Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.cer (raw, json)
Hash identifier: 56DTm7d4JQ2CjAMq4T3Go9X7KmWAgzjyyBgmX+ybias=
Subject key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8333F00AD1407C4BE9EDCD6166A603FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jun 2026 12:41:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213540
IP: 91.210.42.0/24
IP: 2a14:c900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:33:f0:0a:d1:40:7c:4b:e9:ed:cd:61:66:a6:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 1 12:41:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:90:3e:4d:ab:7e:83:81:5f:c1:b3:b5:19:
a9:b8:89:c3:27:3b:a3:cf:34:c9:24:24:06:97:af:
74:b0:80:b2:d8:e9:8f:0d:71:66:86:7f:cd:76:34:
63:a2:67:84:06:c1:4e:51:8d:fb:61:f1:8d:b8:fe:
45:8d:b9:04:08:9c:4b:8e:8f:96:2e:d7:62:e3:3c:
6d:e5:1e:24:8f:e5:3b:c5:c4:5d:60:d2:80:3a:b7:
ea:b8:02:68:f2:ed:c5:b2:d3:e1:52:60:91:e4:45:
e9:75:50:99:66:9e:b8:b8:41:74:98:8c:42:d1:dc:
01:fe:88:ca:61:63:91:f9:65:eb:aa:bf:a1:40:2f:
93:68:41:4e:0a:c5:62:84:ea:74:42:49:00:82:3a:
3b:aa:c2:bd:be:74:c0:9c:c8:17:96:23:ca:22:85:
b3:1e:42:19:c3:61:1f:ea:44:ae:29:17:5f:4a:1c:
22:9e:90:b9:4f:ea:6f:d1:2f:7e:f1:92:d8:85:38:
53:3e:d5:44:b8:88:f3:b3:e9:0c:52:05:c9:30:eb:
7a:6f:9a:de:7c:1e:01:c9:48:d5:4c:36:b6:5c:b0:
5e:8a:49:86:ef:ca:79:2a:70:c3:a8:ee:c2:34:b0:
55:88:ac:31:e0:0b:a6:6d:88:96:aa:e2:2f:0c:5f:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.42.0/24
IPv6:
2a14:c900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213540
Signature Algorithm: sha256WithRSAEncryption
72:aa:da:5b:2c:4b:cf:74:76:8a:52:8c:23:50:ea:05:b3:b8:
8c:4d:ef:62:94:3b:99:ce:b4:d0:20:92:75:19:17:f7:11:75:
f6:bc:b5:50:96:4a:3c:1f:41:01:b2:af:66:0a:78:f2:61:a8:
55:36:f9:de:60:52:cb:55:0c:9a:33:74:40:8e:31:e1:95:36:
53:c9:33:75:80:a2:8c:c5:b6:69:41:85:d2:b0:75:ef:09:dc:
20:56:9c:41:ed:53:90:0e:e1:ad:6a:54:9e:49:e8:1e:07:c3:
d3:d7:09:8e:12:e7:62:cf:36:df:e8:ed:8c:d9:ab:d4:5e:b7:
de:06:de:d0:b1:e3:ec:b0:52:90:1a:6c:6a:62:a6:57:c3:08:
9d:c8:5e:33:16:4d:7c:e9:a6:31:0c:cd:c2:07:bc:6c:9e:fa:
ad:b4:f3:57:7e:54:c1:11:48:c2:ae:50:30:b8:92:64:18:36:
ab:92:7d:35:58:60:95:ed:63:7a:e3:ff:ea:36:a6:b4:04:5d:
bf:9d:fb:7e:d7:bd:ab:38:06:10:de:e9:d5:ec:8a:2a:84:9a:
82:b3:d4:65:ae:cd:ca:7f:1e:58:61:fa:e8:40:2b:6d:36:46:
1a:31:29:8b:f8:6d:3c:37:53:35:c6:7a:42:2c:03:14:bc:6d:
66:e6:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:36 2026 by rpki-client