Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
File: A4iUPq0vSKfV6b9ugz-b7afx-kY.cer (raw, json)
Hash identifier: p8sDQjJblePHCx5v4C3m9smXUJBt10GZng0Q05vECPs=
Subject key identifier: 03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A05D2EC42F0B59CC20CB06F5D6AD40D073
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Sep 2026 13:35:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197747
IP: 91.226.22.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:2e:c4:2f:0b:59:cc:20:cb:06:f5:d6:ad:40:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 1 13:35:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0388943ead2f48a7d5e9bf6e833f9beda7f1fa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:7c:c8:15:23:e5:ce:29:69:c9:fa:46:21:
e7:b0:30:5c:7c:b6:b2:fa:4b:03:b0:2f:c2:94:0d:
45:e2:cb:95:b9:90:f5:93:c9:7d:4b:93:7b:c4:f6:
c4:00:6d:05:b1:cd:f4:30:7e:c4:73:76:66:da:74:
cd:06:d9:75:06:bc:d2:d7:30:b7:3a:dc:35:91:13:
28:80:e6:b7:fc:a5:d4:d2:c4:b8:d8:67:4e:ee:96:
92:17:84:b4:03:f1:c4:ce:cd:ce:05:e0:34:60:93:
41:8a:a9:37:cb:6c:40:c4:ca:66:e2:af:7b:5c:8e:
e4:8c:4c:d6:94:39:61:eb:ee:66:d8:d7:c3:70:b6:
52:22:be:b8:a3:2e:9b:25:b1:f2:6b:c1:8f:8d:d8:
62:8a:ca:8e:6a:1d:86:96:5b:14:b7:21:bf:d0:87:
ab:f0:4a:99:e4:f9:1b:cc:31:eb:60:74:ee:7b:74:
e2:fe:54:78:ce:61:1e:6e:49:6d:f2:7f:32:a9:51:
20:90:8f:6e:b7:d8:8a:10:f2:6c:c7:e4:0e:03:2b:
a0:2b:6e:b7:47:fe:55:92:c2:8e:67:e2:6f:81:a5:
92:7b:e4:f1:a9:71:49:7a:cf:f1:a3:11:bf:36:7e:
b9:6f:df:a4:31:0c:43:5a:55:9f:de:80:9c:4c:e9:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.22.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197747
Signature Algorithm: sha256WithRSAEncryption
66:ae:77:1f:76:5b:c3:25:b2:e6:cf:d2:77:13:ad:6f:b1:17:
1e:9f:1b:43:4d:92:10:f3:12:a4:87:c9:22:79:c5:67:19:d3:
a0:9a:ad:c2:37:51:25:8e:aa:25:c6:0a:f6:e6:15:d4:50:3f:
0c:02:3c:68:12:c8:e5:43:55:e3:58:1d:53:20:ff:08:e8:74:
ba:56:dc:70:2e:c7:f6:f9:e2:2d:f4:8e:53:a8:02:e3:fe:11:
25:3f:78:eb:a2:94:bc:ba:70:4d:d0:63:12:e6:bc:6a:ff:5f:
07:45:a6:2f:cc:07:1c:af:ec:10:e7:c2:4f:84:b6:32:d8:e2:
51:21:5d:20:76:4e:94:c6:bd:e2:85:73:42:c0:81:d2:37:a5:
71:33:e7:08:46:e8:8b:94:45:56:84:49:2b:0b:18:5e:bf:ee:
2f:ab:d6:c8:ad:cf:e4:18:f4:51:9d:9d:79:c9:f8:41:5e:62:
d1:a3:42:0f:a5:21:f2:ec:de:ca:5d:aa:dc:d7:3f:5b:51:75:
39:2e:8c:30:5d:01:28:5e:75:40:37:41:b8:a1:36:58:42:93:
ed:36:27:2d:ea:30:da:5f:d2:b9:0b:0e:9f:47:e6:c2:02:73:
b1:7d:71:ca:ad:62:5d:a4:2e:1a:2c:a3:62:6a:7a:5d:27:2b:
a9:08:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:13:57 2026 by rpki-client