Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
File: 49sxEepZks_aZC-48pyGNUpjrG0.cer (raw, json)
Hash identifier: uq7waUjcMG0KGgSIygsOyKXIq5KJV+GIvl68z+fcq7Q=
Subject key identifier: E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9B0C374B8D7BD5854AAF7CD3DC27CBC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 17:43:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204351
IP: 185.241.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:0c:37:4b:8d:7b:d5:85:4a:af:7c:d3:dc:27:cb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 17:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:53:ad:07:49:af:ad:f2:8d:8d:3c:22:db:
e4:aa:4a:f5:3a:b1:b8:a9:60:95:d0:04:b2:86:84:
60:57:a3:0f:04:ac:08:d3:32:23:1f:7a:75:47:f6:
3a:81:dc:6c:27:40:d7:af:de:75:e3:27:11:cc:a0:
c5:66:00:b4:fc:0d:b9:98:d9:d0:1a:1d:30:3b:0c:
da:9f:f8:b9:7f:da:1d:c1:6d:0d:45:4f:6e:f1:aa:
f3:43:64:a5:c3:cd:1b:5a:01:a7:09:3a:26:89:36:
4a:fd:c3:63:5c:86:d1:24:46:fa:49:80:ac:24:5f:
7f:71:d2:d8:b0:cf:34:90:17:8a:f5:80:ce:ad:20:
a4:e4:78:df:39:41:79:59:d2:9c:54:18:ed:9a:0e:
83:b1:ce:c8:81:55:d2:29:36:65:0a:92:22:b3:f5:
95:10:1c:2b:cf:2e:1c:6e:b5:a6:05:d0:6e:d5:4e:
17:63:ad:2d:57:66:14:67:33:43:a5:5f:27:64:a2:
c4:0e:e7:00:06:aa:70:a6:49:08:2b:6c:c5:b8:7b:
dc:39:7c:87:67:9f:89:61:c1:12:4d:28:06:bb:0d:
b3:6d:69:84:89:f9:05:db:a5:da:7f:50:be:5b:03:
25:bd:f4:52:d2:79:42:93:b5:e8:55:e3:b7:ce:5b:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204351
Signature Algorithm: sha256WithRSAEncryption
69:63:5d:17:cd:7e:af:71:ee:00:93:06:3f:7b:f5:2d:b6:46:
3c:45:58:1a:ce:df:dc:46:82:86:2f:ff:2f:de:09:e8:7f:0f:
90:44:55:85:25:f5:c3:40:8d:b9:ac:fe:2f:4d:1f:ec:6a:d6:
de:d0:99:2c:c0:fb:05:50:f0:ba:eb:93:f5:b4:2f:6c:9f:a1:
dd:41:63:f7:54:5f:59:64:82:59:3d:4a:f2:23:6d:a8:67:3a:
02:f7:ed:c0:ab:8a:59:ab:c8:da:92:dc:80:fd:17:81:c5:e1:
b4:89:08:41:c8:98:e7:d5:4b:98:3c:da:97:76:fc:8a:0e:f3:
34:3c:eb:d3:88:cb:ea:b0:e0:fe:6f:55:54:04:c0:24:e4:b9:
4e:23:49:fd:7e:77:1f:31:4e:21:7b:21:b7:5a:63:2a:ee:1d:
01:ab:87:5f:7f:fc:35:bb:51:e2:08:5f:cb:8c:07:4f:12:d9:
13:86:68:1e:e0:61:64:df:72:81:d4:b0:a1:d1:c0:df:41:b3:
a3:9b:5c:e4:a3:69:52:2b:de:bd:9c:4d:f8:e6:5b:e6:c9:9d:
a3:55:4a:68:cc:5c:62:d9:58:cd:12:e6:96:ec:29:c3:87:32:
1b:c5:0c:db:d4:86:b8:57:50:5d:96:b3:cb:71:51:1e:b6:43:
0f:07:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:34 2026 by rpki-client