Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
File: SEAyWZVCgEO12QXY0sF8MCuLNGU.cer (raw, json)
Hash identifier: ukbdL6+jPZoIcjxcHt9DiVKsZjpesXuY5Rn58bLSPZA=
Subject key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED2BD25D519A424C708E4EA524D275
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49322
IP: 92.43.96.0/21
IP: 2a00:1638::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:2b:d2:5d:51:9a:42:4c:70:8e:4e:a5:24:d2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4840325995428043b5d905d8d2c17c302b8b3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:8c:a5:d8:f7:bf:0c:2c:b5:f9:44:fc:a2:
c5:26:bd:d0:53:6a:89:48:64:e5:17:a3:4c:4b:c6:
30:fb:34:5e:38:f9:9f:af:bc:5a:72:e3:cb:03:d2:
c0:83:f8:3e:f2:07:d4:1f:c6:7e:2d:59:15:8d:97:
0d:05:c6:80:a9:30:34:24:0b:d9:bf:26:0c:e7:45:
34:fa:85:14:86:d0:31:d0:2c:cc:5a:27:51:9f:5d:
8b:fb:f8:a3:09:c9:db:a2:24:c0:45:64:6c:f8:d4:
92:dd:0c:ea:8c:7e:15:0a:65:3e:f7:94:68:02:5f:
ca:a0:39:0a:6a:ee:96:6c:bb:d4:6a:22:3f:b6:32:
09:6e:a3:60:11:e2:55:22:a9:77:97:37:bb:54:96:
94:c7:e1:52:6c:19:45:62:7a:cd:13:8f:b8:d4:87:
c1:de:9d:e0:7d:9a:39:b8:84:f7:38:d7:f1:48:24:
94:4c:e7:ca:78:46:83:a6:e0:6a:df:1c:96:e0:5a:
46:1a:b7:53:cd:c4:ce:ff:4d:97:bc:8a:7d:dc:c2:
5c:db:c0:0e:35:0b:a7:a5:19:bd:5b:fb:c1:e8:4d:
41:1e:91:f2:7d:37:5c:36:84:f0:27:06:11:e2:2a:
9c:06:f1:f3:1e:3a:67:50:41:c9:36:32:f9:9c:fc:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.96.0/21
IPv6:
2a00:1638::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49322
Signature Algorithm: sha256WithRSAEncryption
0e:f0:7e:fd:9c:92:59:12:df:6e:b3:11:a7:33:c0:3e:e2:27:
96:d2:1e:1f:d1:50:d8:9c:c1:02:bc:40:a8:de:54:47:3d:d6:
3c:c2:31:39:02:c3:68:fc:0c:f4:99:00:75:31:1e:d2:f5:cf:
ba:90:b3:42:2a:f8:54:d1:a0:73:31:14:4d:cf:f7:6e:8e:63:
b2:bc:f3:40:d5:2c:fc:a7:94:c7:3d:7f:ef:39:c8:61:41:25:
5a:42:df:f5:b3:72:9f:d8:4c:77:3e:c8:f3:f4:b3:a1:1c:5c:
96:f7:d8:66:4e:c3:9f:3f:6c:c5:29:1e:b3:d1:56:e0:a8:a9:
84:5e:19:a6:02:08:91:b4:2b:a6:32:f5:e3:86:a4:d3:69:bb:
e6:6c:62:24:32:c2:21:ee:e4:63:a3:51:fb:6d:09:24:15:d9:
8b:26:11:3d:63:40:9a:53:b2:b2:5a:34:98:fd:26:d5:73:25:
58:11:8d:39:bb:db:13:a1:d0:86:d4:e1:13:e2:77:22:6e:87:
d2:d9:96:88:dd:cb:39:f6:9e:fc:58:5d:4c:1b:06:09:ae:cb:
61:2f:30:3d:22:54:37:96:75:3c:5b:f1:03:56:1c:12:9d:5b:
cd:15:e0:d1:37:28:a2:6b:2d:c9:01:e0:1c:3d:18:0a:5d:65:
2a:14:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:00 2026 by rpki-client