Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.cer (raw, json)
Hash identifier: kJSstgWFllNr3vAWrquvU0t6av3SYK8olCs2MYQtvN8=
Subject key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E3839949C4DD09E682A29ED667E0C0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209026
IP: 185.253.236.0/22
IP: 2a0c:42c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:39:94:9c:4d:d0:9e:68:2a:29:ed:66:7e:0c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:30:cf:3d:0a:6e:33:60:3f:e9:c0:8f:83:
61:6a:7e:e3:99:60:54:74:1b:e0:a3:cb:31:73:d1:
61:8f:bb:37:ac:fa:2b:3d:fc:3a:81:eb:af:9c:34:
89:70:07:48:70:4f:2c:95:47:29:12:82:ee:03:10:
aa:c6:51:29:6c:de:2b:48:b9:b6:9d:b6:c7:d6:ac:
a0:00:4d:ff:6b:1f:b5:2d:6b:1b:b0:4a:41:a1:77:
d8:de:3f:2d:35:39:57:75:44:bf:67:cf:fc:c2:f7:
05:3d:57:a1:ac:ca:ba:66:85:44:82:9c:f6:09:4b:
6d:bd:f6:ce:47:75:39:f5:c1:05:69:1c:7c:4f:5e:
ed:e7:2d:ba:c7:e1:21:91:ba:9a:01:b1:b4:bb:1b:
e5:15:dd:10:aa:14:7d:2d:5d:84:68:d8:88:d7:8c:
c6:df:f1:52:2d:ae:5a:ab:6a:27:fa:c8:c9:41:3b:
dd:3c:5a:c4:be:fe:4e:66:bf:e4:c7:cf:e4:60:63:
60:02:0f:ab:40:51:34:37:78:68:6e:e4:e5:97:44:
17:d8:6c:48:39:f5:ab:85:9d:d7:ca:35:dc:68:16:
eb:80:62:cf:79:d3:69:9e:71:50:fe:9d:a3:82:f0:
9d:c1:41:77:77:2e:d2:3a:c2:e9:3c:b8:cb:89:83:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.236.0/22
IPv6:
2a0c:42c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209026
Signature Algorithm: sha256WithRSAEncryption
0d:54:f1:ec:09:a4:9a:ae:69:85:00:79:50:5c:04:f3:d6:c3:
f1:35:a6:c0:1e:c2:ab:50:75:a3:91:d3:be:22:cd:8b:00:16:
12:29:f2:a5:a6:0f:5e:ad:5b:a5:b0:0f:5d:49:79:62:ea:7d:
fa:1f:05:5b:40:25:a0:91:7d:2d:95:e4:5b:11:b9:6c:61:81:
e0:fd:2d:e6:6d:48:db:d2:e9:56:cf:f4:2a:2d:aa:cd:48:8f:
ad:02:c9:2c:a5:27:07:53:01:cc:da:30:b9:29:ac:3f:e4:dc:
0b:26:2b:75:3c:e6:58:c6:92:2b:46:1a:8d:d3:65:02:ac:09:
b2:15:82:ea:0c:8e:ba:99:d5:62:1e:9a:95:48:f4:3c:ef:98:
cb:9b:3e:5e:ef:53:99:ab:12:6b:cb:7b:25:71:70:ca:cb:cb:
0e:49:85:c7:e0:5f:bb:ad:0e:27:f2:ff:c2:75:f1:06:10:7b:
3b:ab:0e:b4:cf:5b:a3:43:e9:83:47:a6:68:bf:80:c9:73:4d:
f0:c1:d7:2d:76:14:63:c8:1a:5b:3e:95:18:bb:a5:32:1e:61:
48:c6:5e:2f:69:06:2a:1f:b2:a5:8e:c1:92:51:ad:85:be:0c:
ac:82:c7:68:47:83:49:5c:aa:0b:9e:39:ce:ba:cd:09:37:c0:
5d:76:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:58 2026 by rpki-client