Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer (raw, json)
Hash identifier: LcpeiwMdV9BB3ceoU2SNw6VZhJY8VGWo2EsclnN93z0=
Subject key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0674B2240A6C8A1E0CD24B5C6CDCBC292
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 12:42:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207560
IP: 79.108.119.0/24
IP: 185.225.226.0/24
IP: 185.237.166.0/24
IP: 2a06:1680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:4b:22:40:a6:c8:a1:e0:cd:24:b5:c6:cd:cb:c2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 12:42:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67dbf31d597746c9a1434706062a40653bc545c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:3e:0c:df:f6:5e:ec:65:2f:cd:47:68:6b:
e0:f3:c8:de:e7:ae:82:e2:d3:70:e1:17:48:ce:8f:
81:a7:da:de:69:73:6f:ef:7b:1f:a8:6a:8a:83:52:
e4:fe:58:25:ee:09:aa:42:1d:1d:bf:31:6b:e6:ea:
bb:12:51:2b:ad:bf:9a:7a:c1:88:10:20:11:6a:e4:
d6:c4:95:77:49:87:8e:60:3d:39:0b:0c:d6:c3:c9:
8b:fd:36:5e:d4:45:e4:c4:17:fb:c1:bf:92:0d:2f:
88:e7:a7:4d:41:26:fa:94:88:1f:f0:99:91:6c:3e:
8d:a9:94:36:64:aa:35:26:b5:87:b5:3d:4a:45:93:
be:fd:82:38:7f:d9:85:37:e3:d3:29:a0:a4:dd:4e:
ca:c6:a2:fc:84:b2:9b:52:bf:46:23:8b:03:1a:83:
de:f6:7e:a1:5f:9e:c9:2e:dc:d4:a0:de:9d:bd:95:
89:ba:dd:cd:07:00:42:a1:94:f5:d4:a6:70:57:e4:
e3:7a:c4:e7:a5:dc:3c:40:67:33:05:50:4a:14:7e:
55:63:26:ea:24:c5:b2:33:9f:83:f4:88:89:f4:cd:
dd:13:b6:dd:30:54:6f:e2:4c:07:bd:0e:ed:f6:eb:
6a:45:f4:9c:f7:51:2b:90:24:56:25:c7:52:eb:0e:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.108.119.0/24
185.225.226.0/24
185.237.166.0/24
IPv6:
2a06:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207560
Signature Algorithm: sha256WithRSAEncryption
5c:a9:13:46:46:db:92:b1:49:6b:08:95:a4:4e:03:09:bc:47:
12:5a:2c:11:52:0f:2b:36:63:87:be:85:15:59:44:d4:54:82:
94:db:66:09:40:04:48:e5:92:5a:b9:bf:ae:35:db:97:29:e3:
a5:18:50:ff:96:6a:3b:83:11:4c:84:7d:ef:a7:b3:05:72:38:
43:a4:28:8c:f3:53:63:ef:c0:c3:c8:0f:aa:90:38:2e:be:44:
38:f6:64:8a:75:94:ca:ca:51:0a:8d:7e:1e:28:49:37:bf:b5:
e6:45:c2:89:a8:94:59:9b:16:cd:24:24:f4:d4:90:1f:1c:ec:
00:65:31:08:62:0e:af:d9:ac:a2:a7:27:d3:ad:d3:e0:e2:6e:
6b:d3:5a:6c:ef:27:a3:71:32:25:39:ac:81:ed:ce:53:11:5a:
3d:b7:a3:34:79:bd:dd:ab:81:71:d3:96:9c:39:52:41:7d:71:
5c:38:bc:f9:be:29:28:3d:d5:f1:d4:07:60:19:87:10:19:05:
c6:e5:85:b0:9f:0c:0b:d9:25:a2:d1:09:25:6b:ea:8e:61:6d:
68:1f:f0:6e:99:24:bc:0c:9c:0a:f1:6b:b4:ce:06:0e:91:6f:
43:c6:8a:8c:b6:4b:86:25:ab:ea:38:47:08:01:3d:8f:ca:73:
57:48:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:09:46 2026 by rpki-client