Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.cer (raw, json)
Hash identifier: gwX1ornVmQXm37YBP+T8bV8qGNJ1JMJW4B+pAwDznVw=
Subject key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA5377B70D05F65BC56C832BD1A6794
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207041
IP: 185.253.52.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:37:7b:70:d0:5f:65:bc:56:c8:32:bd:1a:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c311ede28b92f5c61a912be06039498b23422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:87:0e:32:53:cb:48:9e:47:2e:64:f0:4d:
dd:59:6c:ae:7d:b4:4b:b6:db:a2:01:a8:86:9c:96:
15:21:eb:f0:56:a6:ea:ee:40:8b:39:29:8b:0e:62:
6b:d5:fb:01:6c:69:27:ab:df:cf:ea:8c:41:0c:88:
24:4f:67:91:87:cf:09:81:f6:58:f7:eb:6b:a2:c0:
8e:85:e9:a1:82:04:91:19:00:60:b8:0e:f5:8a:0f:
10:62:cd:60:31:85:b0:8a:89:b2:58:81:d8:07:03:
fe:bb:4b:13:9e:81:b4:f9:43:86:c1:4f:8d:86:24:
e7:40:1e:36:ae:4d:14:9d:36:40:e4:48:47:88:89:
8c:17:36:c2:c9:65:38:45:6d:5e:a9:bb:dc:af:3c:
d6:b8:0d:b8:4b:09:06:df:71:1f:25:85:5e:31:19:
ff:1e:58:d3:42:61:df:82:a6:2e:db:71:ee:70:d5:
ae:c6:85:13:74:1a:d9:2f:24:8a:2c:a9:31:77:21:
4a:d5:9c:98:93:95:d5:80:bb:15:a3:9e:8c:af:fa:
5e:cd:12:6f:30:f3:bc:f1:1b:46:ce:13:04:6a:83:
3a:76:c4:3a:ee:4b:a3:3a:40:63:0e:ab:5b:9e:33:
51:42:7b:48:3c:5e:83:11:76:2c:ea:40:64:08:b3:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.52.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207041
Signature Algorithm: sha256WithRSAEncryption
a4:2a:48:b4:d5:d4:f5:a0:15:ce:7d:72:f7:7d:c7:da:59:3a:
0d:6b:b3:c2:be:22:99:46:d6:31:c6:0d:f4:fe:d8:76:25:95:
d3:77:1a:c9:8c:53:4d:7f:83:db:b7:34:35:6d:d8:7c:2b:e6:
3d:7f:f3:da:2b:15:79:f1:71:31:63:7a:80:02:a4:6c:46:8c:
0e:21:18:e5:fb:ac:57:cc:8a:98:17:94:ec:52:3c:4d:e1:df:
71:c5:49:b7:dc:72:7d:f6:30:a6:fa:2d:03:1b:f9:5b:e3:5f:
7b:35:ff:c7:02:16:e6:cb:ca:ab:aa:8a:59:06:07:45:b2:3f:
ef:46:72:8e:6d:7b:32:05:02:6a:c7:df:8b:f8:ac:7e:21:fb:
ee:cc:1b:e6:46:70:b3:f0:73:e6:97:b0:41:0d:f2:9d:f4:dc:
99:a9:f1:0b:1d:ac:85:53:2a:87:48:27:a2:12:f0:6c:30:a6:
05:8a:50:52:8c:23:52:c4:e4:11:cc:05:52:2b:c7:0e:22:cd:
16:67:af:db:00:1d:e5:31:65:0d:02:9b:fc:41:48:08:cb:77:
cf:0e:97:73:df:d3:72:47:1a:d9:91:f7:2b:b7:07:8a:f8:ef:
3e:c5:53:17:4a:7a:9c:f2:1e:83:95:ad:f5:77:a6:36:28:30:
c1:1f:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:44:04 2026 by rpki-client