Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
File: nPzO-NLBbCCuW42kMUJ3_sqt09c.cer (raw, json)
Hash identifier: geK8uH0vC+mxiKILHuls4+CtA8FAxjLefagou3Wdjwo=
Subject key identifier: 9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE3845215A6E6BD231A01B6C3D7046
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39793
AS: 49601
AS: 58307
IP: 91.227.60.0/23
IP: 91.229.56.0/24
IP: 91.229.182.0/24
IP: 91.229.185.0/24
IP: 91.229.210.0/24
IP: 185.189.124.0/22
IP: 185.226.60.0/22
IP: 185.252.96.0/22
IP: 193.162.107.0/24
IP: 2001:7f8:6b::/48
IP: 2a0b:e680::/29
IP: 2a0c:3e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:38:45:21:5a:6e:6b:d2:31:a0:1b:6c:3d:70:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:2f:00:8d:79:37:cc:a8:5a:7b:96:e2:3c:
c8:39:32:7f:03:34:e3:65:6f:27:39:81:25:7f:52:
e6:af:cc:28:d7:4f:e9:12:5c:03:74:06:bd:ef:a6:
c2:cd:2f:5c:de:3e:1c:b5:3d:fa:96:12:fd:c5:56:
80:89:67:17:b5:58:75:55:6d:e5:97:9e:52:1b:11:
3d:3e:fb:52:78:3f:36:7b:66:d0:15:64:52:ef:f9:
18:14:a7:10:98:da:f9:33:c8:30:ea:d5:61:54:55:
1e:1c:ce:81:62:ad:19:10:8a:ff:b4:67:c3:e7:c1:
e0:37:83:fb:6f:8c:54:3b:84:8a:a3:41:cf:d8:39:
db:31:81:68:d8:46:ce:5c:8d:a2:0c:ef:ca:71:f9:
15:e9:31:88:f6:c3:63:3f:79:f8:ba:26:41:13:4b:
ab:94:c0:a9:5a:fa:66:8d:5a:19:58:79:ba:8f:4a:
79:d8:ea:d1:c5:7e:d3:44:00:3d:51:a8:d3:11:24:
8e:b3:1e:58:d3:0a:83:f2:76:92:ac:67:d9:cc:58:
1a:03:9c:70:61:03:29:e8:bc:50:b5:5c:ea:e7:3b:
e8:86:e2:5a:d1:ba:0d:02:bc:35:35:1d:ba:08:16:
03:58:06:20:7f:38:ca:ee:a4:3c:ee:98:58:5b:8f:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.60.0/23
91.229.56.0/24
91.229.182.0/24
91.229.185.0/24
91.229.210.0/24
185.189.124.0/22
185.226.60.0/22
185.252.96.0/22
193.162.107.0/24
IPv6:
2001:7f8:6b::/48
2a0b:e680::/29
2a0c:3e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39793
49601
58307
Signature Algorithm: sha256WithRSAEncryption
9d:76:9f:d6:f9:24:ed:0a:0e:2c:6f:62:02:17:d7:2e:4c:76:
a9:a5:06:00:50:4f:d9:77:ab:ef:d4:4b:09:30:f8:f3:0e:94:
a3:78:01:e2:f0:f3:66:4e:22:4c:31:7c:f3:aa:31:a5:3a:38:
ce:36:3a:1f:f5:13:f9:20:25:d2:70:28:09:47:bf:0c:e6:7b:
25:be:aa:1a:7e:7d:b5:d0:b1:11:83:9b:8f:fd:90:bb:cc:29:
35:9f:ca:88:41:e8:fa:02:0b:a5:3b:f8:3b:a3:46:49:52:5f:
78:a6:0d:1f:86:f7:f8:49:7a:cf:28:04:48:49:23:2d:ae:38:
f3:ea:b6:06:c6:ad:92:df:b6:07:78:9d:a1:53:76:cc:9f:b3:
ce:df:b2:42:41:37:53:54:52:a4:37:2c:99:24:ca:60:e7:ea:
a8:c4:8b:6c:ac:04:14:e5:64:ba:6b:8d:6b:65:69:f8:d5:fc:
85:fe:22:86:1e:df:32:90:bc:6b:c4:52:27:fb:1d:a9:e6:65:
73:4a:26:e7:68:ea:b1:3b:da:17:cf:ee:56:c9:73:0d:09:15:
af:e1:fe:b8:a6:28:10:a0:68:4c:ac:9d:e2:7f:b6:1c:1c:96:
b8:cc:fb:12:b0:a9:4d:45:9f:98:d6:aa:cf:3e:8c:6a:26:5f:
b5:21:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:11 2026 by rpki-client