Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.cer (raw, json)
Hash identifier: Ho6cel/A/mWObxyA7GmWz5TtxJxXe8hILfaUbTIsckI=
Subject key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F8563CE9583D80FEA6F0E232A071632
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:23:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47767
IP: 94.124.184.0/21
IP: 2a03:9780::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:63:ce:95:83:d8:0f:ea:6f:0e:23:2a:07:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:7a:ba:95:95:f1:87:c2:52:3a:c7:ca:bb:
ca:33:a5:6d:51:9e:cb:75:a2:c3:6c:21:d6:b9:3f:
ae:ee:3e:14:d7:8b:a9:85:8b:a2:4e:cf:30:05:b1:
1b:4f:01:b1:f2:7c:63:97:9c:94:96:a8:68:9b:d9:
ee:f3:d1:b5:50:fd:7d:89:41:7d:f9:cd:b3:22:b7:
19:6b:ed:01:e6:08:ad:24:c8:20:14:33:aa:a5:9e:
90:95:54:df:ba:16:9a:7a:70:96:91:39:39:46:22:
9e:70:70:cd:a1:10:79:1a:d5:19:c9:94:6b:4d:32:
78:3b:5f:52:83:ed:17:c4:97:71:1a:4f:2d:f0:0d:
e9:ed:16:12:f4:b1:76:15:05:03:46:3e:6e:87:2e:
ca:dc:30:5d:62:c8:4d:e7:47:ef:fe:92:de:c7:60:
b5:16:eb:e7:9e:47:ce:2c:43:79:df:8a:f4:a4:47:
00:03:f2:41:3b:13:09:83:cb:99:32:8c:06:e1:8d:
56:30:ad:3e:d2:b7:95:ea:fa:87:88:59:4b:dc:c7:
a7:5f:32:68:b1:61:24:d2:2d:4f:9c:09:8b:3b:eb:
45:d8:14:02:27:ac:52:15:83:1f:fa:74:cf:1c:96:
b2:84:2f:9f:09:f3:5a:3b:7e:95:6c:26:73:24:d2:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.184.0/21
IPv6:
2a03:9780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47767
Signature Algorithm: sha256WithRSAEncryption
ae:51:2b:c8:a6:b6:7d:97:6d:6b:ad:6e:f8:65:8e:1a:07:18:
d9:6f:86:c0:25:5e:03:97:15:1c:45:c4:73:b8:b9:35:f2:11:
f1:df:b2:ae:cf:e5:f8:4d:3c:16:67:d1:d8:03:17:34:a9:78:
fe:a0:ee:44:1a:c8:25:a6:a0:fb:15:03:09:a8:4c:4a:79:05:
e7:64:25:84:fe:04:8c:fe:83:23:8e:d2:85:da:41:58:0c:62:
1e:5a:d8:c3:1f:36:6f:c4:0a:54:22:08:a8:e7:9b:29:f2:d7:
a3:d6:9e:c5:07:26:c7:f0:1f:75:ca:92:9e:b5:91:bb:b4:8a:
5e:a7:c5:77:4f:f8:ae:db:ee:84:a7:5a:33:21:16:51:85:9e:
55:15:68:ba:06:f4:fc:d2:1a:93:38:e9:52:58:99:98:e0:b4:
85:f7:55:16:d7:89:0f:0c:d5:ed:e9:dd:19:1e:c8:f9:93:6f:
88:03:18:e6:63:d9:38:fd:7d:61:92:aa:da:98:c5:94:59:a1:
06:28:d6:76:2d:c3:81:f2:ef:1d:2c:92:02:f8:02:5b:68:62:
b9:b2:48:cd:4d:1c:1b:dc:31:79:07:bd:53:5a:06:8c:cf:a0:
8f:98:73:6f:f4:23:b4:87:b6:ba:a2:b5:c8:e5:79:94:db:d6:
f2:cb:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:43:51 2026 by rpki-client