cb:2a:
6e:bc:95:84:49:e2:9e:8b:74:1b:7d:13:44:e9:79:
8c:40:09:66:73:c4:4a:31:8d:99:a3:92:51:77:fd:
2b:5a:d9:f6:1e:7f:91:85:73:f6:1f:90:6b:65:69:
d0:55:1e:ed:ff:cb:eb:25:92:ef:89:6c:51:02:94:
1e:4c:d5:b3:20:3c:28:84:0c:f9:ee:82:68:1d:c2:
4d:b5:45:20:70:37:8d:bf:64:79:21:36:b7:ff:12:
9b:95:a5:bf:7b:1f:f6:14:25:5a:c7:51:54:af:c1:
91:21:7f:20:97:41:a1:2c:d5:3d:f9:ee:7f:71:8e:
f0:9b:03:02:67:45:06:f9:9b:a9:99:55:44:22:75:
d8:ca:92:11:1e:af:02:31:af:72:a2:97:c9:e4:a2:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.177.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:fa:3c:6d:a9:9a:ac:9f:0b:6d:46:b3:c0:d8:77:0a:d1:4f:
0d:e8:27:cb:51:44:86:0a:1f:9f:a3:22:b7:a0:91:19:d2:0c:
00:ca:84:1b:17:b9:2f:f4:1f:4e:b7:8a:97:cf:a0:b8:8c:c7:
fb:a9:f6:d0:91:23:c1:11:2c:38:75:c1:77:51:c9:9a:4e:35:
5e:96:fb:c2:22:bb:29:61:4b:8e:fa:22:34:15:db:3e:ad:e3:
b7:16:71:18:e3:2b:7a:da:d5:aa:16:ff:f6:7b:d9:61:b0:88:
d3:57:0a:cf:84:9e:41:e4:ba:62:ce:da:2b:87:10:f8:87:80:
86:53:ce:fc:fc:ed:df:e7:61:42:fd:e9:fd:b7:7f:ea:ef:95:
5d:8f:30:a3:cd:69:56:dd:ad:e8:d8:46:71:87:8f:93:38:9c:
8c:e5:46:40:25:18:b9:c0:77:5e:d5:23:7d:fe:22:a8:4f:5e:
5a:20:6d:5e:e8:0b:24:e7:22:84:fb:6c:54:40:93:26:c4:be:
f2:90:e6:9c:d5:a1:74:6f:cd:72:0e:a4:d5:8b:6f:e6:53:c7:
19:bc:96:5c:6d:e2:00:36:e6:d1:6e:3b:89:92:e8:86:bd:1a:
ed:d5:c9:46:6d:5e:e0:a7:05:06:7f:b6:63:45:fc:8a:5b:89:
61:66:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:35:32 2026 by rpki-client