Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
File: c-9Luv3HPlPAmdTVLpye_6g3m08.cer (raw, json)
Hash identifier: TRUFsKyfOywGF+O/82hK7NsHwANRr1xEjFK1Y+AofG0=
Subject key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1877733DB9452C78BF37F6B6B17A41F69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Oct 2026 11:41:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218249
IP: 45.67.68.0/22
IP: 2a09:71c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:77:33:db:94:52:c7:8b:f3:7f:6b:6b:17:a4:1f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 11:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:39:92:53:77:35:85:ab:03:81:77:3e:c7:
80:5c:74:4c:eb:97:16:4c:cb:c0:03:ff:41:dd:31:
4e:49:82:4e:52:cd:9a:8c:5f:32:18:26:2d:5c:cd:
e8:30:24:e4:0f:02:ec:cc:44:b8:33:ee:26:ac:c3:
58:34:40:af:9f:6d:aa:14:74:f4:e3:9a:d0:b5:d9:
24:cf:1c:02:5e:04:12:73:ae:fe:2a:c2:87:2d:c8:
b7:ae:24:c5:3c:f3:29:a4:62:50:e8:9b:26:c4:fc:
64:9e:ec:46:4f:5c:35:d3:8a:f6:ec:a2:c4:21:eb:
c0:67:a5:bf:d9:98:25:08:a1:3d:6c:c5:f9:e1:0d:
64:17:c9:ba:37:be:de:e0:a9:3f:66:df:c4:03:96:
69:b9:af:31:a9:8f:c4:d8:e7:a3:27:ec:fe:4d:6f:
7b:7c:0d:e8:cb:69:77:62:97:b6:2f:aa:a9:4c:c7:
46:a8:e0:55:f5:da:07:06:77:42:3c:95:d8:a8:91:
ef:d6:24:95:85:ae:41:de:fd:97:df:f6:9b:f0:62:
5c:ba:d3:6e:51:b3:f1:dd:8d:22:00:fa:5c:56:2d:
3f:09:1d:01:2e:86:92:b4:82:e7:0e:ce:c4:a7:7c:
81:a6:a3:97:b8:d1:ca:95:c8:92:d9:db:eb:ba:52:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.68.0/22
IPv6:
2a09:71c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218249
Signature Algorithm: sha256WithRSAEncryption
9f:c2:d7:67:cb:5d:5d:59:ff:2c:57:3c:2e:c5:5f:f0:16:27:
88:a5:ed:76:ce:0a:d8:24:bb:b6:dc:92:c8:5d:e4:14:3a:a5:
15:8a:59:4d:77:35:83:20:e1:5f:c7:ce:ed:75:bf:e7:c8:02:
0c:71:5c:27:0e:36:5e:90:59:20:77:49:d6:ab:24:3d:ac:a4:
74:ba:0a:e2:8b:2c:21:bf:e9:cf:5f:12:e4:47:e8:8f:eb:4b:
41:ca:3e:99:81:f9:29:3b:48:9e:2f:a8:54:c9:2f:6f:47:e6:
69:a8:8e:56:ae:c8:6b:e5:58:71:7a:7c:c1:ca:79:80:01:5d:
ec:37:70:fe:92:1d:d9:ec:3a:ab:18:85:47:03:89:1b:12:6e:
2d:9c:1a:eb:6c:8f:91:58:99:ef:5c:23:45:44:82:6d:c3:21:
4c:83:8f:87:c3:57:12:39:52:b7:d8:3a:14:28:18:ea:f8:cd:
45:c6:0f:89:60:fd:20:c2:0c:7b:62:89:bd:9f:f4:f0:50:b2:
25:e2:63:d9:8d:16:e7:1a:87:78:55:f6:19:dc:e2:4a:4f:62:
d7:67:ab:26:c7:f6:28:96:7b:2a:ba:67:05:18:9d:2f:4e:1d:
26:b0:ae:c2:f6:cc:2a:a1:04:2c:3a:14:13:46:9d:26:90:f8:
d5:d0:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:54:35 2026 by rpki-client