
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
File: v1axbhD6Re7KFoexaJ_CHxgR53U.cer (raw, json)
Hash identifier: KD4HPVST2l+/rxXmKB3rQlVcS9adTOndKUh17b1op6s=
Subject key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EA78C6760194042599B8AC8047F734D59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jun 2026 14:04:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205472
IP: 185.255.4.0/22
IP: 2a01:f5c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:8c:67:60:19:40:42:59:9b:8a:c8:04:7f:73:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 14:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:75:e8:cd:84:af:89:49:d1:34:c2:79:2c:
8f:90:47:54:b5:51:d1:88:0d:5d:61:71:d6:5e:0b:
b5:bc:a7:ff:dc:71:04:8e:7b:a3:1f:05:ed:ba:8d:
81:e2:d8:d8:53:c4:7e:35:5f:7b:cc:54:99:08:7b:
4c:b6:ec:83:dc:6b:1e:81:ca:39:16:c1:ea:be:88:
f5:b7:93:a1:8a:c5:39:9e:7b:d4:8d:50:38:9f:20:
33:9d:b9:a0:5d:68:e9:36:65:56:8a:a1:79:b3:76:
fe:8e:9f:64:43:78:43:76:ae:5d:b1:aa:e6:96:02:
e2:80:83:6b:3e:03:7f:97:24:93:d7:95:10:68:ae:
71:20:ac:b3:27:49:99:7c:96:2b:67:e1:6d:ce:9d:
43:b4:76:0c:85:db:ee:58:81:e0:40:21:55:91:13:
ca:69:13:ce:27:ee:ab:79:5d:32:f9:b2:f2:dd:0d:
96:a9:90:68:e3:63:10:94:c1:fa:c6:e2:ed:b5:75:
9d:9d:6f:cb:4d:01:8e:c9:d6:cc:ae:aa:66:60:76:
56:1d:aa:9c:54:6e:45:a3:4d:a0:3d:6f:dd:9d:6c:
ae:f0:bc:65:1c:07:3f:44:d5:0e:8c:1e:9f:f6:27:
45:f4:10:f7:5c:5d:ad:17:36:f0:99:8b:5f:57:dd:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/22
IPv6:
2a01:f5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205472
Signature Algorithm: sha256WithRSAEncryption
43:b5:46:b4:fd:55:de:b9:41:7a:95:0f:56:3a:d6:4f:63:45:
6c:2d:9e:e7:21:ab:80:d9:ae:01:9d:55:6f:2b:c9:3d:37:28:
ab:f4:6c:3c:9e:87:9e:85:ae:e1:d3:87:a6:82:ef:92:46:19:
a9:79:76:32:08:f2:46:23:ac:fd:6f:e2:94:ae:79:48:37:13:
53:ee:27:fd:cc:dd:42:93:ff:5a:e9:8a:73:ee:da:43:57:d8:
7f:ee:e9:ce:51:30:42:b7:cf:0e:29:11:4a:ab:ce:09:c9:27:
2c:f0:6d:c0:bb:7f:a5:b5:b9:e5:21:d7:28:9f:2c:ce:c9:48:
4e:01:cb:d8:ee:98:87:89:2c:ba:5f:d0:38:10:8c:27:a7:28:
0f:31:ec:91:e7:50:d5:86:35:3b:63:6f:55:42:a2:ce:6e:a6:
d7:b2:3b:ab:18:8d:bb:e6:a3:4c:de:19:13:bb:d9:62:ed:c8:
3e:42:48:80:aa:b7:c4:23:21:38:d5:e0:e3:7b:8b:59:07:d3:
ba:c1:22:22:7d:21:df:ec:99:c7:3a:f5:37:6f:64:7d:cc:97:
08:46:3d:85:17:ab:57:f7:c3:90:9f:7e:f8:d0:bb:be:f8:33:
ef:40:1f:dc:1f:93:98:60:2c:5a:b5:bc:95:aa:8d:72:6a:a2:
1a:1c:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:04 2026 by rpki-client