Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
File: R8zghicbSUmlCfHjcYDpioCkVOU.cer (raw, json)
Hash identifier: SO5Z2bOmQiveUbBafhgdtnufLssxEH2LdxgzTYoPcd8=
Subject key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB351C29C264B986B2633CE3D56D8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200826
IP: 91.231.7.0/24
IP: 91.234.241.0 -- 91.234.243.255
IP: 91.238.186.0/23
IP: 91.240.149.0 -- 91.240.151.255
IP: 91.247.240.0/21
IP: 2001:67c:2fb4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:35:1c:29:c2:64:b9:86:b2:63:3c:e3:d5:6d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47cce086271b4949a509f1e37180e98a80a454e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:1b:34:fb:d1:90:28:97:02:9c:ad:9e:5c:
80:1d:54:58:c3:a0:d5:4f:f2:8d:6e:dc:77:58:e1:
61:72:27:7d:be:fb:5d:c2:20:fc:d9:f4:c0:d8:47:
aa:0f:c0:6b:04:9a:19:9e:99:2b:80:b4:86:3d:1a:
29:d9:fb:fd:71:4f:5f:a2:e8:fb:a3:ed:8c:d4:b9:
74:b3:2c:59:3b:4d:8c:cf:10:4a:d3:0d:f3:0a:3b:
94:aa:36:ca:6e:cc:26:9b:ed:1a:c3:79:4b:09:96:
c0:35:ae:e9:6b:40:bf:fc:69:1b:9b:7c:76:0e:6f:
c2:e4:b3:41:82:8c:81:e1:95:00:f0:db:d5:b0:70:
32:3b:54:df:9e:ba:6f:05:cb:da:48:30:ff:3e:03:
88:0e:ef:44:9f:73:c3:b8:64:7b:51:6f:0e:e2:7a:
ea:88:45:e9:cd:3f:df:07:75:20:a9:15:cc:8b:12:
36:e4:a1:17:6b:15:7d:56:0f:60:23:c4:ca:a0:93:
a0:b3:c7:57:25:c3:b6:97:77:dc:74:57:5c:a2:ee:
63:71:76:b3:42:de:b4:19:15:8b:38:0b:3f:10:c0:
8e:44:e7:fb:ff:a5:67:4b:30:53:ec:32:c7:3e:aa:
39:30:f3:76:f3:96:e2:7b:1c:42:1a:59:f3:9b:4d:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.7.0/24
91.234.241.0-91.234.243.255
91.238.186.0/23
91.240.149.0-91.240.151.255
91.247.240.0/21
IPv6:
2001:67c:2fb4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200826
Signature Algorithm: sha256WithRSAEncryption
02:e6:c9:52:88:ca:12:13:d4:17:b3:f7:fd:55:43:a7:86:8b:
73:65:38:82:cc:18:f4:86:95:d5:23:20:da:da:ee:9b:1b:e7:
4b:7c:8e:4a:32:c0:39:d9:ef:bb:ed:4e:57:33:04:24:21:ac:
c9:a9:a7:8e:39:b5:4a:f4:ab:a3:76:af:f9:0a:e0:09:a5:b8:
4b:3f:2b:d2:be:21:97:82:ed:97:14:1f:84:a7:83:fd:f0:64:
cc:60:1e:1b:64:b6:be:57:bb:00:95:e9:78:a2:ec:02:49:7d:
f5:18:ac:76:33:22:db:20:2b:67:83:39:79:40:24:e3:b0:65:
eb:36:c2:8b:b0:79:18:e3:46:e1:70:2c:bb:47:65:28:6d:28:
40:c3:60:73:27:75:a6:15:43:05:34:e7:ad:01:a4:cd:29:96:
c3:72:8d:d4:c3:eb:31:19:1c:2f:ff:a1:5a:18:18:79:a4:60:
d2:7b:4e:90:1a:a8:62:fb:be:5f:60:c4:16:8b:a4:61:ac:1f:
32:3d:b1:3e:40:e5:86:e3:57:5c:ae:ce:9d:e6:e5:a9:c9:3f:
25:d4:a9:85:b6:19:06:47:1e:8b:4e:04:6b:36:85:8b:b7:7b:
b2:25:53:76:f0:5c:0a:04:57:4c:0e:6d:34:4b:65:39:6a:4b:
94:13:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:35 2026 by rpki-client