Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
File: 9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer (raw, json)
Hash identifier: yjkPqV0ekPfh2Ri3U8X8yNb/xhuW/mpWXgKHSI/jhB4=
Subject key identifier: F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E444C1D40B890D21771E977E37BFC464E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 07:31:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58094
IP: 91.142.138.0/24
IP: 91.238.127.0/24
IP: 213.108.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:4c:1d:40:b8:90:d2:17:71:e9:77:e3:7b:fc:46:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 07:31:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:c8:ed:61:38:22:5b:d0:26:c4:85:73:e5:
d5:1e:f5:85:d3:88:0f:37:d6:15:aa:69:3f:74:00:
96:51:88:91:dd:26:00:45:59:36:9c:e1:6f:66:de:
36:09:5c:86:e4:d3:d2:71:3f:86:9f:f3:30:35:d4:
19:3b:24:86:1f:80:77:4b:58:22:35:df:e4:17:96:
e0:59:a3:36:c2:12:e8:66:57:a3:f8:6b:3d:54:67:
c5:b8:98:8c:59:fc:68:1f:7d:54:63:ed:ea:e8:1b:
9e:78:b6:c5:2e:cd:ad:ce:e1:44:f8:0e:ff:42:a8:
7a:88:f0:ee:10:94:8a:a4:77:c2:1f:96:13:cd:9b:
62:e1:6e:9a:36:45:0e:d2:95:e0:79:c7:70:df:bb:
8b:2b:f6:5d:f1:38:ef:6f:72:cc:17:3e:da:af:0e:
01:7c:b4:7e:7b:22:98:66:30:b6:41:86:dd:24:8c:
31:69:59:96:67:7c:04:86:cf:73:ab:56:4f:63:19:
9c:79:5d:0a:bd:9a:06:4b:29:ad:46:e7:1f:9e:ff:
16:53:9a:f4:ba:84:ff:cb:6b:a5:c4:27:31:db:25:
2e:fe:ed:73:84:72:8e:9a:b8:05:38:cf:30:5f:e3:
b6:f7:fd:74:6b:88:31:72:4c:85:80:15:1d:3d:9b:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.138.0/24
91.238.127.0/24
213.108.132.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58094
Signature Algorithm: sha256WithRSAEncryption
0e:22:cc:a2:9c:78:12:13:6f:87:4a:7b:93:bc:22:e6:e4:41:
b6:29:bb:e7:f7:fb:8f:45:35:42:54:40:54:1a:be:24:a6:81:
4c:08:66:8f:bc:82:2f:7f:66:54:9f:5e:8c:99:00:2e:75:13:
95:1a:da:c1:c9:c9:d5:48:97:5d:5a:2c:90:e6:c7:2c:5a:7d:
0e:db:05:dd:9e:e7:b4:bf:71:e8:18:f8:ae:d2:a8:33:06:b3:
60:75:a0:50:84:9c:75:ac:b6:9e:87:79:c0:71:44:8c:57:33:
d0:63:25:82:a5:8e:78:50:50:a7:88:1d:6c:bb:64:2c:c7:3e:
2f:df:88:80:11:19:ec:11:da:a3:e5:5e:a0:12:70:c5:84:1c:
cf:8b:70:74:d4:fc:cd:94:bd:5e:cb:7d:08:e6:c6:4a:60:19:
9d:91:68:41:46:f1:0d:ea:31:ce:51:8b:e5:14:db:07:f3:7e:
3b:65:71:29:ff:b0:dc:c6:eb:60:54:a7:af:e7:32:57:1b:f1:
cf:d9:a3:bc:3e:05:82:36:30:65:f8:50:80:ad:fe:35:7b:43:
7c:82:97:2b:10:04:3a:e3:06:24:76:cb:21:88:13:3d:77:23:
d6:d4:b6:f7:1c:c5:2c:b3:ed:8d:29:a2:66:4e:19:9c:9e:15:
47:49:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:07 2026 by rpki-client