Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer (raw, json)
Hash identifier: LGcT3PoAXaK+APvbNdukMdyncPYCpVm5K3+lEOROjMg=
Subject key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA747BC781AE048C1B493770FCF66C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48119
IP: 91.207.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:47:bc:78:1a:e0:48:c1:b4:93:77:0f:cf:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:e7:7a:b8:5c:e2:14:3c:79:b3:4f:af:66:
64:3a:55:eb:50:fe:35:b9:81:8f:e0:06:89:70:97:
a4:e8:f4:56:fe:64:d6:4d:3e:c1:fa:b2:f6:f3:c4:
01:2d:bc:63:cd:57:87:33:ae:6d:2a:42:23:bc:95:
7d:e6:bb:4b:aa:58:2a:4f:1d:ee:b9:9e:8b:79:d7:
6c:55:ca:41:45:5d:c5:f9:f1:3c:88:33:b4:62:f2:
18:9c:7c:88:9c:93:72:07:6b:78:3d:ec:7a:24:e5:
f8:cd:ff:56:19:47:60:2a:40:e0:5e:39:13:cf:b4:
02:da:4e:79:33:a4:01:86:74:65:36:88:e4:2f:01:
aa:14:8a:34:a8:9a:6c:83:2a:a8:32:59:c3:b3:e9:
5f:74:a7:ce:d7:25:10:07:d5:c9:c1:12:3d:28:a0:
6e:04:ed:a6:cd:dc:13:5e:24:99:a0:53:7d:93:01:
53:6b:0b:e6:25:1f:08:a6:7a:1b:c2:d5:38:b6:84:
7c:97:95:a8:0f:06:4e:95:ca:54:25:c4:9d:1b:6e:
35:a4:cc:aa:4e:f2:33:93:a6:90:8f:4d:bb:16:3d:
ac:81:8d:fe:6f:41:9e:45:f6:06:51:fd:49:bb:01:
20:0c:e5:99:d8:a5:4c:79:86:77:2d:cf:cb:15:8c:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48119
Signature Algorithm: sha256WithRSAEncryption
74:ba:6a:1d:b7:8f:0c:ee:28:8d:48:82:de:67:29:47:4a:d4:
61:a2:1c:e8:d0:85:9c:4c:5f:89:93:63:ca:30:a6:b9:b3:f6:
f6:95:2e:ca:bc:36:0d:fc:de:26:78:01:0b:d5:42:78:05:84:
c6:56:f8:ae:7a:bf:8f:8b:39:a8:89:72:f8:37:3f:ad:7a:54:
45:ea:8c:95:ae:06:8b:58:a5:bf:0d:ec:84:49:31:9e:76:6f:
0e:47:4f:cb:7c:ec:ab:62:e0:2c:c5:bd:dd:7a:af:71:e5:5d:
95:95:d2:35:70:4c:7b:05:b5:5d:d0:e1:2b:09:90:0e:17:ee:
2a:5b:fb:38:7c:c9:fa:9d:b1:f7:f8:0c:28:78:f5:6c:3a:f8:
81:4e:6b:75:e5:83:b9:4c:9d:c4:85:b6:37:c9:d1:a2:8f:29:
f2:bd:e7:8f:47:df:15:72:8a:19:39:d1:4f:02:73:00:fc:00:
f4:a6:48:3d:47:99:5b:4f:88:b7:2c:7a:fe:38:38:65:2b:94:
48:b2:13:ef:34:54:d0:ab:2a:3e:9a:e0:cf:f2:dd:4e:42:99:
46:db:28:3d:99:20:aa:04:ac:91:7a:7e:52:b8:21:63:07:ed:
d4:da:ec:f2:b9:92:1c:51:53:3d:70:02:11:da:75:ec:40:0a:
20:d0:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:40 2026 by rpki-client