Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer (raw, json)
Hash identifier: COwPiRrPQKggKbR3QAzAJC5oZZ9Dw+4vfTe5HoCQ0cg=
Subject key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78343A71A6279BA109D59CD3836C5266
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209189
IP: 2.57.188.0/22
IP: 2a09:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:3a:71:a6:27:9b:a1:09:d5:9c:d3:83:6c:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:98:47:0d:06:2b:22:04:04:7f:55:ae:fc:
9a:cc:dc:4d:cf:42:37:d0:e2:e7:0e:b8:13:a5:a7:
30:2f:8b:97:1a:0f:1d:bc:f8:c0:c4:32:bb:97:61:
b6:38:4f:16:69:a5:c6:33:77:c3:4a:47:01:b3:04:
40:24:62:39:0f:d7:52:7f:c7:9f:9d:7d:04:c1:e8:
23:aa:0e:4f:ea:2b:63:82:b9:99:df:36:ad:b5:e6:
fd:9b:1c:c6:ba:6f:86:83:17:c9:1b:ab:6e:1c:b1:
1d:c6:fe:8b:73:e5:54:28:c4:20:52:87:88:a1:29:
3f:79:d8:bd:36:bb:92:c7:85:8a:29:31:08:3d:8c:
54:08:c6:8c:e6:86:32:15:0f:36:93:88:a5:51:00:
2a:64:77:b0:6f:20:4c:f9:67:36:67:1e:68:4e:9c:
ac:4a:f5:a9:c8:4a:f4:c1:2a:0f:dd:01:14:75:86:
84:b3:2d:d5:92:2b:52:5f:f7:b6:35:e2:93:db:d9:
4e:93:b9:b6:18:5a:49:12:3f:7e:d6:e5:9d:2e:dd:
a6:bb:23:7b:2e:3b:e7:23:98:71:6a:2f:e4:2d:60:
5a:e2:f0:6c:92:14:92:87:d0:35:58:5f:3c:e9:f0:
fe:70:3e:f8:da:55:b1:8f:22:03:d9:66:cc:57:a5:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.188.0/22
IPv6:
2a09:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209189
Signature Algorithm: sha256WithRSAEncryption
26:8d:fc:b3:0d:c6:69:d3:a4:41:1e:84:3d:4b:72:ec:b2:98:
da:2d:2a:c5:1f:1b:8e:d5:3d:77:d0:e9:9a:70:fd:09:7f:95:
de:70:81:7c:8e:e7:f7:2f:6d:26:72:35:49:95:3b:6f:95:56:
e0:be:16:6c:98:64:7d:31:af:87:ef:a0:eb:de:97:d9:ed:12:
6a:70:ce:bf:e0:d9:a2:74:80:c9:09:8e:0d:99:95:ff:9b:af:
b8:f2:cb:44:ff:15:70:db:82:08:51:5d:ad:d3:72:8a:8e:a6:
f5:12:ba:be:6e:ec:07:f7:f9:88:a1:c7:56:f9:4d:76:98:1f:
86:33:a6:c2:72:67:ef:1d:b9:f7:d7:55:79:51:38:cf:f4:82:
ff:6b:37:8a:f4:11:0b:df:11:97:c1:37:75:f6:d0:bf:2c:67:
e9:41:02:88:9c:ae:dc:98:ce:50:0a:82:da:36:85:42:94:37:
01:f3:35:53:d7:fe:9e:6a:85:27:00:34:14:e0:bf:3b:6d:d2:
85:4c:f0:94:42:76:1f:53:29:e8:f1:4d:5b:33:03:64:65:da:
a8:0b:77:71:d0:07:6f:9e:42:91:46:f0:bf:36:a2:d9:de:46:
d1:25:71:0e:a6:aa:4d:6b:75:07:ca:f4:91:4e:43:1d:33:8e:
a4:d9:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:08:24 2026 by rpki-client