Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
File: 4kLCt011daIop-ZPBAbzo5fHrlY.cer (raw, json)
Hash identifier: yaxZ/a6SISC1CU/wajfVA1YuCqR8joHdQjypwbBDSkY=
Subject key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B295933C72CF1C6455D7B1D92A7C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57871
IP: 176.110.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:29:59:33:c7:2c:f1:c6:45:5d:7b:1d:92:a7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:ba:ef:3b:af:60:19:ce:75:68:97:1b:53:
8b:cb:17:21:af:3a:8d:e7:f7:4f:83:a1:4e:29:4d:
9a:b6:17:49:bf:13:3b:26:e1:6a:57:34:99:e6:07:
60:61:16:83:e0:79:28:46:14:84:68:30:12:37:3d:
fb:30:13:68:90:a7:a8:c7:bf:2f:43:0d:28:71:06:
e9:6f:d2:87:22:29:03:59:d3:3a:95:0b:1a:d9:26:
66:df:17:ba:4a:b7:c7:37:70:45:97:e6:e8:b1:8c:
5d:d3:6a:58:67:da:ac:63:f6:76:95:cc:c9:cc:ee:
8b:f3:81:52:b1:6a:4c:6d:1c:2d:12:2d:56:39:07:
0a:fc:8a:96:93:f1:42:85:f5:ba:61:33:fa:44:60:
00:8a:9b:cd:77:95:f2:1e:ac:76:4a:c3:35:45:76:
c3:fd:de:0b:e6:63:83:b4:0f:c7:73:b8:c8:f2:d2:
a0:30:2f:8b:a0:d1:d1:8a:8c:b8:b5:54:c4:0b:64:
a3:f7:f3:a3:2a:d1:7b:5b:e0:9b:3d:f1:87:8f:25:
32:a5:25:8c:11:db:3b:e3:6e:7d:6b:a9:b5:0c:c8:
9e:67:0b:74:5f:87:78:17:b1:b8:a7:48:bf:37:91:
32:a6:45:4e:57:5c:cb:e7:8a:ae:a0:b0:54:57:46:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57871
Signature Algorithm: sha256WithRSAEncryption
4a:f7:90:4d:14:b8:4f:b2:e6:4e:d8:be:4c:31:6f:11:54:80:
74:51:a5:99:81:87:94:ff:ed:bb:01:98:0a:b8:f7:8a:32:77:
3a:eb:13:a3:da:4c:57:f8:35:f6:be:86:e5:69:66:a4:e8:10:
c8:81:00:f7:00:76:3e:64:21:43:be:05:b2:13:a8:a2:07:c3:
1c:f8:50:44:d4:f0:36:70:1c:d6:38:e9:2c:7b:81:83:a5:13:
99:63:67:b8:e6:3a:d5:3a:bc:b3:b5:ea:6b:71:db:31:5c:76:
5b:0e:68:9e:ac:5a:fb:1e:e5:f5:44:d1:9f:1a:e9:cf:3b:46:
a5:ce:d1:7c:42:2e:81:f3:8c:2c:1a:ed:53:29:66:97:b3:e0:
9c:8c:37:fe:21:dd:1e:6d:a7:c7:38:13:a0:e6:4e:ca:a3:5f:
0d:95:b3:22:d2:f5:b4:ea:bb:22:c9:c5:fa:3c:c0:51:4a:d3:
63:46:dc:04:5c:a7:9b:cb:27:ed:a7:d2:fa:b7:22:4a:a8:6a:
2d:6e:be:37:87:92:7c:e9:8c:ec:35:02:77:21:f8:f2:23:2c:
d9:d3:9c:bb:aa:2e:fa:46:a8:9a:e7:52:30:37:7d:80:95:04:
6b:4e:f7:70:56:b7:54:b1:ae:cd:3f:11:00:3f:91:12:88:1b:
a8:b1:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:20 2026 by rpki-client