Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
File: 4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer (raw, json)
Hash identifier: Io9eCqBre6IcIo890be5t/TisZbrna6/B3c8GFNY+1o=
Subject key identifier: E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DCFEED4DD6BD5FACB26D6E22F58B5836E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Apr 2026 17:13:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.13.26.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ee:d4:dd:6b:d5:fa:cb:26:d6:e2:2f:58:b5:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 27 17:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14f99f9948f2c078784696e4affb53618c7ac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:83:e5:27:d8:fa:78:0f:0e:0e:a8:27:71:
18:ed:7a:99:64:cf:b1:05:94:83:4f:aa:49:e8:3e:
50:62:b5:c4:b1:b5:fe:62:15:ef:36:62:64:91:57:
bc:a3:d3:f6:0b:55:9d:f5:5b:df:9d:fb:65:52:41:
81:1c:55:35:d9:bf:67:f6:b2:05:03:ff:d0:ac:98:
e5:86:c6:c2:ad:6d:9d:61:6d:1d:61:3c:c3:b3:c4:
a0:9b:f2:4a:91:66:55:b5:9b:fe:81:b9:13:09:b3:
77:f4:ff:e3:4f:c2:84:a9:9e:6d:c8:da:56:14:4c:
46:e8:df:f3:19:bf:e4:cd:54:9d:71:ce:80:2b:ce:
f8:e9:05:49:91:6d:c7:c2:bc:57:70:1d:e0:43:6f:
15:bd:f4:61:24:8d:7f:04:69:3e:b8:7e:ac:dc:13:
5a:df:8f:c0:1c:db:6f:75:39:92:c3:3b:0e:ad:2c:
43:d9:70:88:31:74:f2:b6:c0:8e:6a:aa:fc:38:9f:
b6:55:31:e2:16:17:91:41:98:2c:cf:29:55:b7:dc:
13:69:57:60:42:8a:ae:ac:3f:c9:11:33:14:7e:25:
1e:c2:e9:a3:ec:cf:26:94:b7:03:4c:92:59:8e:f0:
97:7e:7c:e8:1b:8a:da:bd:26:0f:24:80:9b:bc:72:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6d:e7:c2:e0:3f:d8:f0:5b:12:dd:36:8a:e7:52:e7:f7:d6:
39:12:15:b2:8c:6e:08:bc:20:bf:d2:a1:23:24:63:a9:f8:4d:
9b:1b:af:42:c5:9e:5c:a5:2a:d3:c0:5e:5f:98:e0:68:58:16:
98:8d:aa:2c:80:d8:0f:aa:8b:51:52:b8:43:82:1d:dd:b5:3d:
f3:f0:ff:87:7e:c7:3d:49:76:a5:cf:2b:89:54:1c:82:64:14:
47:f6:fd:24:e9:6f:6a:81:c1:6b:80:e3:36:fc:b0:91:94:c4:
63:58:17:9d:91:47:21:7d:92:22:52:b1:14:d2:a0:51:21:5e:
46:c9:fa:79:98:c9:72:f6:6a:05:c9:a2:39:7c:9f:7f:d1:39:
df:d7:be:d7:f4:f8:d1:7c:bf:1c:ed:90:f7:6b:fc:10:81:a2:
14:fc:29:43:4c:4c:18:a6:e4:92:78:15:fa:c8:f0:fc:e7:e2:
bc:1f:ec:ae:7e:cf:28:a0:61:3a:4d:6d:f5:23:e0:4a:00:b0:
82:b2:36:5f:36:09:bf:ef:7f:e5:42:b6:2b:9f:9e:3f:27:40:
c5:6d:e8:48:e3:45:b8:d3:ac:38:40:dd:12:10:d0:c1:f6:e2:
58:0d:ae:59:10:11:f7:a3:61:90:32:d2:5f:aa:d1:29:9f:87:
0f:1f:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:44 2026 by rpki-client