Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
File: rSX4k9NuB3Dley0M13QKKRtQVVo.cer (raw, json)
Hash identifier: HWa4tjd+Z1XufnaOgHnN0CjTVon4bzkLPV7OC/qLcDA=
Subject key identifier: AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C953FF15269834AA36D3FA79647B034AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 14:42:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213822
IP: 185.36.229.0/24
IP: 2a07:cd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:3f:f1:52:69:83:4a:a3:6d:3f:a7:96:47:b0:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 14:42:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:61:91:52:6d:14:07:d9:52:eb:8b:58:74:
87:ee:d1:93:9d:b3:7e:0d:05:e1:8e:25:6a:fa:43:
c3:28:30:8e:af:f2:2b:c3:bf:5a:10:6f:fd:d6:11:
8f:10:a1:78:f8:d4:e4:2b:f5:2d:0f:56:25:0a:87:
cf:df:9c:f8:0a:d4:a7:fe:73:c6:e9:ec:e7:8e:87:
fa:6f:90:67:cb:c2:07:ea:d7:41:96:8d:2e:0f:8b:
cf:fd:44:8f:44:08:5a:96:ab:af:87:1a:c5:24:2b:
57:36:30:ba:99:b9:fd:80:75:37:41:ae:06:a9:d2:
a7:75:55:1a:91:80:8a:9e:e0:07:f9:2d:3f:2c:a4:
cd:84:cf:f6:67:65:d0:6b:56:6a:11:68:21:d0:7b:
f0:10:16:37:4d:8f:45:77:78:86:e8:ee:45:08:ce:
46:76:3a:89:72:b3:9c:4d:6e:68:e0:5f:16:3c:97:
45:da:d7:dd:e3:0e:cb:44:56:e3:a9:e9:8b:a4:78:
30:f8:72:ee:c5:fc:a9:0b:f5:78:be:74:8f:48:55:
18:b3:06:e0:d7:0b:6a:ea:e7:75:df:21:3e:ad:40:
1e:51:ee:7c:aa:d4:76:98:9a:34:8e:42:56:54:c3:
3c:ce:4e:fa:2c:18:11:57:ef:f2:52:e8:ca:fd:ed:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213822
Signature Algorithm: sha256WithRSAEncryption
36:ba:00:be:f5:ef:d6:cb:32:75:99:1b:25:93:16:13:5e:a5:
0f:e3:b1:c6:8e:4e:3d:73:ca:e7:3a:ff:2d:56:1d:db:8e:1a:
02:a7:f4:f9:7e:fa:cd:4e:57:39:94:4b:68:a3:c4:70:b9:90:
a9:6f:d8:46:9e:fe:40:9f:8d:47:e9:1c:99:85:6d:4a:18:fc:
f4:08:86:bb:6b:d8:5f:8a:8e:e3:2b:35:9a:18:03:75:85:6a:
ef:29:14:dc:df:fb:27:33:f2:2c:0c:30:00:c7:47:33:80:13:
8a:93:74:c4:6d:d1:76:ae:a5:a2:8b:87:e9:8e:fd:bf:33:66:
26:f2:b4:18:a0:9e:f9:dd:34:af:10:fc:2c:8a:5b:0d:2b:55:
e0:16:29:8b:f3:ec:05:24:88:a3:d6:04:f4:21:56:c8:be:2a:
c7:1c:1b:f1:05:4e:4d:6b:44:40:5d:fb:cf:6b:e3:6b:6f:5a:
79:9b:2e:80:b0:75:28:e6:67:bb:80:6c:6a:73:fe:d2:84:61:
bc:14:e6:7c:d7:cb:28:10:f8:2e:76:e7:7c:1c:33:3c:bd:a6:
54:c3:9f:d5:a6:30:d8:dc:cc:d7:06:52:6b:9b:60:fc:8e:e0:
47:77:4a:0c:dd:b8:55:bf:36:7a:22:99:e6:58:99:04:2a:d6:
c2:11:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:09 2026 by rpki-client