Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.cer (raw, json)
Hash identifier: YIv2PL9a4gwlBCSMzfMaO+2wN6344l8M/whPBiQUiSw=
Subject key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15C6914165E4291E22859354C8B334
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51442
IP: 91.217.46.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:c6:91:41:65:e4:29:1e:22:85:93:54:c8:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:c3:48:7a:eb:11:0e:7d:9a:1d:6e:d2:6e:
62:af:0d:05:86:57:a0:fd:67:c5:10:17:d1:75:cb:
b9:1a:d2:23:54:43:12:6f:30:7e:8c:c4:96:1f:a6:
54:e3:de:07:a7:21:50:66:99:98:69:fe:47:8c:fc:
2d:19:28:bf:82:d0:08:90:07:d7:8b:e2:b4:9b:31:
c0:fb:95:54:7e:2d:59:9e:43:da:cc:b4:17:44:5d:
29:39:30:95:4a:0a:e9:15:98:af:7f:9d:5b:1a:5b:
9b:5c:5f:e5:41:59:7a:68:6d:c5:fc:ea:20:26:96:
9f:93:31:b1:57:28:f2:1b:6a:74:b7:59:43:77:35:
b1:b4:c8:25:1e:23:a7:27:82:6c:4c:f6:49:7c:0e:
c8:2a:5b:22:c3:8f:b5:43:88:49:de:ab:98:c3:f2:
9a:29:41:3f:74:cf:bf:9a:97:71:fe:1b:fe:8a:33:
ec:f2:ec:ec:63:96:54:f5:b2:54:c3:74:90:ff:44:
81:f5:62:c3:8a:ca:14:e2:ab:a4:7d:48:89:86:6c:
04:26:5f:9f:6f:ad:11:2b:5a:a5:4d:55:66:16:f4:
23:53:d0:7e:28:a5:7b:0e:af:c9:91:6e:31:dc:69:
a6:ab:b7:55:ad:1e:eb:02:64:72:24:4a:7f:eb:45:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.46.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51442
Signature Algorithm: sha256WithRSAEncryption
37:8d:8f:a8:62:59:9d:66:f2:ed:0f:51:30:43:bd:c0:d3:ac:
f2:e9:65:a0:2d:1d:e7:97:b6:49:83:8c:11:45:80:19:25:0b:
d3:f6:58:6f:e1:cc:bf:00:4c:18:d3:99:5c:90:76:cc:1f:f7:
9e:14:ec:91:12:0f:e7:d4:90:47:8a:a5:b0:b8:17:8c:58:b2:
4a:97:47:e2:4d:40:3a:19:36:fa:a8:4d:8d:c1:7f:f3:92:70:
73:9b:e9:6d:6d:78:65:f9:7d:c9:ff:60:cf:29:e2:15:38:58:
4e:39:f8:eb:75:71:3e:49:83:03:38:ef:58:52:f8:f8:c4:37:
2c:53:03:d2:3e:d0:c1:84:f7:9d:37:fc:6d:94:11:0a:8a:be:
df:8f:14:dd:10:1b:99:2b:a2:18:4f:bd:42:34:13:3d:7b:2b:
ea:5e:4e:44:e7:d0:aa:4b:b0:0e:ad:55:09:fe:ef:61:2b:b5:
1f:a7:94:2e:94:e0:1d:46:ae:08:1e:af:20:65:1b:50:21:41:
6b:6f:6c:62:48:dc:85:ca:d5:a1:f6:18:6f:21:26:12:df:5e:
f0:ae:c2:ed:31:20:45:a9:1b:fe:18:d2:d1:2b:30:d8:b7:4c:
8b:9e:f1:29:97:9d:cb:99:5f:da:88:a3:42:04:c2:b5:2a:8e:
93:46:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:32 2026 by rpki-client