Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.cer (raw, json)
Hash identifier: TQqQWggS8WJbjI8IKPE2HvGRfWjufsfFwr/21YwyO34=
Subject key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA3BB5C0EB666E45FF5E73E3867294A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:18:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50578
IP: 91.238.50.0/24
IP: 2001:678:260::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:bb:5c:0e:b6:66:e4:5f:f5:e7:3e:38:67:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:4b:db:51:e3:20:cc:19:05:34:1b:89:e1:
86:3e:ee:f1:fa:65:1b:4d:40:01:df:68:d8:f5:f1:
37:32:f1:08:2e:ee:e5:73:52:c1:07:af:f0:3d:78:
c3:67:09:10:2c:97:43:db:15:43:e3:7f:ee:bb:fd:
a3:b8:52:f0:30:44:6f:d9:ad:36:35:e7:10:14:8d:
ef:f3:a1:3f:f7:eb:52:70:21:4b:ca:ee:a8:ca:a9:
c4:80:68:55:55:a0:f4:de:55:98:dc:06:df:69:75:
a3:48:3c:e2:bb:04:07:81:52:bd:7f:53:d0:ea:1a:
2b:7e:08:65:db:12:09:ca:4d:7f:5a:8c:6c:bc:87:
6d:c7:f0:df:21:df:83:4f:77:5e:dd:3d:9d:b9:b7:
30:4f:42:43:50:3b:81:13:5b:f9:ad:4a:85:9d:bd:
7c:e3:43:ce:78:09:3f:9b:89:da:b0:bc:1d:5e:8a:
b3:71:0d:14:c5:88:7f:f5:1f:6e:dc:a0:8f:72:a5:
3c:79:29:0f:0b:7a:90:27:a8:bf:3e:25:48:be:b8:
00:2e:ae:3c:09:8f:d9:09:5e:6d:d9:17:ea:fc:4c:
d7:7d:fa:12:f6:02:a7:d2:5f:f2:11:91:e1:d5:ed:
3d:cd:f8:71:6c:22:0b:71:2d:8b:88:0d:f3:6f:88:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.50.0/24
IPv6:
2001:678:260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50578
Signature Algorithm: sha256WithRSAEncryption
91:15:ab:d3:9f:2e:14:e1:bf:ed:6d:f3:46:5d:fa:85:6a:1a:
70:69:d7:39:13:58:89:91:99:92:c8:c6:c4:c5:8c:aa:05:37:
b9:96:5a:99:54:38:5c:f4:ec:8c:40:d0:de:eb:7e:74:6a:d9:
bb:e1:5e:6e:f6:e5:e9:01:0e:cd:ff:43:61:02:d7:da:16:c3:
7e:12:4b:62:30:5c:14:db:6c:99:88:b9:3e:56:5f:74:b0:cb:
bc:b2:cc:11:fb:c6:a9:3b:a8:10:d6:94:05:86:c0:6a:3e:c9:
73:44:b0:d4:34:06:4b:ef:71:bc:23:32:35:68:83:f6:2f:00:
d1:7e:9a:a2:c0:12:ff:0e:43:a0:f8:47:0b:82:72:91:46:d3:
51:bb:06:9e:c5:c4:9b:86:95:4a:39:26:d9:19:c2:66:96:b3:
5f:92:eb:12:db:ea:8d:53:5d:c3:fc:e3:af:b9:dd:d2:94:33:
09:5f:d6:1a:8f:56:c1:50:5a:38:bc:57:ee:e0:ee:af:0f:0f:
08:04:88:c5:3e:c6:3b:ce:21:89:5d:16:30:fb:ff:3e:a7:e6:
04:ce:45:9a:3b:7c:11:b0:32:72:5c:c5:cf:c7:a3:45:f8:18:
06:f4:e1:73:dd:06:57:7b:66:ba:7a:b0:0a:58:68:c9:89:16:
c4:2e:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:52 2026 by rpki-client