Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer (raw, json)
Hash identifier: z3zhX1XqIV5mE4V+Us51dzpuKRWSA/pOSmylUoKMweA=
Subject key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B18C4DFB1DE6F5D526B4D2DE842A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51305
IP: 195.226.198.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:18:c4:df:b1:de:6f:5d:52:6b:4d:2d:e8:42:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:4d:77:56:b6:74:98:dd:e1:39:c2:97:a6:
86:c1:b7:c2:e0:d2:9c:2d:30:15:de:f6:02:47:1d:
b4:57:fe:cf:76:41:dd:7e:e4:32:dd:0c:35:88:cd:
0b:e0:fe:88:7c:ca:f5:f7:f6:02:dd:c3:71:fc:e3:
e9:cb:60:73:22:74:cc:65:15:fc:e5:50:34:b2:ce:
4e:40:4d:c7:86:38:cd:e2:70:9f:44:d9:d2:4e:ee:
bb:c4:4f:70:31:4e:e9:bd:16:a0:fd:f5:fc:88:52:
5f:e6:41:b3:2a:de:02:d7:83:5d:de:4c:70:9a:0c:
a6:e3:e9:34:c7:08:0c:2d:3f:8d:04:19:5a:04:be:
8c:3a:a8:37:46:5c:50:33:86:6a:8f:d0:68:e7:52:
57:11:be:87:98:e3:3b:57:74:de:4f:fd:db:fa:07:
48:5b:10:c9:c9:c3:64:66:cf:70:85:b5:dd:09:05:
cd:7d:80:ac:3f:0f:32:6a:fd:c5:6f:4f:f2:5d:d5:
37:b5:26:43:f7:12:15:db:51:ac:5a:5c:a7:92:0b:
12:d5:f6:0d:b5:ef:c6:1a:ce:33:2f:17:f8:89:b9:
be:cd:30:64:31:84:a8:a2:8a:7d:3b:7a:22:c3:ff:
31:b4:16:e5:cd:9e:7c:56:2b:54:14:c5:19:84:8c:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.198.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51305
Signature Algorithm: sha256WithRSAEncryption
51:4c:10:c9:ff:64:cd:44:16:8d:e5:39:a5:eb:88:e6:9f:e3:
3c:ae:47:6b:ed:ed:32:75:d3:19:7b:23:bb:83:3d:94:67:6a:
54:e2:77:1a:92:83:fc:9c:ab:f0:60:5e:18:0e:a8:70:d8:6e:
98:e0:bf:44:90:43:cb:27:67:08:8b:e4:77:c2:f6:74:12:27:
9f:08:ad:91:c2:ec:08:3e:2f:77:d2:8e:ca:90:d2:99:c1:be:
5f:e5:d2:df:68:af:bc:82:d4:24:66:51:7b:b6:9d:f4:dc:46:
d5:f1:3a:a1:82:24:19:39:52:6f:05:8d:2a:ef:37:bf:bb:a9:
57:05:a1:b8:e3:8c:17:e9:0c:68:70:6e:42:7d:20:2b:4e:a0:
ff:07:11:47:e1:1b:15:50:dd:b1:cd:de:38:7c:ad:33:61:48:
8d:ae:7c:da:17:d7:69:89:75:63:0f:66:4d:2a:66:39:a4:cd:
1c:84:67:de:51:26:f7:d0:50:6a:bc:98:fa:ce:25:d2:17:fe:
4b:88:49:2f:40:e3:05:15:12:d1:2c:61:c0:5b:b6:f3:76:97:
ef:5c:88:c2:24:64:8e:8a:a2:f5:ba:9c:1d:0d:60:b7:9d:86:
a9:cb:31:6e:7e:c4:ca:fe:eb:ce:79:85:ad:93:9e:56:32:7d:
41:40:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:41 2026 by rpki-client