Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.cer (raw, json)
Hash identifier: nf76PEPGOUnGCMQeeE0FL/fim6cebHepIEx/dnkub9g=
Subject key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F83FB92EB2E8C4F80F82D40FF5F04A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47766
IP: 91.208.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:fb:92:eb:2e:8c:4f:80:f8:2d:40:ff:5f:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:0f:89:b4:8c:c6:53:2b:9e:be:84:ce:2c:
2c:26:c0:ff:b6:25:87:e8:19:d0:40:40:b3:30:ef:
df:3d:9a:6a:25:36:5c:5f:54:da:3c:5f:68:2a:09:
95:f8:ed:d7:0a:69:96:18:9e:34:29:8c:51:4a:87:
41:25:7a:41:aa:a7:b6:63:9f:27:f1:f9:07:76:fa:
3b:d8:e9:e2:39:66:37:0d:8e:6f:fa:fa:af:3e:e0:
66:fd:69:ea:d6:e4:30:db:94:45:59:4f:ba:c4:9c:
e5:9a:bd:27:96:cc:80:e3:fc:31:29:54:ed:28:b7:
a5:df:a1:a8:c4:f6:f4:7e:67:22:8e:b7:e5:49:91:
fa:1d:69:91:ac:e0:00:55:43:c8:6a:5a:40:73:a0:
57:aa:a1:48:7a:cd:b6:fc:b3:89:cc:d1:00:36:89:
94:78:51:ca:ed:b3:d6:c2:62:6f:d9:9e:1a:d0:51:
26:11:1d:0c:f0:62:95:30:f1:0b:65:fd:6d:cc:cf:
6e:33:57:bc:2a:79:51:c1:07:a3:2d:40:9f:c6:13:
82:cc:8c:c7:1a:e6:b5:e9:fd:40:4b:c5:52:03:26:
b8:39:ce:fa:da:2e:63:55:e7:8b:4e:62:1f:81:75:
99:b1:19:b1:8b:b4:58:03:df:da:80:7d:21:ba:b2:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.139.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47766
Signature Algorithm: sha256WithRSAEncryption
a4:23:71:88:ec:72:61:97:8e:c0:10:d7:f1:d2:46:4f:f7:33:
59:fd:b8:06:fe:94:97:c1:92:cb:0b:71:ea:e0:f7:44:45:dc:
cf:a4:23:39:be:1e:2e:a4:76:a2:fe:b2:96:67:9e:6a:4b:d8:
cf:22:15:dd:10:a4:63:db:49:fa:ac:a5:fb:9d:05:9d:40:95:
e4:35:fd:cd:70:ff:2c:6b:1a:40:b2:de:79:52:c0:09:14:5d:
69:07:56:ec:22:58:3e:03:67:b4:66:dc:2a:c1:9d:a5:b0:0f:
7b:20:59:79:ca:57:bc:eb:78:11:a5:b8:b0:d8:09:86:e0:84:
9e:ff:d2:6a:fe:6e:3f:d2:ed:4f:c5:07:a6:bb:65:2d:3a:ec:
ce:1f:7e:4b:b9:af:a6:2e:6a:06:e3:92:d5:00:f5:d5:fa:da:
d7:95:62:6a:4e:08:af:e4:82:5e:9d:69:25:84:46:df:15:c6:
fb:50:4f:9b:03:0c:78:9f:68:45:ef:36:c2:c1:fd:e6:d5:c5:
f7:2f:51:c8:47:54:27:88:79:7a:bf:82:e7:df:6e:24:3f:f0:
64:65:a1:06:50:b8:a6:3f:da:de:af:2b:55:e0:0d:a3:89:91:
e9:37:3f:08:66:a5:64:36:35:e3:d2:fb:64:03:e1:d0:52:67:
01:00:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:35 2026 by rpki-client