Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.cer (raw, json)
Hash identifier: JDKEamKnKaSeiux7BMGbmZEKZXorH97lLx2RXWN4EE4=
Subject key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C111F8FA0513B2FBD6D343BB9924A0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:17:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202648
IP: 185.158.108.0/22
IP: 2a07:ac40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:1f:8f:a0:51:3b:2f:bd:6d:34:3b:b9:92:4a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f566016d878230128b58e279d661c195e6399588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:18:98:ba:d5:e0:76:d4:1e:61:f4:26:f7:
3f:6a:53:6a:12:02:7e:f5:bb:d7:2e:03:a7:13:51:
0b:00:dc:86:89:98:45:9b:fc:ce:2f:19:d7:04:6d:
5f:f8:a7:80:f9:8a:19:53:58:4e:96:4c:ba:3e:2a:
7d:f8:83:c4:eb:3e:fc:00:c5:25:f5:30:97:b6:55:
b1:d0:b1:38:73:15:f8:c3:a2:df:77:04:c7:4a:ab:
4b:8f:de:67:92:da:15:29:9a:b1:92:7c:fb:6f:0c:
3a:29:8a:9e:54:a3:4a:39:34:70:42:be:fc:46:83:
be:4d:66:9e:7c:04:12:39:c4:e1:74:c8:3c:49:6d:
9c:3f:cc:89:a3:e4:b3:f9:e9:99:df:bf:37:d4:fa:
73:7c:49:18:c8:7c:f0:89:e6:7f:86:f1:98:44:4c:
b4:75:ec:f8:09:d1:71:4b:bc:9c:8f:7f:fb:ae:9e:
30:5b:52:f3:7e:f5:b2:73:8f:5c:81:09:23:26:f2:
2b:64:98:5b:0a:5c:89:14:41:ee:75:8d:51:25:85:
95:93:e6:67:87:81:6e:5d:50:ae:c2:74:87:aa:1e:
55:e8:f0:8a:eb:72:b3:4b:f3:76:8d:71:4f:b7:3c:
b0:c0:53:c7:b4:97:3c:a0:f9:67:2d:d3:4d:0a:83:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.108.0/22
IPv6:
2a07:ac40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202648
Signature Algorithm: sha256WithRSAEncryption
39:83:25:6f:8c:f0:46:72:ce:3b:35:3c:b4:c7:b3:b5:05:78:
f2:8b:ec:0e:fe:b0:32:96:bf:86:1e:57:52:77:72:57:51:ed:
ea:89:15:f9:62:d1:bd:7c:e7:69:82:0d:e2:a9:e2:ef:27:5b:
28:6b:03:c4:b1:d5:d7:6f:8f:da:bb:8e:b9:7c:bd:b4:b5:04:
12:b9:0d:2c:5c:6c:d7:b5:04:a4:a6:17:96:2a:22:83:92:b6:
d9:df:fd:6f:9b:f4:2b:5a:56:ac:73:83:d4:23:83:eb:5d:90:
eb:ad:21:bf:d0:9d:67:34:11:97:e1:4c:41:77:8b:02:82:e9:
c8:d5:db:4d:49:19:e6:2a:cb:34:82:86:c9:8a:e6:93:0d:6c:
0a:86:b0:d5:33:c7:81:14:cd:1e:26:14:71:07:2c:d1:6c:53:
6c:4c:ce:96:8b:36:82:dc:48:ec:16:ea:85:80:ab:07:66:fe:
40:06:83:5d:c4:14:66:4f:0c:a7:89:a4:53:cf:cf:79:23:de:
3e:fc:b6:a2:ef:e2:8a:09:cb:a8:c1:7c:f6:92:b5:d0:ca:d2:
49:98:e6:95:a0:98:b4:0d:d3:d1:35:fb:0d:77:a7:f2:b0:d7:
e3:13:f3:21:53:91:37:28:13:06:b3:5b:bd:88:7e:e3:78:a2:
2b:ea:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:23 2026 by rpki-client