Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.cer
File: vIt3fE-uvL-C7Jd5ij6VA_gxz7o.cer (raw, json)
Hash identifier: xnOwdgUSbebn/UrzUAArf8yguuvE7EAWOQwoJcuOkRA=
Subject key identifier: BC:8B:77:7C:4F:AE:BC:BF:82:EC:97:79:8A:3E:95:03:F8:31:CF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBAEEFF58580C39AA4712A0B1D653B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42324
IP: 194.0.204.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:ae:ef:f5:85:80:c3:9a:a4:71:2a:0b:1d:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8b777c4faebcbf82ec97798a3e9503f831cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:ed:eb:2b:b4:48:a1:0c:04:cb:f0:c6:96:
ab:89:91:46:b7:5e:fe:17:9b:bd:56:98:71:c7:7d:
c3:4a:5b:3c:58:94:e3:f6:76:af:09:f8:5e:15:38:
56:98:48:61:c0:d7:56:e5:b1:a0:54:d6:32:55:1e:
2d:f2:9a:c5:92:f0:95:40:85:6c:f2:ad:1b:d0:cf:
c5:15:68:96:04:79:8b:00:24:98:53:7c:12:b3:fa:
75:b7:6e:df:a7:b7:cc:2d:f9:23:09:aa:98:be:4a:
41:09:71:5d:45:2a:15:9b:df:87:10:81:3a:39:8a:
c5:c5:ea:70:37:37:5e:e6:f5:e4:4c:44:e2:cc:07:
83:ec:a6:e9:08:38:83:86:47:6d:fe:1b:fa:94:cf:
87:73:cd:ca:9e:43:71:3a:ec:a4:7b:2a:37:ca:76:
d9:eb:33:ac:04:7f:32:7b:82:7a:8c:0c:36:2d:5e:
eb:49:43:d4:c7:14:50:ae:c4:d8:f0:9e:d4:b1:57:
64:48:5e:b2:cc:36:76:8b:05:68:00:94:51:75:65:
d7:53:f4:08:de:74:5c:99:7c:b8:2c:dd:71:5d:d6:
87:ff:ff:36:5e:c0:7a:cf:09:ce:5c:fe:0d:bd:fc:
b8:c4:d9:86:c4:c1:15:50:cf:39:f0:fa:0d:c4:14:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:77:7C:4F:AE:BC:BF:82:EC:97:79:8A:3E:95:03:F8:31:CF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42324
Signature Algorithm: sha256WithRSAEncryption
a9:a6:c7:5b:af:30:70:61:6f:22:bc:27:ba:53:d1:2c:f3:7f:
f1:37:c1:5c:f3:d3:9b:84:59:a4:48:e6:27:81:f3:9a:8e:13:
2e:ba:35:ca:9b:3a:12:dd:db:b8:68:d5:9f:d7:49:66:20:7a:
8c:69:a6:8e:43:5e:89:2b:7f:cb:ed:5f:87:ab:21:ab:52:94:
ef:e0:1c:04:e6:e1:0b:73:b8:05:59:21:69:1d:78:01:55:b0:
2c:39:19:16:8c:7f:57:bf:0d:ed:e5:b2:62:fd:75:e9:ad:7b:
50:9b:3c:96:1d:72:54:7f:da:cd:32:ca:b1:6a:25:16:d0:b7:
bb:31:af:5e:54:3f:13:2f:37:ad:27:bf:41:db:47:d9:2c:b8:
e4:58:43:44:f4:a7:b1:34:f4:e9:7b:f3:65:98:bf:c9:b9:a8:
4b:c4:85:d7:75:02:6e:f0:8e:c3:dd:fd:86:8a:55:ce:28:58:
13:ca:61:fa:b3:47:f7:65:e6:01:e5:bb:7f:24:fb:0a:07:17:
ec:9f:8a:8e:f6:b4:f3:f6:7d:63:67:37:d3:91:6e:81:09:79:
6c:da:0a:6b:e3:18:7e:a6:64:7f:e1:0c:17:0a:04:2d:eb:91:
14:80:72:34:81:94:f1:97:62:be:c4:ca:2e:0f:ac:22:9e:f1:
2f:78:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:27:05 2026 by rpki-client