Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
File: 9H2J1RgGy5vj1QwzuozdsyZWzyo.cer (raw, json)
Hash identifier: +G1sqgi68nMRpfv2gCnld3okQHf93Xo5DfFgFYOeYWc=
Subject key identifier: F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06C817C08FA47A37AE8C05B9891B665FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 13:00:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13092
IP: 91.187.128.0/19
IP: 185.181.68.0/22
IP: 2001:4170::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:81:7c:08:fa:47:a3:7a:e8:c0:5b:98:91:b6:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 13:00:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f47d89d51806cb9be3d50c33ba8cddb32656cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:c9:37:2c:e6:57:fe:b0:b8:06:2d:67:92:
37:89:1f:e2:c5:28:6a:dd:7f:17:b4:97:71:43:af:
4a:e9:39:bf:00:cd:7b:d8:49:34:8e:fd:04:91:94:
c3:5c:22:f1:8d:45:8a:ab:f5:05:51:f6:55:85:7f:
97:7e:ea:fb:5e:b1:51:ba:9e:ec:c5:14:42:cf:ad:
f4:47:33:91:ff:40:99:4c:7a:7b:bb:4b:47:f3:fc:
a7:54:d3:0c:e3:2d:28:60:83:fa:46:ab:3d:34:2a:
26:d6:b1:51:78:b0:0a:b3:0f:d1:0a:fa:03:bb:e8:
bb:73:23:03:86:a9:7d:91:34:44:be:c1:05:89:8a:
b5:03:9f:19:ac:57:f6:58:be:d5:de:84:82:40:6c:
dc:04:80:10:d9:8f:56:0f:1d:d1:b2:c1:b9:c7:ce:
4f:4c:8e:dd:17:88:73:ea:5d:07:aa:61:4c:61:59:
19:a4:35:a3:74:9a:43:c2:ba:9b:15:fc:be:9c:30:
65:59:5e:62:03:fd:f0:b4:c7:41:c0:77:8d:be:f5:
ea:0e:cf:7d:19:59:59:be:25:17:19:a3:31:54:53:
ff:7f:8f:37:72:d6:cf:1e:d4:98:96:21:2e:3b:8e:
1d:3f:a7:14:bd:f2:56:36:78:6a:c6:e9:66:6d:22:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.128.0/19
185.181.68.0/22
IPv6:
2001:4170::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13092
Signature Algorithm: sha256WithRSAEncryption
68:79:f2:3e:f5:af:e8:46:5e:88:10:57:a3:d3:48:8d:aa:52:
a0:32:6f:c8:ab:b2:5e:f1:3d:84:42:ff:23:1e:71:dd:2d:9c:
9a:d2:49:51:23:75:0a:1a:ef:3c:6a:ec:3b:4b:3f:4d:63:45:
2b:50:08:c4:1d:60:24:b3:3c:a5:0c:c5:2a:f7:7a:06:64:be:
fa:78:64:32:32:90:a5:9a:95:a6:36:ec:f3:a1:46:b7:30:b1:
3a:38:86:c8:61:d0:7c:58:97:4f:8f:25:85:d5:5c:14:2f:c7:
8c:43:28:bb:d3:cc:12:9d:8a:77:c5:46:50:ab:f4:30:70:da:
08:4b:ef:87:9c:bb:45:9f:13:96:ea:7c:dd:59:1c:a2:18:52:
4e:56:ff:29:b6:f8:23:00:fd:1d:55:3d:d2:3e:4a:3e:7d:9a:
e7:77:9f:a8:91:bc:22:8d:be:2a:10:0e:9f:cc:1b:30:19:38:
6c:7d:ed:24:26:4f:7c:31:04:82:7b:e2:3a:d4:7c:96:66:7a:
91:81:05:0e:04:11:48:7c:e1:22:da:5f:3b:5a:e8:87:1f:9e:
09:29:0c:f1:e4:61:a9:6e:be:36:9f:9c:17:9a:6e:30:ca:72:
49:9f:af:b8:e7:b7:ad:a0:cc:6f:9c:f2:94:5f:2e:22:f6:b7:
2c:fc:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:21 2026 by rpki-client