Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.cer (raw, json)
Hash identifier: FswyABmIzw79i5TZLpEweD8Azuh6qC8o0883w/bm8KA=
Subject key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35CD9B9661629F0CDF8C3AEED76BF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205269
IP: 185.247.216.0/22
IP: 2a0d:cd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:cd:9b:96:61:62:9f:0c:df:8c:3a:ee:d7:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:01:87:40:59:72:8d:cd:ea:ea:ea:b2:ab:
74:e9:57:35:fb:ed:20:8f:a8:8f:14:e3:8b:99:1c:
fa:ae:91:b8:0b:6d:16:b5:1c:e3:af:83:e8:c4:db:
08:95:ec:7c:e7:1e:80:86:69:82:ac:57:81:6c:18:
40:71:18:a4:bd:ed:21:5a:5c:22:c8:c0:2c:b5:35:
0c:5d:d5:17:67:dc:84:ee:9b:7e:af:3b:19:01:37:
2b:69:ed:ff:d2:d0:e0:59:60:c9:79:20:f2:69:e9:
ca:4e:e7:66:11:11:f1:3d:9e:fd:ca:62:a8:b0:e7:
8b:c9:f7:7c:33:8c:c9:53:ed:36:dd:61:9e:f8:1f:
15:47:74:0e:6f:3e:0c:fc:62:a7:f2:10:b6:e8:3b:
01:b3:04:c7:2a:27:2e:6d:22:2b:1e:ec:d3:ff:1f:
a7:80:e5:f1:28:e5:7e:a7:45:37:25:4c:67:ee:e6:
ab:86:8e:e1:39:9d:26:b2:a1:da:bb:2a:f8:91:f5:
e7:fe:ae:e5:8c:b9:18:fa:78:0f:1d:78:f7:2b:e1:
d5:3a:07:4a:a6:84:8d:21:68:48:da:86:4b:68:c4:
74:c0:06:8f:bb:12:1b:4c:8e:e7:b4:aa:75:83:b3:
53:3d:ed:8d:25:2e:43:a2:7f:5b:81:61:8a:cc:d2:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
IPv6:
2a0d:cd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205269
Signature Algorithm: sha256WithRSAEncryption
24:1d:5e:27:04:f7:e2:7f:a9:fa:9a:7d:af:a5:44:51:c0:01:
ee:bb:e7:40:4e:7e:98:7c:6f:c0:97:ed:af:62:aa:27:66:30:
6f:ba:f2:1d:5f:d5:56:7c:b0:06:fe:03:9b:11:dd:61:e5:9c:
c8:eb:44:9e:0e:30:3c:4d:13:48:a2:92:84:70:67:90:36:75:
8a:6a:da:2a:04:6c:b9:06:d9:3f:57:bb:c8:88:b1:78:03:65:
d0:2e:eb:9c:d6:0a:2f:dc:a1:db:d7:9f:78:d3:e6:bb:cc:84:
e3:17:16:f7:43:a2:ee:04:8a:0e:4d:c2:0a:ba:f1:fc:c4:fb:
4a:4b:ae:7e:7f:f4:47:a4:d5:6e:8f:ab:a4:59:4f:68:cf:b0:
1c:cc:3d:c2:9e:ed:be:fa:85:4f:80:80:d8:57:aa:c9:bb:8b:
27:09:67:25:35:73:07:ae:44:28:04:b6:cf:cc:89:98:ef:da:
8c:44:20:5a:0a:76:e3:0a:6c:ad:5a:b3:ce:ad:19:2d:2e:d0:
27:68:6a:eb:3d:4b:a4:4b:70:71:6b:62:3f:ab:9f:f8:be:18:
f7:48:6c:81:96:79:b3:4f:d9:39:37:2f:c3:59:f0:f7:14:b2:
9b:08:1f:4c:60:f9:52:f3:28:e4:0d:94:b4:16:d2:68:4c:13:
f7:07:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:17 2026 by rpki-client