Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
File: 27NREBqukeOy_Psl_rA2WbqF7KE.cer (raw, json)
Hash identifier: fjJ9odyinyeJe7BZbLbE18EVBkla5qoRZWM3Jiq9HmQ=
Subject key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D919594D3352BB5D29C28D8934B14E117
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Apr 2026 14:39:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49833
IP: 185.131.76.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:95:94:d3:35:2b:b5:d2:9c:28:d8:93:4b:14:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 14:39:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:92:78:ab:61:c2:7e:78:57:19:8a:3f:e2:
ee:5a:38:d4:1f:2a:52:8d:5d:2a:58:c8:60:f3:60:
ba:ba:d1:31:5b:d6:c3:54:24:ce:2d:3f:b4:a1:a0:
1e:ba:f0:da:73:6a:cc:2c:be:eb:b0:78:c6:f8:bd:
8e:7f:1e:a5:ee:40:e6:23:a6:e7:cd:de:bf:a9:8a:
e4:20:61:98:07:e9:d6:19:49:62:d5:6b:6e:21:16:
f8:95:cd:62:aa:bf:69:97:d9:13:1b:29:88:18:03:
8a:38:01:b8:87:a0:f2:39:8f:d8:38:91:c4:78:84:
ac:fb:1a:e3:4b:87:70:99:a7:78:a8:41:f5:8c:d5:
a9:90:8b:48:0a:6c:9d:3f:88:f5:f6:ac:bb:78:67:
00:91:6d:bc:b7:37:65:ac:cc:97:91:b9:91:35:11:
17:12:db:2b:08:da:fe:05:31:ab:b2:d4:15:d7:bd:
75:78:7a:dc:11:7c:1b:1d:e6:b5:ae:d0:06:0b:2b:
65:4a:5b:0b:cd:7b:fd:5e:59:f6:cd:e3:c4:56:f3:
b1:cc:e7:df:02:7b:b2:c4:ed:9a:ed:ec:17:06:35:
7c:da:f2:84:f8:9b:e2:b3:68:e8:38:1e:1f:d3:a9:
3f:ac:62:f8:2e:e4:87:90:5b:57:32:8e:b4:3f:97:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.76.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49833
Signature Algorithm: sha256WithRSAEncryption
0d:72:e6:57:1a:71:fb:e3:2b:54:04:57:0a:30:ea:2e:0e:6b:
d4:40:d3:d0:ac:26:85:f3:8b:45:c6:48:5a:f9:bc:7c:e3:9e:
bc:af:ed:6c:9f:8f:fe:ad:f4:2c:86:3c:fc:4d:db:91:e2:8d:
08:35:a7:9c:c6:d9:0e:34:f5:97:d3:08:9e:76:06:d5:8c:07:
44:b6:d4:31:db:b6:ca:31:78:14:79:0e:5f:4d:59:16:fe:1c:
2b:ed:f2:25:b1:1b:c3:c6:1d:df:b4:06:85:86:08:58:f3:db:
37:95:21:8e:42:88:d4:77:5a:8b:81:d5:c4:bc:28:cf:87:6f:
60:b9:fb:a2:c8:c6:f9:ba:e8:9f:f3:c0:b6:bf:0c:0a:45:fb:
10:75:db:36:cf:da:be:f9:90:d7:9d:ed:5f:58:36:02:a4:6c:
00:89:31:18:13:8b:8c:69:d8:a2:b8:15:a5:05:a6:a5:75:1c:
e4:30:3f:1d:23:11:3b:60:03:89:a1:58:74:0b:01:d9:b2:68:
ad:d1:92:21:e9:33:32:43:7d:d0:42:18:5c:2e:74:8c:34:ab:
33:9b:1a:86:30:41:d8:26:89:87:44:0e:01:1d:81:fe:3e:34:
2f:9f:c3:18:39:9e:cb:5b:58:dc:90:ff:09:43:37:47:a9:65:
8b:9e:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:20 2026 by rpki-client