Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
File: 1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer (raw, json)
Hash identifier: E6v6n/2RhGQLVjJhgcJ9i652KjWFJB0ITChJPCI8YiA=
Subject key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07FE8421A7ADBBE4E992D8AF638CE337B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 07:25:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219265
IP: 150.251.61.0/24
IP: 2001:67c:2240::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e8:42:1a:7a:db:be:4e:99:2d:8a:f6:38:ce:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 07:25:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:1b:9e:ab:ae:d9:b4:d0:b1:c8:dd:f4:4a:
2d:e1:09:28:e4:68:f8:92:79:0e:f3:e9:f8:ac:47:
2d:bc:16:ff:d4:d2:91:13:f2:d5:97:38:d9:86:a1:
16:86:91:ff:f3:e2:dc:85:78:50:b7:8e:24:0e:20:
91:be:03:33:b4:ed:5f:ae:c8:80:16:89:1f:88:a0:
e6:f8:1f:2c:f1:85:08:aa:ca:07:c2:c8:01:60:6d:
18:86:de:83:fe:ce:8a:be:bf:e7:68:0d:7e:10:c3:
d6:2b:e1:81:98:4b:09:c8:98:7f:9d:ed:2b:75:dc:
79:00:63:38:6d:96:eb:58:06:69:60:64:6d:a1:2b:
4c:5f:54:75:08:5d:dc:5d:de:17:1c:4d:22:10:f0:
6b:f2:e5:29:62:56:a5:90:f2:13:3c:bb:e0:4e:af:
ff:07:fe:aa:14:17:86:bf:5c:41:a1:bd:18:b2:bd:
4a:17:7a:24:e0:7f:ae:0e:e2:73:8d:16:28:d2:36:
21:b0:19:d3:d6:45:cc:81:96:e3:7e:5f:ad:6a:0b:
7d:bf:d5:65:3f:35:af:91:e3:df:b8:39:23:7a:25:
00:93:e2:e8:d2:b2:b1:06:c2:d7:62:d5:b0:3e:83:
1c:70:9b:ce:f1:28:db:96:16:f5:bb:81:bb:29:ad:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.61.0/24
IPv6:
2001:67c:2240::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219265
Signature Algorithm: sha256WithRSAEncryption
50:7e:a0:be:92:34:6a:4a:ce:20:8b:0a:cf:1c:60:3b:03:10:
65:1f:5d:ae:51:91:71:42:18:f5:3c:4c:3c:64:ca:4b:05:28:
e5:96:ac:19:8b:fc:00:a7:91:d4:89:07:7a:cd:fc:58:6e:08:
c7:93:68:ab:d5:6a:c7:2c:2d:1c:37:20:e0:6f:6a:8f:28:07:
62:2b:96:4f:1b:7e:0d:3f:a6:45:19:c7:c1:0b:95:07:18:51:
63:63:ce:74:d4:05:60:c3:48:2a:de:66:e0:21:74:b4:d8:72:
8a:74:99:74:8b:84:72:cd:14:15:48:b7:a6:d6:2e:51:1a:ec:
82:d5:23:f7:cc:81:c4:28:4b:6d:07:04:89:6e:da:fc:05:07:
2e:09:d9:40:77:6a:7c:63:19:51:f3:a2:09:c8:e7:dc:6d:59:
23:be:bd:c5:63:9f:8a:46:4d:82:29:db:4e:75:b0:f4:b0:f7:
42:59:12:2f:e3:63:cb:e4:78:d8:8f:e1:83:f9:41:66:3c:ff:
14:9f:f0:6f:d7:96:06:7c:5d:71:36:51:cb:bb:21:d3:ee:c3:
7e:20:64:8f:4c:16:b4:74:34:f2:b8:f1:05:b5:ca:81:41:ee:
34:c6:cb:eb:e5:4d:88:51:b0:66:c3:95:08:f8:e8:07:ae:73:
0e:09:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:49 2026 by rpki-client