Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
File: kziECSasc-rVthh5GeiPEAMimco.cer (raw, json)
Hash identifier: 6nOmJi0RIvq4qMs344rjQ9FiDBrSq4fSUg1M8amQVvM=
Subject key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F4147E5845E6D712816798B82C6395BD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jul 2026 10:30:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34696
IP: 5.42.208.0/24
IP: 45.148.72.0/22
IP: 81.172.101.0/24
IP: 185.118.188.0/22
IP: 217.197.111.0/24
IP: 2a0d:340::/32
IP: 2a0f:8c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:47:e5:84:5e:6d:71:28:16:79:8b:82:c6:39:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 10:30:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9338840926ac73ead5b6187919e88f10032299ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:20:57:ce:9b:16:22:db:07:d6:38:4b:9b:
df:01:23:9b:ec:cd:61:58:cf:56:29:b2:27:d3:ed:
19:a0:71:05:d2:3e:dd:2a:f4:b6:73:24:59:7e:8e:
07:19:8d:bf:55:d4:5b:4d:86:b1:56:87:28:4c:7d:
4b:5a:e7:63:a4:56:21:5f:8f:ac:82:22:6a:8c:e5:
3c:cc:bc:91:ca:80:fb:19:6c:4e:49:1e:55:d1:1e:
b1:ae:b5:1b:df:7d:67:9f:19:c5:72:d9:48:dd:f2:
9f:63:5e:88:fa:43:23:e5:7f:7f:e9:65:7d:83:3b:
a5:10:37:bf:e5:92:77:eb:e0:cd:cf:fa:46:9e:f2:
b1:13:85:1e:5e:89:df:4f:ac:44:7d:6e:7a:08:fe:
a1:05:64:fc:34:3b:56:a6:a1:43:6f:12:1c:62:1e:
ed:cc:97:41:56:a3:68:57:d4:26:c3:37:e7:4d:b0:
c1:c9:aa:96:65:6e:c3:54:ae:56:db:b0:86:db:51:
1c:b1:65:1e:e7:eb:3f:b0:20:3e:a3:20:e4:96:f3:
34:ef:53:6c:dd:30:3f:5f:fc:1f:da:80:84:bd:26:
d2:b6:9e:3b:6f:4e:e6:2f:a5:a6:04:61:92:f8:99:
4e:6a:8d:b8:d3:68:72:f2:e7:24:c3:ef:9c:f9:94:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.208.0/24
45.148.72.0/22
81.172.101.0/24
185.118.188.0/22
217.197.111.0/24
IPv6:
2a0d:340::/32
2a0f:8c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34696
Signature Algorithm: sha256WithRSAEncryption
b1:d5:b1:a2:06:be:f8:dc:c8:fa:f4:b8:bc:89:b2:f0:be:f6:
83:58:d0:98:cd:6d:d5:57:19:c4:c7:23:d8:80:e9:1e:d1:e6:
ed:c4:b2:be:bf:79:fa:53:5f:f6:80:55:bb:fc:80:69:73:d6:
a5:3e:fc:a7:b4:9a:bf:44:52:6d:4b:4b:31:d6:b6:bd:6b:2e:
93:3d:85:07:53:e0:6b:4f:25:8e:00:3d:40:d6:52:e1:15:8d:
36:03:5d:e8:11:ec:24:42:f0:84:73:b9:b0:3e:83:10:35:0a:
b3:04:8e:3a:e7:17:b9:28:b2:81:87:bf:39:de:0c:ce:3d:33:
71:e2:a9:ad:d0:25:2d:06:4c:35:a9:a5:73:df:3c:57:2b:69:
33:5b:52:17:ef:85:b6:27:61:16:a5:55:0e:9c:9f:af:ac:a1:
90:fa:1b:79:fa:a7:b0:f6:30:ce:50:6c:6f:81:bc:91:b9:22:
1a:be:3f:eb:43:ff:f2:f4:be:f0:34:4d:a6:6b:24:41:d2:ce:
41:a4:62:55:18:a4:25:84:c5:ce:74:8d:3c:7c:1a:6b:52:6a:
18:54:be:3b:21:cc:4d:ce:29:81:d6:79:6a:ae:90:f9:3a:db:
be:7e:6f:b6:7f:a7:66:3b:c7:48:59:52:6a:76:f5:69:5d:ba:
f1:6e:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:03 2026 by rpki-client