Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.cer (raw, json)
Hash identifier: aiaE/qsU0yBLjx28okUWD9mOvnrsEn/jyHnSZ0SNZG0=
Subject key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B783555D2AC480A46AD06D8F6F6C66250
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.192.188.0/22
IP: 2a0a:30c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:55:d2:ac:48:0a:46:ad:06:d8:f6:f6:c6:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:cb:05:15:aa:93:b9:a7:d3:8c:9f:ea:92:e1:
52:ab:85:45:4c:4b:ca:36:87:55:d5:5b:49:2e:a2:
4d:21:56:7b:6c:65:6f:50:b9:5a:df:48:1c:77:6b:
dd:c6:56:aa:83:56:7b:99:85:e6:d3:f3:67:e5:49:
13:bf:39:1f:56:0d:de:7b:66:e0:32:15:a5:68:f6:
ec:cb:1d:70:bb:2a:58:d1:a0:3a:62:96:e1:71:d2:
a7:27:7b:16:7f:e2:8f:28:37:05:b7:91:26:10:7a:
2a:f8:8c:28:7c:0e:6a:6d:be:a3:87:68:f8:9b:58:
ab:a4:3d:25:87:cc:d7:5f:e7:89:f5:4b:ea:78:1f:
a6:be:ba:ec:6d:ff:c4:91:72:31:60:84:07:df:93:
b4:d1:4a:e5:06:b3:44:cc:b8:fa:de:47:c6:09:e5:
c2:4a:9e:c1:e1:0e:b8:e6:bd:45:46:0e:6c:aa:94:
2a:6b:0d:f1:c4:38:a8:d6:73:1a:82:45:52:6b:8c:
42:ab:8a:89:23:ee:a6:c7:bf:56:a0:2e:06:45:31:
cc:38:05:3f:db:05:9d:cb:f2:59:d4:c5:d2:d2:6e:
a4:55:67:22:95:20:42:e6:f8:6c:a8:12:fd:96:c1:
f1:04:e1:1e:62:ac:ac:90:53:c1:ad:53:12:a4:8e:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.188.0/22
IPv6:
2a0a:30c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:0b:b4:b1:89:dc:55:7d:10:d1:7a:ee:a0:c8:06:bd:ac:ec:
f8:b8:03:ed:5a:ff:a5:95:be:52:8f:14:8d:66:4a:53:28:1b:
3b:3e:9a:83:11:48:1f:44:07:52:9b:e9:20:f6:d3:49:d2:ad:
ca:18:15:e4:eb:8e:88:8c:ac:91:e6:d5:a3:e3:d9:e6:c0:55:
b1:05:ca:00:6d:69:35:28:4c:49:42:36:fd:65:f9:db:c4:0c:
38:e2:06:67:0c:28:bb:f2:8a:32:10:63:17:28:05:f6:54:99:
55:02:e1:ba:95:7c:79:13:17:ab:03:8b:db:cb:c7:42:eb:0c:
10:93:51:00:e5:cd:98:29:a9:dc:c2:32:0c:73:92:da:ff:6a:
c5:be:15:4c:82:ab:e9:d9:7d:a6:88:bd:e3:9a:ba:b6:72:ef:
8c:03:b6:83:5b:96:ad:a6:11:f1:77:0f:32:26:fc:81:06:da:
ce:34:02:ef:77:03:b4:be:57:8b:1c:75:b9:9e:4b:fd:8d:42:
07:fd:bf:5e:61:04:27:93:d7:a4:af:83:91:88:fe:d4:e3:fa:
7a:28:04:c3:16:6a:50:d5:f1:40:39:56:18:8c:0d:c6:c4:09:
a0:1a:80:41:af:9c:f0:a3:82:a6:51:1f:77:bf:28:cf:8e:c0:
84:e8:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:42:57 2026 by rpki-client