Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.cer (raw, json)
Hash identifier: mnqavtAC8895rKk2NautyBTjKE9RhAx95GED+/oAP7k=
Subject key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD3C545EB12330F2E3D173379077A4925
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 11:06:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42514
IP: 46.22.240.0/20
IP: 89.232.180.0/22
IP: 94.102.16.0/20
IP: 95.141.176.0/20
IP: 128.204.160.0/19
IP: 153.80.172.0/22
IP: 178.17.128.0/20
IP: 185.12.84.0/22
IP: 213.166.76.0/22
IP: 2a02:2648::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:c5:45:eb:12:33:0f:2e:3d:17:33:79:07:7a:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 11:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:72:94:17:05:b5:a7:ed:fb:40:f0:22:65:
79:b3:43:8a:97:d6:5a:02:6c:e2:69:17:76:83:e1:
d3:eb:c8:db:df:9c:78:9f:cc:6c:d4:74:e6:b5:4a:
f9:a7:b7:09:d5:e9:95:fc:ab:56:eb:f4:d7:69:34:
bc:5a:f9:2c:27:cf:89:d9:63:89:3d:8c:25:fb:3c:
6c:64:89:ba:f5:88:0b:b8:d8:70:15:50:4e:33:c0:
64:0d:cb:e0:f5:1c:5e:df:82:7e:2b:26:e9:54:69:
4f:91:ef:ac:a0:a3:0c:d6:36:53:da:57:40:6c:b8:
58:d2:cb:fc:62:04:af:01:0e:c2:97:11:a0:a4:d5:
16:8f:a4:35:4f:cb:c6:0b:85:5b:87:76:c6:2f:13:
93:c6:7d:bc:0c:93:7c:55:b0:c3:c9:9a:ed:82:24:
a6:ed:61:b9:1f:85:57:d0:be:ca:93:2e:b4:9e:10:
ad:72:96:19:e8:6d:7b:1e:6c:17:df:b3:31:9d:d7:
68:16:05:51:28:e3:e9:4a:bc:ca:d4:a6:46:7e:69:
27:e8:a3:e4:5b:69:42:09:44:32:ea:4b:33:d6:6c:
7c:31:e2:b3:33:cb:30:c8:89:9c:a3:fe:84:38:f9:
7d:03:8d:87:bd:14:14:be:d0:6c:70:a6:74:e3:34:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.240.0/20
89.232.180.0/22
94.102.16.0/20
95.141.176.0/20
128.204.160.0/19
153.80.172.0/22
178.17.128.0/20
185.12.84.0/22
213.166.76.0/22
IPv6:
2a02:2648::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42514
Signature Algorithm: sha256WithRSAEncryption
17:ab:06:0e:69:83:aa:b0:e1:2d:82:3d:bf:d8:74:a4:1f:b7:
c4:8f:c6:b6:65:d8:8a:8e:cc:e5:3e:0c:f5:ab:a1:69:b8:ac:
a1:b9:18:1e:a4:7d:ed:8c:fd:df:f6:f8:be:d9:48:ed:8e:0f:
8d:f1:5a:ae:18:45:33:4c:9f:15:99:94:70:e2:6c:5b:9a:bb:
85:79:bc:82:a9:61:a8:60:31:0e:25:b0:ab:d4:93:64:7b:d7:
46:f5:a7:4d:99:cd:ae:5e:d6:18:2a:7f:bf:fd:b3:be:b0:3c:
52:96:04:b0:8d:a9:90:35:1b:74:3e:7f:23:c8:16:74:ae:aa:
83:6e:ea:b5:7b:46:ad:d5:16:a4:98:91:0c:6b:60:71:4d:77:
75:61:33:58:da:f9:0d:78:e6:80:7b:54:7f:17:1a:ef:79:08:
74:c0:36:03:ba:ed:da:5d:60:b6:6c:95:4f:8b:c6:15:08:53:
90:f4:f0:71:7f:97:8e:bd:c8:4c:e4:a9:7c:c7:2d:95:76:b7:
fa:3b:56:20:5a:25:e6:79:26:7c:68:27:e8:33:5a:ad:3d:f5:
a0:8a:cd:34:94:81:23:0c:af:9b:a9:12:24:8d:83:f9:cd:4f:
f7:c9:6b:01:42:f5:5a:27:ac:0e:be:bd:a1:c9:22:e2:22:af:
50:2a:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:19:08 2026 by rpki-client