Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
File: Z8ooyF9TcJI3VX3talTbfEODj98.cer (raw, json)
Hash identifier: WHbpP4BjrzA0gBQHSBMrpdGlxxEOVOf0inGZLt26OEw=
Subject key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC6BC7E1DE1BBD1D40258208D45AA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47910
IP: 193.42.142.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:6b:c7:e1:de:1b:bd:1d:40:25:82:08:d4:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:b1:aa:85:dd:5d:fe:59:d1:66:47:35:e5:
17:37:53:fe:bd:fa:4b:0d:0a:07:2a:15:36:05:73:
25:0e:6f:3f:a1:15:be:e2:8d:32:6c:07:8f:a5:bc:
19:82:be:5a:31:31:41:41:77:e1:7b:0f:df:d6:fb:
2e:8c:e4:b2:54:23:fd:7a:8b:ac:68:d0:86:f6:f9:
b4:c5:38:11:09:5f:95:51:b9:46:bf:08:d1:7d:26:
dd:be:e6:41:e1:e6:64:6b:85:b2:e7:31:86:0a:41:
e0:af:38:99:b9:cf:86:a2:c5:5b:a2:f4:97:4c:f0:
74:99:9f:30:b7:ca:b1:9e:83:02:a4:c7:8e:5f:fb:
b5:7e:92:da:ae:52:59:d1:fa:2d:81:7e:c3:2d:29:
9f:01:b0:ff:10:7c:ed:e7:55:44:4a:73:83:02:ae:
da:4c:1c:a3:73:3c:65:33:ee:58:e6:c2:0f:c0:25:
89:1c:29:aa:e7:25:67:40:af:b6:e3:c0:dd:65:45:
4a:6f:95:b0:13:9c:2b:74:c8:59:24:5e:f0:87:41:
7c:46:19:87:da:20:cb:dc:62:03:22:0f:61:66:72:
15:4c:50:1d:c9:53:e6:27:55:96:4a:44:8f:1a:8a:
cc:1c:f1:fe:40:a2:fb:a7:54:6c:6b:c7:cb:d4:14:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47910
Signature Algorithm: sha256WithRSAEncryption
1d:5b:4f:ef:db:cd:87:56:b1:f3:86:9a:9b:c0:6c:43:0a:f5:
e8:89:61:d9:83:ba:cc:1e:a0:c5:5c:62:0f:ff:76:14:03:64:
5b:b0:44:2e:d6:b9:90:cb:18:18:8d:fc:70:b6:42:fa:d7:9f:
7a:fc:48:b1:63:55:98:41:73:96:00:a9:0f:a8:c9:7f:d2:13:
bf:c2:0d:17:6e:96:2d:ea:09:38:17:97:0e:3e:30:1a:a5:ec:
fc:61:9a:4d:9f:ac:6c:44:5e:0f:7b:34:2f:37:61:2f:a3:d2:
49:f1:82:95:b1:87:7f:6f:03:20:a2:77:2f:07:ee:17:36:33:
2e:6a:96:1d:f6:5f:21:16:1c:67:14:1a:f0:fe:c5:a0:95:4f:
46:1b:49:91:0e:33:8c:87:64:d8:9a:d2:a9:96:04:2a:db:bf:
1e:0b:27:74:1e:8b:fd:88:88:06:aa:45:39:89:64:d6:c4:6b:
de:f0:0e:2e:d8:45:69:eb:ad:f8:c8:4f:86:db:a3:ae:5d:bd:
28:07:b0:74:4f:b1:a3:eb:de:98:e0:df:f5:9a:d3:93:1c:06:
11:9f:ee:9d:b6:a4:9b:e7:b6:70:4e:29:2f:4f:0f:b0:49:b4:
72:db:16:4c:2e:28:ce:19:3a:e4:7b:d4:f7:1a:59:52:8b:31:
2c:13:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:38 2026 by rpki-client