Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
File: KtclXVpq-4XjdugbuaCew93dvNw.cer (raw, json)
Hash identifier: rnq+/sDn1VPpTPuF3YhQ4GqXayraLur4FHMNIX04zds=
Subject key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC9119ED923DF0F726CBEFF7043E0BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59528
IP: 91.220.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:11:9e:d9:23:df:0f:72:6c:be:ff:70:43:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:a7:7b:e5:c1:ee:73:d8:30:fb:64:c3:15:
8d:e5:16:be:da:42:ec:5d:a7:15:de:50:b7:69:e9:
e6:93:7a:3b:f0:8c:4e:68:e7:9d:e5:9b:50:80:74:
cb:1a:da:25:5c:bd:d6:b1:a2:90:e4:ec:b2:68:90:
db:51:5c:22:a9:d7:ba:c1:59:60:b1:7f:c9:97:40:
29:64:0a:fc:95:ec:25:6c:07:59:11:45:c1:f1:bc:
6e:fb:b4:97:1f:31:b2:1f:2a:bd:38:4e:ec:10:14:
43:b1:d1:66:6f:54:eb:29:ee:53:a2:d4:22:ec:48:
0e:fb:47:86:a5:fa:ed:69:31:2b:d1:dd:58:8d:df:
c0:e6:59:d3:a4:e9:a9:f3:0c:c8:44:88:45:f6:6a:
e9:03:9b:15:db:e2:12:ab:39:d9:bc:a3:47:e9:f0:
60:dc:8d:7b:cd:b8:5c:ca:01:1b:ec:cc:08:2b:cd:
89:fe:0a:06:61:8a:40:94:ec:0b:ed:10:12:e3:3d:
08:fc:7b:6d:d1:ef:8a:40:64:51:e1:fb:b8:76:24:
b2:27:34:89:67:b5:73:3f:7f:d8:0d:3f:9c:b9:a6:
74:cf:24:52:e0:a3:72:36:4a:6e:01:f0:fe:54:ec:
1d:24:d1:5f:ca:08:6b:b2:a3:61:43:56:f1:c7:dc:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.190.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59528
Signature Algorithm: sha256WithRSAEncryption
5c:81:7a:d8:7d:69:44:c7:9f:04:23:9e:04:82:98:ee:08:02:
00:8e:88:97:2c:28:5c:ee:3c:4e:00:45:8b:f4:96:f8:b2:c9:
eb:c5:04:1d:f2:8b:4f:2d:c9:2f:a0:dc:5c:a6:3f:a6:93:b7:
3a:71:17:a2:62:a1:1e:b9:0c:48:90:09:9f:4b:4a:0d:ec:0d:
15:fc:b6:c2:18:8c:11:c7:c3:53:0a:39:df:c5:c3:02:ba:8c:
69:98:a7:75:21:fc:9e:58:e4:50:65:8b:c2:e1:83:39:c2:50:
1d:62:ef:26:ac:54:48:4a:37:0a:80:e5:72:cd:cf:21:c9:9e:
d8:34:17:a2:e4:fc:33:d1:65:bf:f2:3f:be:48:95:ec:6d:7c:
67:6f:b8:f1:d7:55:5a:da:d9:a6:9e:5e:c1:18:fd:b0:c1:04:
fa:e0:3c:9e:a8:30:f4:d2:05:ce:cc:a8:30:63:57:dc:1b:7e:
59:24:7a:48:81:c0:d2:93:18:b7:63:42:99:7a:78:f0:e8:9e:
30:a0:6e:27:22:47:ff:03:0a:50:7a:6b:b9:79:56:b2:9d:04:
ab:77:83:cd:02:fa:28:ec:2f:5f:a9:44:e5:a4:8b:e5:e2:63:
5f:23:a8:cb:19:b0:54:de:92:a6:dc:eb:f8:f8:f4:ef:a5:66:
d4:bb:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:30 2026 by rpki-client