Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
File: 9gLX8kGK50__FdL0nEdlvoSDBc8.cer (raw, json)
Hash identifier: e2Qx9/MddnhEPXkrP9XvV+lAkVdZubNjHG53yFyo4wI=
Subject key identifier: F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A05919EEBE44B36E7402E13CD0EB133362
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Aug 2026 18:34:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219430
IP: 206.109.204.0/23
IP: 2a02:d540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:19:ee:be:44:b3:6e:74:02:e1:3c:d0:eb:13:33:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 18:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f602d7f2418ae74fff15d2f49c4765be848305cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:ad:65:f7:cb:68:30:c4:6d:40:dd:cf:e4:
6e:81:c3:57:51:8f:ee:8f:a0:bb:45:60:bd:7e:dd:
87:be:75:9d:7a:f7:c5:8c:02:9e:6a:c1:d7:ee:e1:
1e:4c:d8:b2:c9:e7:3b:21:88:8a:a2:f2:28:f2:b1:
24:59:b7:b6:a6:64:30:83:cc:4a:56:62:2f:be:d9:
d5:93:72:5e:82:cb:d7:f3:aa:ae:28:ea:dd:72:52:
53:ba:51:cd:35:04:0a:0c:18:cb:97:d5:35:2e:f6:
ca:79:4f:02:5e:da:3e:8c:16:a3:78:ca:27:c6:81:
5b:1e:a8:0d:b5:83:70:58:aa:81:7d:df:5c:37:c1:
2b:d9:45:40:ff:2c:9e:49:55:2e:bd:3a:8f:21:09:
1b:b0:eb:2a:a1:08:31:05:c5:c1:28:50:83:17:15:
00:49:68:b8:63:6a:72:9a:f2:a7:44:28:bb:a5:0f:
c5:02:de:ce:1a:6b:a8:3f:92:3f:1d:72:9a:1f:52:
64:1d:52:bb:6f:93:58:f2:2a:8b:56:68:49:da:e8:
cb:5b:72:f7:41:f6:b7:ee:cf:86:47:ef:c7:78:c6:
b0:d7:35:f0:8e:3d:1e:1a:78:97:60:93:9c:d4:a6:
ba:48:93:17:d8:ec:40:b1:58:f4:79:3c:9e:53:2b:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.109.204.0/23
IPv6:
2a02:d540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219430
Signature Algorithm: sha256WithRSAEncryption
26:b8:75:dd:b4:50:95:7d:8c:f4:e7:48:6d:cd:9c:c8:97:8a:
78:51:a4:c1:61:73:05:d1:c4:be:69:d3:3a:f0:8b:60:34:ec:
9e:51:29:ce:f9:ec:e2:0a:ef:1f:67:73:4e:ea:69:45:b8:7c:
cf:f5:a7:4e:a3:c3:7c:97:d0:1e:35:7e:34:9a:40:ab:b5:51:
85:00:c8:a1:85:6a:2c:f0:e8:86:2b:e8:f2:a4:05:a4:14:3f:
7e:86:b8:4c:2e:f7:28:0f:53:58:9d:82:0d:93:5f:56:85:1c:
91:51:26:84:fb:0b:62:22:3b:ef:8c:1b:07:17:81:3c:96:a0:
fa:b0:7c:b2:e5:c8:08:ad:31:24:c2:65:03:37:8e:b7:30:cc:
11:2a:fa:7b:d2:db:9f:12:c1:7d:74:36:35:1b:19:eb:e2:cd:
6d:7e:10:40:0d:95:44:60:a0:d8:a0:b0:c9:13:0b:02:47:c8:
f4:fe:2b:63:23:38:be:8f:26:04:86:ba:0c:bf:f7:41:20:c4:
ca:d9:4c:b0:6e:7d:8e:19:2c:1e:1f:ad:83:27:fc:cc:82:88:
77:b2:d0:6b:45:3f:79:26:2c:e2:fc:ff:18:52:49:eb:e2:b1:
f4:d3:6b:00:17:53:6f:05:be:d6:98:3b:28:23:f8:4f:9b:b5:
3d:0f:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:04 2026 by rpki-client