Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.cer (raw, json)
Hash identifier: P7dQnPV0RpzBJBDqpI0LpQPmPK3F9AwtDRDBA2xcrHk=
Subject key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F918720833187F08C66A02A07C1285
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203921
IP: 130.43.163.0/24
IP: 2a11:46c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:18:72:08:33:18:7f:08:c6:6a:02:a0:7c:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:55:d0:76:00:c4:3c:84:95:38:34:75:38:
d1:4e:6d:3f:d7:f9:ba:f8:38:04:eb:ef:df:17:fb:
d6:3e:c8:84:86:9c:65:3a:28:f2:35:90:02:21:17:
ba:62:25:a6:83:8f:0b:c0:89:7d:1b:c3:a7:83:29:
93:2f:f0:54:01:66:b5:29:f7:7c:f1:40:e7:86:e4:
3f:fc:1d:51:ea:2e:c0:9d:39:cb:f9:a4:65:ea:26:
fb:d4:08:fc:24:be:e3:bd:96:d4:99:34:39:f4:9c:
71:3d:33:73:02:34:c9:ce:0b:f1:8b:93:2e:f6:72:
7d:21:d4:13:ea:0e:50:3e:1e:9f:1b:3c:3d:46:6f:
37:94:8f:76:b3:a4:4f:09:28:7a:6b:1a:eb:94:a5:
e4:93:b9:d7:25:7d:7f:ac:50:ad:6c:0a:48:47:41:
9e:3f:bc:0b:2f:49:22:e0:ac:3a:f6:ba:ec:7a:5e:
ce:99:6b:23:35:15:54:c2:b8:2c:59:ad:b6:26:b1:
0c:a8:06:ab:0c:86:57:9d:6d:e5:ad:7a:ad:75:6b:
e2:67:69:07:e2:4b:8a:3a:c1:56:3d:b5:1e:8f:09:
a3:d7:2b:1b:86:84:a3:e5:99:75:f3:bd:03:7f:84:
1a:b0:7c:38:3f:8a:17:8f:e5:87:2e:55:71:8d:71:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.43.163.0/24
IPv6:
2a11:46c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203921
Signature Algorithm: sha256WithRSAEncryption
ac:41:34:04:06:7d:6d:1b:a5:8b:ff:6e:6e:bf:6a:3f:dc:d4:
e5:7c:9a:e4:f9:89:d5:57:0d:21:b4:8d:38:8a:6f:75:a0:9b:
ed:4e:dc:6d:86:b8:a0:72:fe:e4:65:01:f7:15:40:2e:e1:b0:
65:8c:3d:5d:66:1f:4b:91:fd:bb:11:59:ac:bb:1f:1f:fe:58:
f8:6b:79:00:cb:4c:46:9f:5b:24:83:07:48:d3:49:a7:82:29:
f2:af:41:08:c4:9f:1e:07:62:44:c4:71:f6:64:9f:18:b7:29:
29:6f:8c:e8:af:48:91:56:aa:9e:88:0f:76:96:7a:50:59:d1:
0d:6b:aa:e0:24:8f:0c:1c:37:75:2d:fb:4d:24:82:cb:27:8f:
5d:c3:ed:96:fd:01:f4:9c:51:bb:8c:e5:49:78:f7:54:81:5c:
26:86:00:88:64:db:b8:55:46:0c:13:da:ac:3f:7e:80:5c:76:
32:4a:5f:7b:a0:27:9f:13:28:5e:ae:47:8e:68:37:00:f6:44:
38:06:9a:21:dd:66:58:c9:74:cb:06:10:f3:c5:36:1b:90:0e:
d4:ac:ee:60:fc:fb:25:78:ff:a7:1d:5a:17:ed:9b:fb:fd:44:
5d:0d:ef:3f:ef:55:74:04:1c:c2:a0:df:cd:23:d1:83:c8:1c:
4c:c8:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:52 2026 by rpki-client