Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
File: RN9Py46lHhjSkIBcj1Dw30NA29U.cer (raw, json)
Hash identifier: Xl+nKsuq1vOdgcy7OcUl3r+L0CmGQdy1HbFkUDuDQDw=
Subject key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EC0557F4877853B609EDC2BEBD708F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:17:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49747
IP: 146.19.1.0/24
IP: 146.19.238.0/24
IP: 188.64.141.0/24
IP: 193.56.182.0/24
IP: 193.200.206.0/24
IP: 2001:67c:c6c::/48
IP: 2a14:5f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:05:57:f4:87:78:53:b6:09:ed:c2:be:bd:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:30:48:31:b1:6d:e7:9d:56:9b:a3:15:2e:
da:42:2d:d2:45:48:f8:85:73:1c:a5:41:96:05:68:
53:47:7e:ec:57:43:32:61:13:cd:2d:94:3c:84:1e:
10:f1:55:c9:0b:3e:90:92:f6:82:81:27:bc:c1:74:
53:bc:66:e4:f7:84:f7:eb:78:ff:ed:4e:36:92:23:
f6:04:e4:aa:5d:47:0a:12:a2:c1:fc:b1:59:40:ae:
29:6f:6b:ba:58:6c:46:27:26:34:2f:8a:1f:90:dc:
9a:ac:2d:22:7d:a1:f8:0e:1e:e2:e0:1a:ec:41:e6:
69:7e:ec:c1:52:77:cd:ac:1c:34:92:87:03:4a:cd:
97:3f:e4:3d:0f:ff:75:2a:0c:8b:d1:fa:fb:a9:9a:
1b:03:79:cc:dc:06:fa:80:d9:30:de:d8:e0:36:04:
64:8b:29:76:09:e8:43:52:ff:f9:3f:8e:4c:2d:d3:
06:0b:cd:67:d3:52:30:b4:46:a4:15:2a:b6:63:f1:
ba:bd:25:2a:27:61:9e:6e:0d:25:17:80:03:94:69:
55:61:94:fa:17:39:5a:5f:80:9a:e6:97:48:1e:cc:
53:ca:9e:b3:41:2a:7d:7e:4a:e4:41:fa:73:3a:43:
bc:ad:af:77:c3:ba:7e:99:34:88:13:bc:c7:bc:83:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.1.0/24
146.19.238.0/24
188.64.141.0/24
193.56.182.0/24
193.200.206.0/24
IPv6:
2001:67c:c6c::/48
2a14:5f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49747
Signature Algorithm: sha256WithRSAEncryption
2e:57:19:4c:e0:6d:da:fd:0c:a4:9a:c3:d9:30:e1:47:03:aa:
da:21:22:1d:07:42:2e:95:aa:5c:f5:fe:e4:60:43:c5:24:07:
69:92:3e:82:97:ff:5c:1a:0f:a6:68:0f:32:a8:7c:ce:01:70:
6d:f5:44:29:f0:77:19:bd:6e:ab:23:36:df:fd:3a:32:fe:9b:
85:c3:76:b3:11:d1:1a:f8:d5:f9:21:34:6f:6f:92:e1:8d:1b:
bc:3b:aa:a4:8d:8c:ea:c7:5c:4d:e2:5b:1c:21:13:b6:50:41:
89:20:59:1f:2e:19:96:07:4b:ac:46:13:5c:b3:e0:84:03:94:
8d:b8:9c:37:c7:a0:b1:5c:07:ac:45:4d:ec:1d:cf:02:d1:c7:
19:c8:d8:13:d4:f1:8a:78:c5:86:84:3e:a1:c9:a7:c7:8c:6a:
1d:e1:99:fd:77:ca:07:18:2c:1d:57:65:1e:f4:b2:82:cd:79:
aa:b8:df:91:5a:15:af:41:0a:4c:24:a4:29:88:c5:9b:b4:2d:
1a:4c:ff:91:c8:4d:2a:df:11:cc:bd:10:d1:2f:1a:6b:15:ad:
77:7c:af:a0:f1:82:4e:7a:b1:f8:3b:eb:1f:f8:72:35:18:2b:
c4:be:dc:41:95:76:96:bd:8a:a9:a1:e5:ab:0f:35:7d:4f:28:
ce:6e:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:06 2026 by rpki-client