Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
File: N1UunJZN5v9U4JnHEVXBod7IpzA.cer (raw, json)
Hash identifier: z9+KMpar88UkwnTmuw0pJXVdwnMB0c3EtrynU0OOnyQ=
Subject key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EAE14FEAA1C3181B13B1A82B893CB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209543
IP: 45.92.204.0/22
IP: 185.150.36.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:e1:4f:ea:a1:c3:18:1b:13:b1:a8:2b:89:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:9f:b1:f1:7c:75:ba:35:36:e6:3a:6e:5d:
0e:f7:36:52:dd:aa:48:59:f9:2b:f9:71:cc:e7:50:
a2:ba:fd:11:a5:bd:50:cd:d1:68:1e:49:b7:6d:02:
40:25:be:75:2e:e2:26:98:7b:c2:38:d2:a6:ff:1b:
bd:6a:7e:61:fc:4e:cb:c2:ea:21:03:1f:63:af:eb:
17:be:08:f2:90:3b:8a:c5:01:db:e4:12:31:e0:5b:
3a:b9:a4:1b:98:a9:87:6b:c4:fb:bc:2f:68:93:40:
43:af:29:f2:f6:68:58:99:cc:77:8b:ca:87:25:45:
29:9f:a3:57:ab:9f:77:ec:bb:4a:a9:04:d9:64:f3:
ab:5f:ab:9b:4e:6f:98:b5:51:f7:1d:79:c5:4c:dd:
37:7f:82:91:ce:68:03:62:27:eb:9c:a7:94:3b:fe:
62:f3:14:78:d8:bd:fe:08:9a:8a:b7:aa:82:4a:61:
d4:2d:97:7f:0b:97:d5:d3:47:26:59:f9:38:3f:86:
fc:a9:3a:5d:05:67:e2:2e:d3:eb:4c:ad:34:d3:37:
5f:76:ce:d4:2d:0c:8c:81:6c:8e:77:c6:63:d7:30:
db:40:a8:4e:1a:16:45:8c:9b:1f:1f:9a:14:b4:72:
5c:20:0f:c7:f2:41:90:c2:5f:05:a4:ec:7a:fa:08:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.204.0/22
185.150.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209543
Signature Algorithm: sha256WithRSAEncryption
a9:48:af:36:2e:ce:32:fb:74:90:f3:70:87:ea:66:9d:a8:5b:
b2:fb:d5:66:e5:46:07:64:0f:6b:4c:6d:a3:44:f2:3e:b5:9f:
14:6b:c4:88:7d:60:47:ae:68:ad:67:b1:f7:d8:e9:a9:18:15:
ac:43:ae:34:4d:f9:75:d2:96:ae:ed:45:a0:7f:4f:31:4f:81:
22:46:00:9e:6d:7a:9a:05:79:19:d8:e7:d2:57:48:1b:46:16:
ba:ef:c7:4f:05:8a:14:eb:e9:ec:9f:93:63:6b:80:bb:24:ba:
97:4c:a1:f3:ac:28:41:83:94:5a:15:dc:7e:6c:b6:3d:2f:55:
8e:cc:f9:bf:99:65:9f:c4:22:fb:96:7a:95:d9:b0:3f:22:a3:
37:76:31:87:99:60:6a:92:05:d3:e8:45:25:80:24:4d:4b:6c:
bb:67:56:2b:b4:7e:92:f4:db:2c:70:3b:aa:1d:c6:80:e4:25:
38:a8:f4:d6:d4:9e:40:3c:9c:57:c8:f6:3c:b3:ce:a0:c3:3a:
62:1a:dd:c9:cc:8d:54:3a:40:f7:ba:64:c2:7a:b7:0a:83:eb:
b3:52:8c:98:86:b3:30:8a:51:81:83:16:43:d7:e2:d8:d7:87:
66:0e:64:18:c6:1e:e2:51:66:01:43:59:c0:6d:49:a5:d2:81:
ea:fb:3d:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:46 2026 by rpki-client