Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
File: zo8eLNbLKBUKXInl-bCIeBE0zq8.cer (raw, json)
Hash identifier: gEyK5CfNaz+7yj8mvjFy8v8KXqhqvf+zdmVWHe3/7pI=
Subject key identifier: CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0148889B02D136BE7E2646AC693F2CAE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Aug 2026 11:01:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.242.212.0/24
IP: 2001:678:248::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:88:89:b0:2d:13:6b:e7:e2:64:6a:c6:93:f2:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 11:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:da:ae:e5:9f:6f:d1:a2:b6:5b:fb:76:3a:
81:1d:fa:90:aa:7c:43:86:ea:cc:1e:17:5a:7d:cd:
5c:85:c0:1c:7c:3c:82:50:8b:31:d8:d4:ba:bd:62:
44:07:9f:1b:a5:d2:17:51:1e:35:fc:13:b5:d4:29:
7e:56:74:0c:3f:2d:3e:28:28:b6:cb:bc:fb:13:e0:
2f:07:d0:b1:80:d7:33:8c:60:df:7e:7b:48:0e:a0:
14:6d:a5:dd:3e:01:c6:a3:fe:aa:b2:55:60:52:3e:
df:90:32:dd:11:24:a8:ab:04:b5:26:61:d4:ef:a6:
fb:dc:90:9e:10:c9:16:db:0e:0a:e1:a8:8e:e7:f3:
48:ac:fd:82:ec:9c:eb:c4:bb:65:b7:13:0e:2f:20:
8a:7c:5f:00:f8:3b:1f:d5:ec:23:f8:9d:24:58:d6:
ae:63:3c:47:3a:bb:4c:9d:29:f9:c2:b3:7e:e5:86:
8d:d1:4f:dc:0f:cb:72:f1:91:ec:88:91:22:32:c3:
e7:1e:ef:50:23:32:de:4c:ef:38:8a:1d:53:86:1f:
c1:a1:fd:36:5b:5e:19:cf:14:97:dc:56:0c:a7:67:
74:d6:a8:ed:16:8b:59:e9:48:e6:39:62:5f:a3:55:
fe:8d:80:29:aa:98:de:67:50:8c:8f:4c:40:03:b5:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.212.0/24
IPv6:
2001:678:248::/48
Signature Algorithm: sha256WithRSAEncryption
9f:2a:8a:85:bf:74:0e:15:00:0d:e8:f2:01:3e:e3:95:96:3c:
ee:57:3d:ad:f1:2e:d8:bd:3f:9b:a6:fa:cf:1a:4d:26:91:f0:
48:ae:14:78:b8:dc:eb:c3:6e:a0:65:5a:2c:28:d8:63:cb:32:
07:ab:43:ff:27:8f:0c:c6:88:b1:05:f4:ee:82:d6:b5:6b:62:
90:a3:81:38:6c:61:05:0a:06:60:fb:ad:0c:12:2d:ec:5c:b1:
6b:2c:a9:29:50:a8:42:db:ed:11:44:f3:85:cd:e3:86:67:1f:
0f:00:fb:c6:5b:5e:a0:68:a2:f3:01:56:2b:52:b3:9d:bb:36:
83:30:1d:30:c7:5f:98:90:e7:50:79:11:f6:cb:c6:dc:91:3b:
b1:63:6b:01:8c:2c:4a:58:74:a7:b2:f9:76:e3:ed:04:54:8c:
5a:cf:1b:ea:6b:e8:4f:05:21:72:89:76:81:2d:c4:bc:14:6b:
2c:b7:72:12:05:08:8b:d3:6c:a3:69:c3:32:7c:e2:b6:71:f3:
1e:c3:4b:ed:59:45:35:9a:c0:17:db:95:c2:75:44:d9:9f:e6:
19:31:c8:07:b2:36:99:fd:bb:28:91:14:8a:8a:cc:3e:ef:f0:
61:98:34:a3:4c:65:e8:bc:9a:23:20:cb:bb:56:e8:1b:5c:8e:
7f:ea:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:22 2026 by rpki-client