Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
File: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer (raw, json)
Hash identifier: 6Oq2TEOYhi0keYmqaZRSYaKCVdGYq0U3R1PmROxrcqI=
Subject key identifier: F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C98E834CDD381EB7CF61A61C702896C3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 07:44:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47317
IP: 93.190.48.0/21
IP: 185.7.24.0/22
IP: 2a02:c600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:e8:34:cd:d3:81:eb:7c:f6:1a:61:c7:02:89:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 07:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f23e21affc33677485a15a5e13121143b577ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:5c:f7:a8:f4:ac:27:f5:1b:f3:27:6d:a3:
d8:cd:51:ac:0c:10:3e:e6:95:68:00:e6:01:6e:03:
84:0e:ff:2b:b0:59:c2:1d:05:cf:d5:fe:81:df:50:
ba:27:3d:c7:b8:56:60:6b:d0:3a:aa:6f:ab:0b:be:
8a:8a:1a:62:c2:af:30:3f:f7:3b:4a:49:a5:67:37:
56:8e:fe:39:d3:7b:27:25:78:81:8d:ad:75:a7:4f:
aa:ec:96:36:58:61:a4:37:bf:8a:d9:c4:96:be:6f:
22:41:b9:7b:a0:68:45:65:38:9d:06:01:92:91:83:
4e:a1:5a:9a:14:70:a9:e5:7e:98:a9:49:a8:d1:ff:
94:32:fc:42:ec:b6:dc:9c:93:42:85:90:91:ac:f3:
9c:e0:7a:0f:27:6b:7b:90:b8:b5:5f:07:c1:2c:a0:
27:e8:f0:be:92:a8:47:7d:cf:39:9f:44:17:12:8d:
cf:df:34:b9:b2:37:17:26:ae:f9:0f:b2:6e:1b:2a:
29:0a:e4:65:7d:5f:27:af:38:4a:8a:00:21:db:3f:
f8:2a:b9:12:f3:7f:30:f7:3d:60:4c:da:7c:a2:a3:
18:c2:35:fe:b2:90:70:d2:76:63:09:39:10:dc:42:
87:81:58:7f:c1:18:7b:30:a6:67:f3:bf:97:58:cf:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.48.0/21
185.7.24.0/22
IPv6:
2a02:c600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47317
Signature Algorithm: sha256WithRSAEncryption
4a:ce:df:8a:d2:ac:aa:90:d5:e8:36:8e:fa:b7:6c:52:15:a6:
26:27:53:ce:bb:3d:0d:2d:e1:72:26:f2:cc:2b:7d:99:71:f5:
aa:17:04:c3:51:d5:2d:be:47:8c:e5:a0:e6:5c:02:c6:cc:3e:
09:56:82:e2:04:47:e7:be:d3:7c:62:d2:bf:b6:65:7c:d7:ba:
78:60:91:f4:21:e7:91:c9:ee:57:a0:30:53:86:87:8f:42:a6:
27:92:3e:ba:52:cc:3d:29:f9:50:b0:db:54:46:c6:fb:ac:ad:
27:a4:8d:cb:d7:77:29:b7:e5:58:dd:a2:21:93:d3:3f:ab:8b:
61:1f:3d:f6:34:39:c2:5c:2e:2c:3f:b5:c7:30:1b:71:99:ec:
89:f6:cb:57:04:11:62:79:82:8a:d0:2b:ed:bd:7c:25:d1:57:
ae:6b:a7:4b:53:1c:20:a6:3a:fd:4a:cc:aa:54:8a:c8:3a:37:
bb:e8:d4:1f:73:19:58:23:f0:93:7d:a2:ea:cd:15:b5:19:c9:
20:21:c9:77:a8:2c:10:af:64:39:dd:bb:be:83:51:1a:58:3c:
b6:58:c6:2a:b7:6d:d4:3f:c8:3f:66:1b:73:a2:b7:f1:31:bc:
cd:1b:49:df:a0:f7:75:b2:fa:8a:ec:36:d9:5d:11:2b:ca:c9:
42:7d:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:21 2026 by rpki-client