Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.cer (raw, json)
Hash identifier: m+l+hgVZPB1tXSyrwl5F/T8qHp7d+yzvsFYekaw0mW0=
Subject key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FEB2C46DA29C4EF2DA6BF4B91D59C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204991
IP: 91.203.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:eb:2c:46:da:29:c4:ef:2d:a6:bf:4b:91:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:c1:ad:5e:cb:bc:de:16:74:b1:87:6f:12:
b8:c7:c3:19:f6:6f:74:f0:8b:58:f9:18:6a:b9:e7:
92:af:e3:19:07:0f:ab:b9:20:6c:52:cb:b5:41:61:
bb:dc:25:21:4b:ab:5d:ac:0b:f8:b8:47:64:bb:12:
d9:a0:9c:74:07:42:f2:52:19:5e:c1:84:9f:5f:9a:
2f:73:aa:ba:b0:e2:b1:6f:50:6d:27:f4:53:ae:64:
04:c3:b0:e6:d2:ce:2b:68:55:63:95:e6:01:09:69:
22:12:4a:5a:e8:91:ed:a8:36:77:87:88:6e:99:57:
2c:eb:b6:c9:60:1a:20:37:c4:c0:c5:d2:27:6a:4e:
67:70:45:81:00:b5:a4:04:7a:66:1e:46:eb:53:b8:
b4:3e:90:b7:0c:61:da:92:d3:02:15:83:9d:3d:c0:
38:05:c7:92:8d:3c:8f:af:ab:f6:b6:69:b4:f5:f3:
7a:32:1b:96:e2:2c:94:a0:89:63:38:16:ef:be:07:
df:2f:71:bb:66:8c:f6:2e:93:01:1e:d7:9d:b8:0b:
41:4b:43:d2:e8:4d:7e:cc:33:40:57:be:86:fb:8b:
e7:99:16:5e:52:36:dd:6b:72:f4:bb:c5:23:4c:83:
d3:35:e2:50:7e:21:f4:d1:95:d3:d6:0a:f3:d1:5d:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204991
Signature Algorithm: sha256WithRSAEncryption
5a:99:0c:17:0c:bd:b4:9e:f2:3f:76:24:41:fc:95:5a:6b:16:
a1:ff:f9:90:c4:b7:2b:95:41:46:29:3e:bf:fd:47:9d:6e:09:
57:f5:61:3d:e9:68:eb:3f:d1:c3:23:13:c5:50:7b:61:1a:a6:
33:f2:45:71:3f:69:36:f0:43:fd:f9:09:b1:d1:50:f2:dc:f4:
fb:0b:b7:86:49:3b:8b:d9:c3:67:a8:23:74:1f:27:a8:ac:4c:
66:48:bc:7c:43:7c:8f:b1:28:cb:9d:fd:1a:11:78:3c:e0:1b:
da:8b:2d:2e:27:e7:a1:99:e8:ac:90:69:8d:09:ad:6c:4e:2c:
32:a7:33:6b:ea:fc:95:f0:63:d8:3e:cb:9c:a2:bc:59:b5:cd:
fc:49:d6:d4:29:96:e5:e3:b7:8c:80:ce:12:b0:24:2e:66:f7:
01:fa:fd:a1:43:8b:6a:7b:e3:71:87:00:ab:18:f3:6b:9d:a9:
e2:b4:16:59:48:67:f4:6d:0d:50:b6:06:05:8a:7d:79:ac:3e:
a8:af:80:53:bd:fb:da:05:4f:6d:c9:b9:ce:e3:ae:ff:a1:a5:
8e:83:21:5c:50:5c:cb:1a:16:ee:2c:fe:9b:62:51:7b:c1:09:
b1:2a:62:cd:64:a1:d5:ba:27:74:db:83:e6:e0:ab:f5:ce:b1:
ba:c2:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:37 2026 by rpki-client