Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
File: b9O3_1LTsZJWeqzKTZuGInQbf3o.cer (raw, json)
Hash identifier: RLc46O5flfi8y5x6OkC7IEkRGLN/vw9+9B/tva55Zv4=
Subject key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAD6C7DDD0FA33A97972BD85DBDF20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31454
IP: 194.102.86.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:d6:c7:dd:d0:fa:33:a9:79:72:bd:85:db:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:8f:0c:c3:ea:c8:69:81:4a:dd:a9:ad:c9:
0e:25:0d:db:10:44:e1:7e:4a:dd:23:ba:fa:1f:64:
0c:6c:3b:e1:dd:7a:d7:04:1a:e6:af:01:d1:da:c3:
f2:1d:fd:41:00:ab:c7:2c:b1:91:4e:5d:b8:ae:ad:
0f:29:2a:e8:72:60:8a:87:d6:b1:ae:41:82:71:12:
66:2a:83:ce:00:bb:03:e3:3c:8f:f1:76:7e:99:f2:
ff:0b:5f:5b:8d:d7:46:66:4a:1b:96:47:05:ab:8a:
e0:6d:52:64:b6:2d:80:77:a0:95:7c:d2:d6:da:47:
96:1c:73:d2:25:73:12:5c:ae:89:38:25:f7:7b:a1:
39:3e:6c:12:36:e1:12:9d:20:f2:fa:f3:24:56:fc:
27:3f:ae:85:67:7a:ce:e1:1b:2f:04:6c:43:ba:7f:
f6:8b:9a:c9:9e:69:2d:ca:2d:c2:4e:07:26:67:23:
66:1c:bf:af:f6:b0:3c:b1:59:b5:77:45:9d:bb:7e:
dc:4e:30:9f:45:90:d6:7d:80:e4:d1:99:51:e0:b9:
03:48:ae:f5:61:60:a3:01:fe:31:1b:a0:e4:9e:17:
15:af:bb:ee:79:7b:f7:88:b6:70:56:7f:2a:27:a7:
a7:9f:3d:d2:91:19:85:be:9a:f8:82:c3:8a:f2:99:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.86.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31454
Signature Algorithm: sha256WithRSAEncryption
8f:14:78:cc:e5:75:97:6c:be:7a:72:75:95:d2:6b:12:e4:bb:
73:e3:9c:3e:cf:ac:11:6e:5d:a1:8b:15:99:96:bb:5c:fe:2e:
5e:90:8d:07:b6:d5:df:fa:66:49:a8:cf:b4:43:67:61:18:5e:
f7:c2:66:82:ac:67:b4:cb:3c:fa:03:2e:74:84:df:56:ee:d3:
f5:32:95:33:85:8c:2e:59:d2:4e:be:64:6e:58:ad:e2:ed:8f:
1e:b1:57:6d:34:f9:a0:7e:4e:ce:34:07:b2:3d:f0:49:f5:bf:
9a:4d:a4:9f:95:7e:da:1d:6b:3c:8a:04:6c:48:c9:47:28:20:
89:a3:a7:29:89:ee:b4:03:77:21:16:4f:a5:e3:b2:20:75:9d:
dc:a7:e8:95:2f:3f:b2:4f:22:27:1c:67:fd:ae:5b:c6:29:6a:
d2:dc:64:4b:5a:2d:84:d0:d1:92:6a:7c:a5:3a:3a:cb:81:8e:
a2:07:12:ac:30:84:bc:29:48:11:28:9e:31:28:b1:c1:a9:57:
0a:b2:12:fd:c0:35:93:39:a8:7b:1b:84:d5:0f:a2:71:e4:86:
99:29:b3:e9:c8:06:46:65:51:bd:9a:b1:c0:b8:60:f3:c1:ac:
55:8c:3d:26:90:56:9e:18:31:46:10:f9:ba:8f:74:2d:f2:b1:
98:6f:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:11:13 2026 by rpki-client