Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
File: C047O4QkIliGMULtOhl5LZfLvHQ.cer (raw, json)
Hash identifier: NlVBVQbThVdQ5RZ+u3B1LpIjSQpqhCoaEqK3sUu65HE=
Subject key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C238E051EBB4BBA005FDDB293090444C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Feb 2026 12:50:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215443
IP: 91.199.230.0/24
IP: 2a0d:d940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:8e:05:1e:bb:4b:ba:00:5f:dd:b2:93:09:04:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 3 12:50:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:1a:36:74:40:23:be:7b:78:20:a0:f1:d7:
e7:63:53:96:ba:cb:9c:98:16:4a:6c:be:02:4e:0f:
79:af:25:b4:9c:13:0f:3b:40:95:4e:63:41:55:09:
5b:f2:ce:cc:1e:49:83:c0:e6:62:e9:73:30:c0:91:
ed:37:bd:65:b0:72:23:05:53:b5:89:c5:65:09:89:
15:c9:ba:eb:81:4a:5e:36:0f:fc:f6:aa:af:63:4c:
59:20:1e:38:c5:20:69:10:4b:47:53:61:ba:33:68:
59:9d:c6:22:df:9a:0d:0a:be:35:56:3d:96:08:dc:
88:15:83:db:42:d3:fa:b3:41:25:33:99:d1:e6:82:
f4:05:e3:7a:76:31:65:14:ae:39:f5:0b:78:68:25:
a3:fe:34:dd:55:ab:cd:a5:71:0a:26:32:df:71:47:
46:54:8a:61:8c:21:ab:57:e3:c7:59:46:ec:7b:96:
52:cf:5c:02:72:b8:5a:2c:c6:78:0b:e7:de:30:0d:
96:ad:42:1c:cf:9f:6b:96:88:7f:9b:67:f1:f4:bb:
cd:0a:d1:39:70:40:2d:af:4b:4f:13:5b:82:69:cb:
59:dd:bd:2d:d4:4b:d1:fd:23:3a:8e:ab:7f:6c:e8:
a9:9d:cc:ca:7a:7d:21:4b:e6:d9:10:87:dd:1e:27:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.230.0/24
IPv6:
2a0d:d940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215443
Signature Algorithm: sha256WithRSAEncryption
70:b0:5c:00:c7:7b:d0:0f:3b:ca:47:8c:02:2f:d1:85:85:ee:
cf:6e:e0:24:70:fe:a8:2f:bd:4d:8b:a1:df:26:de:6d:b0:58:
e5:80:b6:7c:94:92:8f:c7:39:0c:f2:62:e4:5d:82:4c:f3:a9:
d1:ad:a4:3e:e9:2e:19:e7:2c:4b:a8:52:b0:51:8d:8b:78:56:
d0:ce:64:88:b0:cf:d1:1d:fc:c4:5e:74:0f:56:9c:4b:43:70:
d6:18:33:12:fa:e8:9e:fa:1c:5f:55:96:66:89:2a:06:61:b1:
64:ce:80:26:16:b0:fc:7c:32:3e:45:1a:71:18:15:57:97:2c:
da:33:22:64:f6:3e:07:a9:88:93:eb:35:8c:4f:69:f6:3c:e7:
c6:bb:d0:7e:60:4e:01:90:64:1c:c6:eb:56:e7:28:25:b5:10:
f1:56:ca:6e:90:10:54:d6:a1:53:e3:44:3a:93:d9:42:0e:51:
67:aa:81:c9:08:30:89:7a:b1:ab:e2:f9:64:c9:a9:84:da:f8:
52:21:0f:16:90:2f:29:1e:86:7f:a8:b1:81:f0:4c:e5:8c:ff:
f0:f5:8c:16:e6:83:60:11:6c:5e:da:bf:cc:ff:d8:bf:2f:e0:
22:5c:85:55:0c:5b:53:47:54:dc:cb:80:8b:f7:3d:04:b8:02:
da:c2:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:55 2026 by rpki-client