Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
File: 9On4vS-aSts8ccewsDAHr7UwPek.cer (raw, json)
Hash identifier: 5Go+Nzc5H40gSpjAdKdT7WzJQClBzXLI5Ve/clsuFH4=
Subject key identifier: F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1CF5124C4386A304AA29CD00F387E10D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Nov 2026 10:32:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.199.94.0/24
IP: 195.216.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:51:24:c4:38:6a:30:4a:a2:9c:d0:0f:38:7e:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 10:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:9f:22:86:1e:aa:97:a3:34:25:28:2a:e9:
2f:bb:a6:79:c6:08:64:85:b7:3d:28:2c:f9:c4:97:
89:b8:a5:de:31:3c:ad:5a:94:02:aa:24:f1:c0:d9:
a8:f6:d0:65:43:38:c6:f5:3f:a9:dd:09:a4:78:c4:
b9:5f:48:97:17:38:ac:f8:43:70:79:bf:cb:27:eb:
07:0d:94:23:65:c1:0b:96:2d:a2:a1:8d:ea:dd:bb:
81:5c:a6:2d:bf:b4:89:ab:50:90:82:43:d9:f8:22:
8e:2b:c3:5f:39:2a:64:e8:1d:3e:7c:be:df:ba:03:
28:9b:ed:ae:3b:7d:1f:f4:af:db:b7:0d:8c:d1:ca:
cb:32:b9:e0:1d:b3:01:31:e7:5a:8d:63:08:fe:a1:
bf:34:48:89:05:d1:7e:73:9f:b7:bc:b5:9f:ef:5f:
7b:0f:5a:75:d7:96:bb:3a:89:2f:44:9d:0b:54:e0:
1c:a0:9f:0f:2b:dd:b1:07:86:ec:d7:de:a6:b1:f2:
11:a2:13:28:d1:44:53:b7:68:f3:b3:71:87:3d:31:
95:81:94:3d:18:a3:1c:34:e8:4d:cf:ba:d5:2d:bb:
f8:d3:4e:c0:c2:3a:6c:08:6b:00:54:0c:d3:2c:78:
01:e0:32:36:7b:31:31:1e:fc:35:49:c9:68:51:2a:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.94.0/24
195.216.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2f:3e:91:cb:31:22:45:f7:8c:60:2e:6e:96:34:9a:54:74:
64:5d:47:5d:71:0e:e0:f9:86:9b:7f:06:c5:93:bc:0e:63:0c:
a9:c7:b0:39:34:ef:9c:08:47:9b:c2:ee:44:18:b6:2f:87:a0:
25:67:c0:e9:fd:54:05:82:47:28:ee:e5:dc:b2:06:2d:ea:f0:
90:82:b7:10:3a:1f:eb:4c:07:b8:53:94:8e:93:aa:ca:51:a2:
54:97:28:d2:f3:ed:1e:ab:7a:61:d4:ab:d6:80:7e:2d:d8:05:
c4:ae:ff:b4:93:b7:43:b2:27:50:bf:a8:2a:47:a6:56:ee:0e:
7e:96:06:d9:ac:ad:85:02:7a:f8:42:fb:8c:89:6f:f3:4c:c7:
ac:29:20:85:1f:b5:be:4d:c4:cd:b3:5f:5e:90:50:c4:4c:58:
54:63:e1:ea:3b:a0:99:3a:9c:af:24:da:46:3f:5e:ac:2c:12:
80:c4:da:ec:90:e0:75:55:ec:2a:6b:a3:0f:70:7f:60:ec:6f:
a9:b2:78:96:e8:2e:47:d1:ec:43:7f:84:28:91:e8:61:38:29:
e5:25:45:28:18:1e:ad:8a:c5:e8:67:5f:79:59:55:b8:08:80:
dc:8a:2d:a3:d3:f0:f9:d6:cc:0e:97:45:e2:8f:37:b1:ef:2a:
d0:b5:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:07:44 2026 by rpki-client