Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.cer (raw, json)
Hash identifier: bis43GAGdTLA6ejsQ/CXB6Yv4XrxO+V89DB08tM7iyg=
Subject key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35CCEB2A033B2F5974B269944E4C9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35234
IP: 89.35.39.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:cc:eb:2a:03:3b:2f:59:74:b2:69:94:4e:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f694668ba76cf550c4139c17300160077dcea059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:83:24:b4:2f:99:18:3c:e8:45:db:68:77:
89:bf:70:15:f7:30:c5:fa:09:f5:8f:34:8b:c4:50:
cd:7f:1d:fe:b8:da:22:42:5c:96:84:46:8e:9b:69:
36:5a:5f:5a:c7:5c:10:50:26:50:5c:67:8d:d8:5d:
6b:2f:1d:76:99:bf:18:ef:a7:5e:8a:a7:f4:50:f4:
78:9c:1f:37:88:d5:54:a2:7c:a2:eb:d1:2a:14:39:
57:2a:c9:ab:c3:25:61:43:b4:f6:d2:3c:49:9d:64:
1a:69:98:87:44:a9:64:b9:41:2c:42:f6:ae:78:1e:
f3:0e:ec:6e:60:a7:6b:49:a8:1a:cf:15:f7:ee:ca:
a2:84:37:0b:4b:3c:19:2c:04:cd:69:9b:1b:e2:2c:
81:d8:21:ad:83:41:ed:52:4b:d7:dd:81:de:58:a5:
5b:c8:20:56:ce:da:df:ab:b4:47:0b:0e:06:62:60:
36:f8:61:14:ed:e5:a1:ef:a9:ce:d1:46:fa:30:0e:
30:0f:00:39:e1:d4:95:00:a1:ce:58:a5:75:87:6d:
37:08:de:44:0b:5c:d6:d8:71:45:40:ed:eb:b2:ad:
86:0f:0a:03:0b:3a:df:ce:d7:37:99:da:80:c1:57:
a1:65:39:67:07:3f:85:ff:74:50:81:10:53:3e:88:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.39.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35234
Signature Algorithm: sha256WithRSAEncryption
4d:59:c8:b8:67:74:fd:59:41:d7:81:32:dd:e2:f3:34:f7:09:
2f:f2:e7:f6:d0:d2:4c:41:d8:ee:9e:ec:55:b2:f0:01:bb:bc:
4a:3b:45:99:35:cc:e1:af:87:52:07:0f:24:dc:0d:02:c2:b2:
08:54:e5:ad:49:b8:9d:3d:35:14:fe:9e:46:58:af:ff:cd:94:
45:32:4e:3d:c0:5c:82:2c:56:e7:23:e4:8b:58:78:39:3d:ce:
91:5e:73:d3:86:61:ef:97:f7:7f:50:d7:cd:c6:c4:c7:14:d5:
57:8c:1a:75:72:b1:9c:ed:76:ea:39:05:dd:3b:f1:98:4e:c5:
ad:5a:32:68:7f:e0:c5:ad:4a:d1:d7:90:f1:ba:33:08:7a:6c:
38:91:02:97:c6:45:4b:0d:e3:59:58:f6:0a:f6:ae:b2:60:2c:
31:e8:a1:60:2d:fe:5c:e0:a1:ca:80:59:aa:5e:2e:92:51:cf:
0e:52:f5:38:b1:92:ab:6e:06:88:93:bd:14:fa:bb:db:21:d0:
5b:aa:7d:fc:2f:f9:fc:d9:90:b9:50:02:41:af:e8:d9:b1:3e:
51:74:d6:25:59:f7:af:86:a2:7a:1e:1a:ab:5a:d5:35:29:44:
8a:74:be:46:8b:61:3b:3e:e7:e9:e6:ed:4e:60:e8:46:c4:3a:
6d:55:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:19 2026 by rpki-client