Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
File: R-ph18wsJ4p8S8-8ITezlKImVK0.cer (raw, json)
Hash identifier: PRrXS49f++t6NWSNYufr8boscNyHkZcb0dIXjtnoJqo=
Subject key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF1A45B37C7A6F2B9C0E259BBE0E2F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:21:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42640
IP: 195.248.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:a4:5b:37:c7:a6:f2:b9:c0:e2:59:bb:e0:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:bc:99:ed:43:ef:42:24:4a:22:4b:20:d8:
38:a3:1f:64:4b:09:bb:34:49:d4:eb:33:c5:fa:f8:
41:3a:9a:9b:08:d3:70:1c:44:9b:fa:64:18:30:29:
0c:49:e8:a0:25:04:3a:40:9c:b2:27:e6:df:10:70:
25:11:f1:92:b8:be:77:c7:2a:e5:89:6b:d9:39:47:
e3:c0:32:85:6d:2a:1e:9f:4b:0e:b7:e4:94:e8:80:
ee:b2:8f:30:7a:c7:bf:57:a9:d6:4e:68:5a:36:f6:
d2:9f:68:de:85:d1:6e:42:a2:f9:d3:25:07:b8:5d:
7b:78:8a:ba:98:22:4d:26:0e:8d:4d:47:11:ea:2a:
37:af:a1:88:8e:04:10:e3:7e:79:c3:5c:09:74:ce:
ae:4c:b2:2d:28:f0:75:c4:2c:e6:ca:93:f8:78:e5:
19:05:60:4c:11:ee:bf:94:d3:b9:f9:3c:59:14:b6:
b2:50:14:2f:df:0b:cb:96:1f:22:53:06:e6:8b:31:
11:8a:37:71:cc:03:d7:2f:2f:fd:5e:4a:17:09:4f:
57:86:65:fa:cc:50:c8:3d:59:b6:9d:01:c0:44:40:
d9:a8:08:87:b1:a2:f7:83:7a:de:4e:7c:08:e8:21:
58:62:68:a8:e2:7a:09:dd:97:ef:41:07:b5:9b:be:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.228.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42640
Signature Algorithm: sha256WithRSAEncryption
11:44:4c:7a:0d:ee:60:14:6e:6a:e1:10:a2:30:71:9c:8d:f6:
0e:ec:fe:68:ac:cc:2f:21:5f:40:f0:0a:2f:0e:ee:b0:ac:33:
84:5a:b8:62:4d:dd:0f:84:8a:13:3f:6d:19:d2:d8:7c:ec:be:
14:f0:92:5b:19:56:52:11:d4:41:58:b2:7a:07:fc:55:b5:43:
ce:fe:f6:ff:fd:b8:c6:85:09:5b:6b:6b:fa:db:e2:b9:2d:21:
e9:8c:61:ce:3a:72:7b:27:b4:9a:29:63:f1:18:07:37:39:e3:
3c:19:6f:3e:b6:7f:53:c0:17:5a:89:62:d9:86:07:8e:1b:63:
69:fc:be:96:d9:2b:41:a7:d8:9b:29:84:f9:7d:c6:85:37:ee:
21:d8:47:73:ad:b4:b9:17:37:73:b4:2e:1a:76:1a:10:ed:38:
53:ab:5f:36:01:6e:ea:70:8d:d9:fd:88:5f:c6:9e:ac:1a:aa:
90:65:3a:1d:8c:c2:f0:9c:10:4f:71:6e:ca:b8:05:14:49:f9:
1f:5d:3c:ec:47:1e:8a:59:cb:4d:c4:2e:dc:e0:04:62:80:de:
d1:78:4b:b9:c3:d5:2b:03:e7:60:99:9b:9a:30:83:82:56:8e:
6a:00:07:0a:a4:74:bd:51:6a:5b:07:b1:8f:7a:29:4e:8b:b4:
22:72:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:10 2026 by rpki-client