Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
File: S2HMijZcxAOCox2tVPbLcj9YdYo.cer (raw, json)
Hash identifier: lie4YTp5XyL6aHUjwWVwzNvfC2FSd+Xk4vQtQ52iGV8=
Subject key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E49E504F3749492E9A0C4A7BB3AC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42339
IP: 46.28.224.0/21
IP: 77.72.120.0/21
IP: 185.22.204.0/22
IP: 2a00:60a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:49:e5:04:f3:74:94:92:e9:a0:c4:a7:bb:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:9b:9f:2d:e8:84:2b:1e:59:1e:a6:0f:07:
08:9c:1c:43:ea:64:18:e5:bc:0c:bd:d9:b7:51:f0:
2d:64:f1:10:c7:c4:8e:51:9a:34:f1:53:c8:47:31:
29:02:9c:72:52:ce:92:1e:aa:f7:13:95:8a:2a:8e:
50:03:35:b2:d0:bb:27:75:10:28:46:20:ff:e3:a9:
0a:53:cd:52:9a:76:36:50:86:89:9a:4d:8e:42:1f:
e2:2a:27:37:97:52:18:3c:b3:5b:78:fd:68:e2:a5:
f0:8d:09:f5:65:ad:12:de:7e:ec:a8:be:50:11:92:
35:3a:68:8d:95:80:ee:d9:5a:a4:ae:a1:0d:22:6f:
70:9d:a4:2e:00:79:70:88:53:5b:d0:ab:e1:a5:06:
e1:8f:16:14:1d:9d:0b:e0:ac:c7:5b:c8:a3:c5:e2:
13:9b:bf:bd:d5:ca:0e:17:95:86:49:47:50:0f:90:
79:15:d1:11:68:64:f1:29:c1:1f:e2:e1:11:e9:23:
7f:f2:c5:68:cf:fb:e3:71:3b:13:3c:96:39:ac:44:
89:66:d9:98:9d:a6:17:9e:e3:87:e3:bc:0c:c4:ff:
91:57:ee:85:e5:28:70:85:b5:c5:cf:18:02:d0:67:
f1:55:56:b2:5f:6d:87:ab:d8:b6:25:ff:0d:6b:89:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.224.0/21
77.72.120.0/21
185.22.204.0/22
IPv6:
2a00:60a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42339
Signature Algorithm: sha256WithRSAEncryption
09:e1:6b:d0:a7:55:56:93:73:96:9f:ca:7a:d7:ca:2d:89:48:
15:61:bf:38:a5:c6:2d:00:b6:1f:26:97:12:9a:2b:d9:75:c0:
7c:84:e6:50:f6:3f:3d:01:6f:a6:6a:71:21:d3:71:df:55:60:
c5:d8:fa:f2:af:14:00:aa:8e:f5:0e:11:49:10:21:4c:85:7a:
5a:a9:86:fe:f5:9b:71:67:f3:b5:45:5a:25:2e:ec:6e:e1:e1:
65:fc:cb:f3:6b:c4:b3:04:5a:dc:b1:b8:01:7d:25:e7:c2:7b:
75:6b:ac:00:67:eb:ee:0d:f9:99:9f:4d:05:20:15:06:34:b7:
8d:10:63:a1:d2:43:2e:db:fd:57:f7:3b:5e:a1:a7:f7:ff:65:
99:67:0f:92:12:f1:ad:78:2c:f4:e9:1e:eb:ba:e2:bf:e1:14:
35:26:16:ed:20:3c:a4:93:c5:75:79:d0:5e:65:65:26:f9:20:
8a:f8:33:76:da:93:a3:31:17:40:48:fe:b3:0b:81:e6:2e:4e:
ba:7d:e8:58:8c:5e:58:d2:4e:93:25:61:c2:dd:9d:88:0c:53:
0a:ef:06:13:69:69:45:c0:c8:48:94:f4:b6:76:1f:f3:7a:42:
c8:44:7e:1c:cd:ec:04:92:b8:34:70:da:86:26:24:2a:b8:4c:
e7:2c:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:27:15 2026 by rpki-client