Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
File: tT9AiUhnv7TtUYEBfagOor3tKuQ.cer (raw, json)
Hash identifier: nSkkvdq7hOhSBXgbbT7mUMvknAEsbpWFqhCodxlyGxA=
Subject key identifier: B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC3D122848BCA3245FA62173009CE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210422
IP: 80.68.154.0/24
IP: 2a12:9f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:3d:12:28:48:bc:a3:24:5f:a6:21:73:00:9c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:5e:6e:08:45:9d:3e:da:60:2d:56:48:df:
4f:65:e5:ba:75:b3:bf:91:0d:0c:54:28:3d:c1:2c:
b2:2b:57:b4:8b:67:88:2e:5d:be:b3:9a:38:14:37:
31:a1:7f:73:5c:33:6c:f1:f3:30:9d:f1:87:87:fb:
b1:7c:f6:b1:2a:f1:17:7d:cd:ad:b3:73:79:56:7c:
85:6e:e5:e3:27:e6:0e:31:99:0d:e8:99:e1:b5:5c:
84:bf:8e:f6:5e:e1:85:98:e2:a8:1f:e0:ed:30:34:
61:1d:76:44:50:b3:a2:a9:86:bb:9d:b4:67:6e:62:
6b:aa:69:1d:d6:b4:4c:77:ac:e2:03:75:d2:20:0c:
30:96:65:a2:1c:ec:7f:b3:9d:b8:66:b8:cc:f4:f5:
25:97:62:b5:2d:4a:3d:e5:7a:94:5b:31:c6:46:9b:
ce:a4:65:7e:d3:e5:a1:8d:81:bb:9e:e6:9c:3c:09:
4f:85:8c:eb:a3:69:84:4d:57:96:68:a0:6e:d7:a0:
95:b2:ac:c8:49:0c:44:5a:49:d3:96:31:e7:27:07:
58:79:f5:99:31:45:a2:9c:d8:a4:c1:ac:49:db:94:
71:98:8a:03:0e:07:06:4f:d7:d0:de:7d:e3:0c:11:
4f:45:44:77:47:03:ed:66:db:e9:f7:ed:47:0c:75:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.154.0/24
IPv6:
2a12:9f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210422
Signature Algorithm: sha256WithRSAEncryption
91:09:94:ba:e2:0a:1b:60:3b:e2:52:17:ff:37:5d:8c:4e:c7:
8f:4e:cf:8c:d3:58:91:b2:b5:58:0b:c7:6e:a5:98:07:19:69:
16:89:05:b3:58:45:83:b3:14:08:d8:e7:c2:81:fe:6f:e7:1a:
34:98:3e:78:ca:77:0f:fd:95:c4:7b:cb:07:7f:08:60:0b:76:
3d:74:b1:98:42:5c:58:a8:11:c6:18:b2:d0:7d:6e:aa:28:5f:
8e:30:13:6f:39:c3:ca:a7:02:f9:c5:12:28:6b:8b:96:fc:22:
b3:ec:82:86:c1:15:e4:21:3a:5f:0c:c7:8a:21:1f:c2:e0:72:
33:0e:fd:e3:89:81:df:56:ed:8d:6f:4d:22:ca:94:57:a1:36:
b9:0b:bd:28:10:3c:21:9e:44:0c:78:57:70:24:4c:63:50:d4:
bb:5b:20:c4:4e:86:2d:68:6b:a5:f3:a8:b8:ea:5e:cc:3e:75:
bd:12:f4:70:8f:61:b0:85:3a:93:6c:a3:cd:ae:f4:1a:84:51:
79:9a:7d:62:78:28:ce:2e:8b:73:94:da:af:1d:ac:97:fb:0d:
d5:b5:02:d5:81:ee:da:07:2c:c7:98:ec:72:5f:b6:5d:4c:14:
35:e5:45:4f:43:98:ed:3f:96:67:16:2a:45:f3:d0:f9:8b:4e:
85:26:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:12 2026 by rpki-client