Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
File: SBL_SF_9eUppSAeK_k4Hav5hdjU.cer (raw, json)
Hash identifier: 5dCh9YPRRNIbcoMgmG3MqYX2TtMM3360qrF+eI8NAj8=
Subject key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E38469037E9CFF494F5A35B84C595D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56559
IP: 147.78.96.0/22
IP: 167.150.160.0/22
IP: 185.149.188.0/22
IP: 2a10:b440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:46:90:37:e9:cf:f4:94:f5:a3:5b:84:c5:95:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4812ff485ffd794a6948078afe4e076afe617635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:50:8b:ce:6f:0a:a7:41:ff:d0:a9:db:5f:
5f:6e:6d:34:0d:b5:ae:4a:cc:79:63:ae:68:d6:0e:
3a:60:fe:1a:68:c1:2f:e7:68:53:47:77:65:68:a8:
0c:2b:2b:16:bb:4b:5d:f4:69:aa:ae:27:5e:29:10:
09:fb:15:60:b5:6a:21:7c:18:c3:72:f8:c6:b1:a6:
21:5a:71:91:bc:c1:eb:e5:41:91:25:0d:3e:9b:a7:
3c:2a:a6:52:ee:ad:5d:a9:b7:db:fe:72:72:42:d8:
25:ad:76:35:1e:e0:64:aa:68:9f:eb:04:d3:41:e5:
3b:3e:21:e3:38:61:52:0f:46:09:07:8d:a1:9a:8d:
60:ce:cb:13:2c:b6:df:56:60:5b:54:99:56:27:97:
af:22:78:96:e5:bf:58:65:68:13:ed:79:94:f3:50:
26:c0:c6:74:5d:c4:1b:54:41:8b:11:6b:c5:3d:07:
34:e9:5b:d3:52:5a:75:34:c2:23:24:47:8b:13:6b:
74:2a:e1:67:c1:86:36:90:41:1d:82:c0:9d:f8:a3:
33:9e:18:80:0f:e6:ad:4a:9b:a7:fa:82:76:70:b9:
5a:06:2a:5b:73:53:b6:6c:b3:e3:d8:ed:cb:3d:8f:
f0:d8:65:fd:81:5d:1b:46:7b:6d:29:da:f9:d6:7a:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.96.0/22
167.150.160.0/22
185.149.188.0/22
IPv6:
2a10:b440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56559
Signature Algorithm: sha256WithRSAEncryption
78:cf:60:49:dd:f6:e4:3e:11:c5:5a:9e:c7:3a:f6:0c:6b:ad:
4a:f2:76:94:c3:2a:07:dd:75:ec:7b:e2:e5:56:fc:f1:b8:ba:
c2:d9:a6:64:54:31:44:da:64:4a:3a:af:82:59:5c:30:1f:a0:
7d:a4:b5:49:f0:06:25:cf:11:80:cb:8f:93:53:42:10:ee:7f:
f9:d1:2c:bb:fe:d5:27:58:2b:22:5d:cf:0d:59:73:01:4c:c7:
a6:d2:c4:18:4a:95:3b:eb:ed:f3:44:0b:b7:7b:dd:8b:0b:2e:
9f:66:af:b6:33:0b:d7:ec:b5:a3:b6:57:11:6d:a4:79:30:1e:
f9:ec:7b:f0:1f:bc:9e:e5:de:85:95:7e:d3:8e:12:68:d0:30:
73:6d:35:db:0e:33:c4:33:fe:44:e2:e3:76:46:38:a2:1e:aa:
17:41:b5:e5:c8:21:49:e2:eb:6f:a8:ae:a1:47:5b:07:48:db:
37:6e:17:48:fb:53:ee:ff:30:8a:be:69:bb:ee:dc:0c:4c:83:
5a:b2:09:26:f4:e0:2d:df:44:34:bb:89:85:36:1b:98:3e:d7:
32:16:87:dd:76:c1:a3:30:22:ef:9a:36:44:72:a9:b3:e8:78:
c6:4a:26:84:0f:69:5a:29:c5:77:64:33:1d:59:bd:a6:b6:3e:
a0:6b:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:00:36 2026 by rpki-client