Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer
File: TCo9adv570f1kQnH9rIwKq8tsLw.cer (raw, json)
Hash identifier: /Hkt8LYmzGfXap2WQBmvUmwVRBdn5c5Z8vgY3Qqv5Hg=
Subject key identifier: 4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EACA4CD5D8695DD982C3EDAAC0E3D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205258
IP: 208.122.23.0/24
IP: 2a0c:a200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ca:4c:d5:d8:69:5d:d9:82:c3:ed:aa:c0:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:05:a6:4d:fc:80:3a:46:23:40:95:db:64:
e3:84:c7:2c:16:b6:4c:ec:b1:f1:ca:d1:cd:f5:3c:
e0:f7:8d:4f:0b:29:f0:7c:17:b9:a3:dc:68:71:f6:
f1:66:94:d7:6f:41:b5:17:fe:03:9d:f6:68:ba:0d:
fe:2b:74:5e:8f:8f:a8:a6:4c:9b:ff:ac:07:d0:a0:
1d:20:74:97:c5:22:ef:38:59:63:bf:71:ea:6e:65:
e1:78:59:28:8f:77:c1:c2:2e:b4:6e:a7:bf:ec:74:
bb:47:f3:57:b9:8c:24:31:fe:4d:60:93:5e:f8:d4:
51:32:41:eb:1d:db:ab:11:8f:9f:0f:cc:a0:25:0e:
7b:58:0d:79:38:2b:3f:15:98:b5:d5:9e:6c:ce:0a:
04:90:57:33:e4:88:44:cf:b3:00:03:f3:11:2b:c5:
b2:2c:8a:cb:0c:5f:4b:7f:21:9d:51:e0:56:c3:ec:
29:b7:58:db:45:7a:63:75:32:9f:48:a3:7e:68:78:
96:bb:b8:36:83:e9:eb:56:0e:63:2a:65:47:55:eb:
7b:71:e7:90:ef:2b:77:c5:b3:a0:aa:45:1c:bc:a1:
11:48:4f:7b:18:77:fa:7c:17:6e:52:67:71:d3:05:
0e:94:a1:28:d0:36:a0:84:9f:e6:72:13:98:fb:15:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.122.23.0/24
IPv6:
2a0c:a200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205258
Signature Algorithm: sha256WithRSAEncryption
79:a2:a3:1f:ed:9c:01:6e:c4:57:5b:93:78:c6:21:a1:0a:fb:
63:24:f9:db:fc:d0:1b:d3:ca:6b:5a:30:2d:4d:f0:d7:71:01:
3c:2a:42:c6:80:2d:b5:e2:bd:4a:1a:89:eb:56:b3:cb:2d:5c:
a6:38:45:b3:cc:62:3a:dd:a5:c7:e8:d6:74:9b:7e:fa:3a:24:
1c:be:02:f7:f3:36:4e:2d:b6:1b:b8:62:80:3c:9c:7d:b2:ec:
38:50:a4:32:ca:a5:91:e1:48:af:c2:fd:74:bc:32:1c:63:32:
d9:d4:97:c7:b5:e6:0e:d7:c2:64:2b:b3:93:c9:55:ad:3d:2c:
22:c9:36:37:5a:9e:9a:94:0e:84:2f:8b:e3:84:93:eb:ea:45:
dd:8d:32:55:4e:f0:85:3d:e1:e6:09:cb:b0:3b:e3:8e:10:ee:
68:0d:e6:9e:21:bb:66:1a:df:9f:1a:64:e5:58:e3:19:4a:bd:
22:bd:e1:02:a9:50:b0:91:25:16:d6:89:8d:c0:60:01:be:68:
95:db:4b:ca:df:6e:c2:39:79:39:cd:d1:6a:91:38:43:e0:01:
a4:96:e7:bd:b4:36:bd:31:11:95:5b:cb:fc:0e:a0:df:32:3c:
c3:84:fb:2b:59:1e:a6:aa:11:c4:43:ff:8c:a6:14:26:4c:d9:
c8:7d:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:15 2026 by rpki-client