Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.cer (raw, json)
Hash identifier: ajL8d+B43TGcdA/dbTxWkpuCEerwwpIR7MZSbWx5Eww=
Subject key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B354A16962E5425F47F88FCAC88E0C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49818
AS: 208154
IP: 81.22.228.0/22
IP: 185.75.192.0/22
IP: 2a03:4ca0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:4a:16:96:2e:54:25:f4:7f:88:fc:ac:88:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:bf:cb:34:88:c0:59:d1:51:de:71:76:dd:
06:ca:2e:ea:46:0e:71:26:21:28:16:f5:33:a9:3e:
3f:b0:a4:89:26:e0:92:f0:a7:1a:26:bb:4e:8a:1e:
2d:69:6a:2c:88:f8:de:fe:8c:34:57:12:8d:4a:df:
94:cc:14:4f:8c:a0:cd:5b:0a:7b:88:34:09:41:41:
cb:bc:9f:79:1f:d9:b7:19:d9:2d:ff:25:07:eb:35:
bc:ce:f4:81:f2:27:2e:88:63:a4:0e:4b:f0:9b:b0:
c4:e5:a2:2f:af:c3:3d:41:40:8c:d1:8a:85:d3:7e:
d8:86:e2:03:f3:6a:ee:9d:9a:7d:a3:dc:dc:8c:cb:
a4:08:b4:e7:66:bc:57:23:67:a5:cd:1a:d7:35:65:
c2:65:a5:9f:09:4b:37:78:e7:fe:1d:c1:ec:26:8a:
63:7c:d4:36:08:26:08:86:bf:02:a5:1d:bc:e5:90:
db:95:ec:89:8b:6f:3b:a5:dd:4b:e0:af:1c:45:39:
57:11:82:73:39:83:1a:1c:33:16:f0:71:53:d8:3b:
08:6a:17:d5:91:e1:85:50:56:b2:84:02:0d:a4:fb:
e7:f5:8e:7a:8c:a9:b8:94:be:99:ad:60:0c:bb:cb:
05:a0:7e:c2:56:61:04:67:d1:09:c1:ba:d9:6d:d7:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.228.0/22
185.75.192.0/22
IPv6:
2a03:4ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49818
208154
Signature Algorithm: sha256WithRSAEncryption
49:66:c1:df:6c:26:e5:c0:e0:c8:d2:b1:9e:c2:32:05:8a:14:
6b:cb:45:63:2c:0c:6a:2a:bc:01:36:42:b0:3f:9b:ea:71:f1:
cf:0c:90:77:8d:96:60:7a:79:cf:f1:b0:f6:b0:61:2a:67:5f:
4c:0d:21:1d:37:f9:b8:b7:5e:fa:a4:8e:8d:b3:18:5f:de:3c:
67:a4:e5:6b:0c:db:c7:19:7e:22:c1:d6:aa:ab:91:0d:6b:98:
06:c8:2e:08:93:c5:b4:55:13:bf:f8:4e:24:91:81:f1:db:a9:
22:38:ef:70:16:64:e5:d9:98:48:a9:8f:f3:85:d7:96:fb:0e:
3a:0d:a1:2f:42:bd:6c:56:95:57:fd:07:d8:29:28:21:b6:da:
b5:88:46:9d:d2:f8:d2:4a:f1:ab:71:5f:b4:83:df:eb:73:e3:
ea:53:ab:39:1f:04:e4:06:0a:2e:77:f4:f9:7d:c2:91:15:3f:
06:65:16:25:87:68:cd:67:50:35:11:36:fe:a0:c5:61:64:cc:
03:e8:d7:0b:44:17:7a:de:00:43:c0:8e:29:2d:aa:06:db:7b:
62:e2:7c:a4:26:b4:eb:f4:09:60:0b:00:d9:71:ba:9a:cd:6d:
5d:de:79:d9:25:77:5b:ca:d8:6d:b5:08:f0:86:3f:52:1d:0e:
d2:c4:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:27 2026 by rpki-client