Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
File: kZ0SeaWG-mmYusKeSnYtacZHkT8.cer (raw, json)
Hash identifier: RExSFjb7D5Xyyc0+4tRFv78HsKWHLLluH2sH0SUDol4=
Subject key identifier: 91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0673382BF750842FBA50EDED2950E9643
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 12:17:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214608
IP: 212.47.41.0/24
IP: 2a06:afc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:33:82:bf:75:08:42:fb:a5:0e:de:d2:95:0e:96:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 12:17:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=919d1279a586fa6998bac29e4a762d69c647913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:87:a9:6d:c2:17:ca:0f:ed:61:81:b1:fb:
a9:0b:10:d4:d0:cd:6a:0f:4a:db:19:71:ad:b7:82:
26:22:ee:86:07:f1:60:dd:21:e0:a8:b5:cb:84:cf:
43:8e:65:ca:89:c4:12:a2:8b:f8:9f:3b:80:af:10:
17:c0:58:86:a9:4f:37:70:85:6f:4b:22:05:f3:14:
31:f9:c0:d3:39:a4:59:5a:51:62:79:fb:9f:0a:d3:
66:29:8e:d3:bf:eb:48:60:cb:9f:03:d8:e1:6c:55:
a7:45:18:e7:4e:00:1d:14:2b:7a:6c:0b:44:7d:8b:
52:88:5a:b4:35:b7:f0:15:76:38:23:c7:28:b0:a5:
b2:5c:d9:c0:aa:99:3f:10:fa:8c:59:5e:3f:a2:e4:
f1:6d:5a:e3:05:50:0d:2e:7c:f3:f0:46:f0:df:4e:
5a:2f:c9:1c:e3:e1:34:b2:0d:3f:8c:f0:c8:a1:55:
c1:7f:09:c4:18:05:d7:cc:16:56:07:22:ce:51:c5:
25:c1:58:5e:e7:46:61:8d:d5:66:f2:48:ea:17:39:
b4:9d:4e:37:6a:48:bb:ad:4e:0d:41:77:5f:7b:b6:
6c:9e:4f:40:76:7c:aa:b3:50:6e:0b:fa:9a:c8:5b:
01:95:06:d6:f9:32:03:7a:e6:0d:15:25:7b:2e:fb:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.41.0/24
IPv6:
2a06:afc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214608
Signature Algorithm: sha256WithRSAEncryption
56:8c:92:95:ee:4e:7a:1a:ea:cc:41:12:f4:bf:39:13:60:73:
11:c0:18:91:79:a1:d6:d3:85:b7:b2:6c:e7:ed:0a:67:93:20:
f3:c4:5a:fa:5d:15:b8:dc:3f:95:ef:67:c6:4e:04:d0:cd:c2:
0b:8a:5e:22:69:4c:44:e1:79:e5:94:1f:6c:8e:ef:ce:5f:8e:
dc:f9:29:20:db:d3:e2:10:65:13:a6:16:6f:6e:2f:b9:66:34:
a1:f4:61:97:59:61:68:3d:16:41:e9:2c:76:c7:5c:48:1e:16:
d1:79:b9:b8:2a:d5:24:45:26:bf:25:44:2e:0e:69:b8:aa:1c:
47:14:bb:5c:f6:70:1e:c6:8a:61:b5:ee:26:cb:51:22:bc:8d:
20:b5:4e:d9:c8:65:b0:ce:2f:66:bc:75:02:56:83:58:8f:67:
ac:e6:66:6e:44:5f:62:9f:ab:11:83:39:9f:b7:ad:3c:f5:10:
12:da:4e:47:fe:90:0a:1b:82:0f:7f:9d:19:61:ae:82:b2:86:
3e:bb:8f:e8:7c:54:34:14:f3:3c:04:41:6b:10:9d:a0:ec:cd:
ea:d8:78:b9:69:3b:ab:9b:b4:e3:11:dd:0a:0d:02:5e:a6:2c:
2e:01:14:b7:17:04:1a:11:c5:c1:86:2b:66:3b:65:19:52:7d:
aa:de:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:00 2026 by rpki-client