Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.cer (raw, json)
Hash identifier: s6xR1L85WMSnZVOADSH2tfMltWRjTpgI6DauL89us0k=
Subject key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E68C98CC7371DD49523E0A293FC1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.171.224.0/22
IP: 2a0a:ff00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:68:c9:8c:c7:37:1d:d4:95:23:e0:a2:93:fc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:b0:6c:67:48:81:e7:9d:7d:e7:51:8b:b2:
d5:39:c0:67:ea:5d:a7:07:50:bf:da:07:06:c4:53:
0a:85:78:94:09:be:7d:f6:47:f7:af:50:c2:46:7c:
6c:89:13:dc:ab:3f:37:83:87:04:8b:42:92:99:30:
00:87:02:2f:e1:eb:02:aa:ac:6e:05:15:b5:dc:49:
33:b2:3d:54:d9:e5:42:a8:ab:f6:34:df:dc:29:f2:
d1:da:48:1c:fa:68:f6:01:c5:57:cb:9b:e2:ac:28:
44:3e:43:aa:a4:16:40:79:eb:2d:18:19:22:c3:1f:
0e:96:54:d8:d5:f7:f8:02:9b:0c:9e:14:9d:28:4a:
cc:80:7e:6f:e2:b3:14:33:3d:e0:23:07:a1:05:d4:
27:37:08:dc:2d:5c:84:08:bc:c9:db:7d:ec:f1:2e:
4d:42:01:76:70:84:db:08:a4:9d:2a:62:0c:17:e8:
a1:f5:d0:72:02:dc:81:9b:b2:c9:e7:89:96:15:cc:
be:a0:86:6a:91:b2:29:e6:e3:01:13:27:44:67:04:
22:dd:87:d6:b0:19:f1:e6:0f:67:05:35:03:01:04:
ce:a2:ff:0a:6f:a0:cc:d9:4f:42:2e:0b:45:4c:4e:
23:b5:55:91:70:1b:ff:19:6d:c9:ce:3b:43:70:7c:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.224.0/22
IPv6:
2a0a:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
20:49:72:6a:89:01:86:06:87:26:c1:1e:d9:29:2d:46:b0:38:
62:53:38:7c:c1:83:bb:2b:a3:e9:f5:83:41:f8:c6:21:e3:24:
d4:8c:60:da:8a:6f:68:05:ab:2e:cc:a0:fb:58:e4:87:75:4f:
b9:0f:9f:aa:36:f5:58:3b:ba:4b:a7:a1:49:68:c9:85:1e:0c:
49:15:d6:00:1c:21:9b:a1:77:8f:d6:1f:09:eb:70:5c:ec:20:
0b:29:39:4e:82:cb:55:29:01:d2:be:d6:1c:70:91:a6:a3:4f:
8e:0c:cc:71:84:10:8c:2e:e6:60:54:73:31:e5:26:c2:16:82:
09:9d:f3:cd:5d:5b:eb:b2:12:e8:26:5e:5d:86:60:9c:f7:3c:
9e:ab:6d:41:08:30:37:79:b7:04:2c:e8:a6:56:09:df:6d:23:
d0:a7:e8:44:72:e7:9a:1e:5f:65:8d:2b:73:f7:5d:93:d1:43:
a0:2a:f5:a0:35:78:ab:35:4d:1b:5b:47:7c:b7:f5:9e:83:82:
a2:43:21:8f:ba:f8:99:f0:f8:ef:43:7d:e1:17:9e:12:c8:1a:
cd:c8:32:2b:af:98:39:27:ba:d4:35:7a:c1:8d:11:25:2c:d3:
03:0b:1d:6a:22:bc:40:85:3d:64:07:e0:cb:0f:aa:0f:42:30:
c5:9c:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:44 2026 by rpki-client