Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.cer (raw, json)
Hash identifier: 4tfqCdftkYOdTdB0w8JYpu2iDHz0OAlWREwyD7ofSLI=
Subject key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E82042C211EF15756F662D4170F972F3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jun 2026 07:09:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198499
IP: 86.36.64.0/19
IP: 185.37.96.0/22
IP: 185.37.108.0/22
IP: 2a00:f0e0::/32
IP: 2a04:6f80::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:04:2c:21:1e:f1:57:56:f6:62:d4:17:0f:97:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 1 07:09:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:fd:f2:c3:ed:77:a3:4e:2e:7a:20:94:47:
19:72:1c:9c:22:aa:86:a7:52:29:38:cd:36:9b:a6:
46:1d:7a:73:ab:7f:ec:a8:3f:95:01:c6:d2:86:b2:
fd:33:a1:56:49:bf:48:c6:1c:5e:7f:3e:4c:a4:37:
d8:32:33:ec:32:e2:1d:8e:26:68:d8:94:d9:28:4e:
9c:48:eb:a4:0f:5f:6c:d3:75:b4:2a:c5:b8:a5:2d:
ca:b7:54:15:bd:2a:5b:b2:08:78:02:b0:79:16:48:
74:fe:91:1d:11:c4:7c:26:3f:05:1c:9a:17:6b:1e:
6c:66:e0:63:bd:bd:51:81:c6:f4:56:1a:87:46:73:
74:41:bf:4d:27:fc:58:d1:9a:14:d1:0c:84:7d:17:
ca:f3:c3:c7:ab:e6:24:f4:fa:73:ee:73:f6:93:db:
b8:6a:41:bd:ec:f4:29:c7:de:ed:06:da:bc:85:e1:
21:6b:66:51:4f:6d:b2:5f:7a:fa:5f:13:0a:34:89:
5c:66:82:94:36:68:92:7a:9b:c3:1a:dc:0f:1e:25:
66:ed:fd:24:e8:5c:b0:62:eb:e8:3a:98:46:cd:cd:
b2:98:cc:0d:d1:22:63:c2:0e:77:de:ac:20:47:10:
8d:b4:87:48:1a:c7:3a:55:8d:70:d0:ea:c5:10:f6:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.64.0/19
185.37.96.0/22
185.37.108.0/22
IPv6:
2a00:f0e0::/32
2a04:6f80::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198499
Signature Algorithm: sha256WithRSAEncryption
1f:df:e7:de:bd:ba:12:c6:7a:ea:f8:a7:8e:26:09:7b:d7:e2:
bc:35:30:b3:ca:3f:26:c9:9a:f1:a0:8c:75:71:7b:f4:ef:f0:
39:5e:51:28:7e:53:26:b3:10:51:7d:f5:87:2f:03:c9:57:1b:
81:3f:fb:92:96:38:3a:ca:89:29:02:7a:4a:16:73:70:e7:fd:
b5:ec:25:22:30:21:ab:c8:f7:12:be:6c:b7:34:7a:91:80:18:
6a:8e:41:05:e3:a4:b4:46:ba:4f:0d:76:5a:30:d5:93:48:3c:
14:24:4d:64:72:16:69:c1:42:c6:bb:35:f2:e3:bc:37:cd:8f:
6f:0c:e4:40:9b:ec:13:14:13:62:c6:c1:d8:e7:95:02:93:fa:
ca:cc:9a:00:9c:e9:d5:32:b8:25:ff:0f:af:22:14:a4:75:0c:
61:46:13:68:46:3d:61:6d:0a:ab:9f:5c:f6:a4:3a:6a:4d:b5:
5a:b4:d2:8d:cc:a6:b7:a6:b2:ab:a6:a9:04:a5:68:ab:97:7c:
89:0c:71:64:02:73:05:bd:db:18:9e:af:66:2f:94:6a:1f:03:
31:2e:a1:04:e3:e1:c1:56:68:ca:31:55:85:e2:31:9b:03:fb:
e9:24:c8:58:ed:f0:2e:22:c8:44:4b:43:6a:1d:a5:fb:12:71:
06:1e:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:38 2026 by rpki-client