Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
File: r54n_4hNH_f0er0AUO0Q4B7c7fs.cer (raw, json)
Hash identifier: S8fsAp66GRFHlwmlkCCEIGvEqLzb/mFpyTK+/mz/KwM=
Subject key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A444C5F4022F701D906997FBFEA3DA76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 08:52:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48074
IP: 31.14.25.0/24
IP: 89.36.173.0 -- 89.36.174.255
IP: 89.38.232.0/23
IP: 89.40.96.0/22
IP: 89.42.160.0/23
IP: 89.42.163.0/24
IP: 89.44.81.0/24
IP: 89.44.83.0/24
IP: 89.46.240.0/23
IP: 89.46.243.0 -- 89.46.246.255
IP: 89.47.171.0/24
IP: 91.211.87.0/24
IP: 91.217.226.0/24
IP: 94.177.129.0/24
IP: 94.177.132.0/24
IP: 185.140.251.0/24
IP: 185.206.128.0/22
IP: 188.92.27.0/24
IP: 188.241.24.0/23
IP: 188.241.29.0 -- 188.241.31.255
IP: 194.32.162.0/24
IP: 195.211.127.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:44:c5:f4:02:2f:70:1d:90:69:97:fb:fe:a3:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 08:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:ab:d7:1e:32:00:bd:2a:f4:a9:51:d7:87:
22:01:98:9e:35:40:88:b4:20:d1:3e:d6:2a:7c:3c:
1d:8c:13:e3:da:cc:16:d6:5f:b6:7d:ba:ff:83:3c:
6d:a9:fe:f2:73:13:1c:36:14:f7:30:3b:76:8a:3f:
98:63:d2:0d:d4:ec:4d:c6:a8:67:dd:7d:d8:be:62:
93:4f:a2:6e:28:33:79:41:a9:b5:60:bb:6e:a5:e6:
4a:5a:08:58:38:eb:93:56:98:30:bd:72:61:d6:52:
fc:74:41:0b:96:56:d2:46:81:b1:6e:4f:f7:fe:01:
db:8e:80:b2:ac:b4:12:19:c2:88:92:f2:44:83:e6:
e1:9e:05:5c:9d:90:29:dc:fb:8c:6b:c2:11:9a:76:
75:7e:3b:6f:6a:f2:0a:59:c6:0b:11:db:22:c2:7a:
0c:8d:9f:b4:73:47:0f:a2:2d:1d:e2:ac:9d:aa:55:
2a:42:6f:2b:72:25:08:e1:24:fa:12:2a:a7:8e:b1:
e6:79:51:33:74:50:0d:58:71:68:52:ee:9c:97:93:
f2:8a:8b:29:2b:b2:bd:db:16:af:1d:7b:24:f8:0f:
c3:c2:04:4f:85:47:b2:53:77:99:a0:28:55:7e:11:
e5:3b:32:2d:9a:1f:bc:65:11:e7:f4:d8:09:12:20:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.25.0/24
89.36.173.0-89.36.174.255
89.38.232.0/23
89.40.96.0/22
89.42.160.0/23
89.42.163.0/24
89.44.81.0/24
89.44.83.0/24
89.46.240.0/23
89.46.243.0-89.46.246.255
89.47.171.0/24
91.211.87.0/24
91.217.226.0/24
94.177.129.0/24
94.177.132.0/24
185.140.251.0/24
185.206.128.0/22
188.92.27.0/24
188.241.24.0/23
188.241.29.0-188.241.31.255
194.32.162.0/24
195.211.127.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48074
Signature Algorithm: sha256WithRSAEncryption
6f:84:e1:ee:ed:b2:28:9e:b3:34:fc:66:87:0e:28:fc:0e:c8:
6d:14:03:85:c9:29:4a:6a:e5:3d:4c:d5:dc:dd:b0:65:15:06:
f8:16:57:03:4e:d1:66:c1:a0:14:d2:bc:2f:4d:13:2c:3a:1d:
5b:41:0c:de:15:8b:8e:f0:40:f1:e5:e8:49:eb:bf:79:0c:d3:
84:71:c9:b2:c6:ad:6a:76:e9:e6:20:ef:a1:f3:54:72:73:77:
2e:97:58:83:53:0a:8b:06:99:19:b7:e6:40:a8:4e:5c:fc:1d:
95:14:cb:d9:9f:c0:6e:83:21:ea:78:17:2d:43:85:4a:55:da:
45:b0:64:70:c9:38:82:bb:84:5c:41:80:d9:49:7d:a6:82:90:
33:96:f8:9f:9b:00:39:b4:ee:1f:26:24:24:ed:95:23:0e:98:
a6:d8:f9:c3:6b:65:bf:e0:9a:33:e0:d1:80:7e:b2:fe:7e:31:
7f:01:57:2e:c7:28:69:0c:f7:7b:c2:ff:81:9f:13:ce:f0:b9:
6b:75:1e:d6:0f:22:32:b3:f9:82:d5:8e:b8:01:2d:73:6a:52:
e1:0e:c5:b6:06:b1:91:63:a3:4c:1b:0f:15:e9:4e:77:64:0e:
b3:09:15:57:a7:b5:14:1a:6b:6d:93:ba:fa:4c:65:ec:9f:ca:
1f:8f:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:32 2026 by rpki-client