Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.cer (raw, json)
Hash identifier: u5YlYu96TpdCds54Vi4OQGu7yet3NTyBMdJlTm+L7UU=
Subject key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AE914658C08A3EE5A7066BD7F9A34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210491
IP: 146.19.58.0/24
IP: 2a14:5b80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e9:14:65:8c:08:a3:ee:5a:70:66:bd:7f:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:88:38:8a:3a:23:01:97:fe:8c:1c:1a:00:
7c:83:8c:77:fa:05:e4:90:d2:c1:98:9b:ff:11:5e:
4f:4e:11:d6:3c:d6:54:6f:cf:db:ee:a9:4d:a0:0a:
28:ec:06:4c:48:e6:7e:6c:d5:44:0e:08:e7:5f:5b:
2e:a9:45:77:ad:1c:c1:eb:3e:29:85:0c:bd:21:ae:
77:be:4b:d6:f6:85:8b:ac:9a:76:bf:56:a9:6d:86:
00:ea:c3:14:05:75:ae:d2:1e:3f:32:e4:00:65:71:
6c:62:9b:18:3e:4f:94:34:66:1c:dd:1d:59:e4:99:
17:2f:b2:c2:e0:c8:46:37:ee:b3:d4:b1:1e:4c:5b:
41:94:0a:5b:5c:21:8b:15:89:5f:07:c7:da:13:7c:
84:18:00:c6:cd:55:0c:a8:87:b1:44:e9:e4:71:07:
23:ce:55:76:f0:60:dc:64:82:e9:3b:ed:ba:9c:e9:
63:34:d0:0e:80:fc:8c:ce:1e:3d:f6:71:c9:d3:8b:
6f:cc:9e:01:1c:0e:ce:f9:3a:94:b9:8c:e5:ff:69:
99:84:91:07:d8:30:d8:15:3d:b5:7a:cf:2a:3a:7a:
b4:5b:68:97:d2:95:da:1d:29:02:08:2c:8c:4e:1e:
27:7e:90:e0:df:b4:d8:f0:74:f5:be:a2:1e:8d:4f:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.58.0/24
IPv6:
2a14:5b80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210491
Signature Algorithm: sha256WithRSAEncryption
77:ee:7f:6d:a7:f5:93:32:ce:fa:fd:3a:ef:c9:e3:b0:d6:b2:
65:2e:ad:06:18:3b:96:cc:66:7c:96:55:77:bb:bc:d6:c4:55:
9e:9e:3b:a5:dc:06:b7:70:09:fc:3d:54:0f:f0:20:3c:60:1e:
ad:ad:c8:8d:43:08:5b:6e:43:b4:39:5d:f3:7e:9a:1f:7b:bf:
8a:71:c7:03:33:ce:91:7d:10:a5:cb:b4:e3:5c:36:ee:93:11:
43:c2:fb:7d:66:64:7c:50:71:d8:0f:e3:3d:ce:65:9d:b6:39:
1f:a1:03:1a:20:68:eb:76:27:cb:0a:ba:a6:dc:29:54:3a:14:
e8:49:67:13:a2:84:3d:ee:85:c3:b5:3a:17:56:62:5c:4c:04:
9d:23:ba:51:08:5d:08:5a:90:c2:d7:d2:c4:28:71:9f:2c:17:
20:c9:53:d9:10:60:39:d4:70:9c:65:65:17:55:a4:c5:44:39:
00:d4:01:a4:99:5e:95:28:59:8f:f3:66:59:42:b9:a3:1d:f4:
f3:f8:ad:1c:72:e4:04:11:a4:d1:ea:6b:1e:e7:fc:85:25:b9:
90:e8:42:eb:63:4c:7f:ff:20:f0:c4:0f:39:0d:66:46:87:f8:
46:0c:4a:1f:0b:3e:0b:5c:e3:62:81:d4:18:f2:c7:6b:1d:a3:
27:1e:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:35 2026 by rpki-client