Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
File: tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer (raw, json)
Hash identifier: rd9nYBvE3AcWH6xQOC5i89aMBO8+tKKjQzW4gC6PMPg=
Subject key identifier: B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB2D5E888550664EBF49A9AD4B0DAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 171.22.208.0 -- 171.22.210.255
IP: 2a09:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:2d:5e:88:85:50:66:4e:bf:49:a9:ad:4b:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5be0bcfc52dfc8014df3bce1b6046694b572338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:df:1a:64:83:c1:fe:07:11:be:bc:50:38:
19:04:a5:36:33:0c:75:1e:68:d5:b5:82:9f:23:37:
8c:58:23:ab:a3:35:1d:25:2e:d7:a4:35:a2:14:a6:
82:14:d4:c1:96:09:25:12:24:49:a4:30:af:0c:c5:
de:e9:1b:04:c0:d6:f1:0b:0f:21:67:7c:61:c8:8b:
cf:8b:7c:c3:99:2f:ac:d1:72:aa:eb:26:6d:14:7c:
05:f6:17:49:e8:bc:7d:6a:ff:bb:88:13:51:cd:f1:
3f:b0:37:04:de:f3:b1:62:b8:72:f6:b6:93:db:35:
e4:6c:d0:60:30:b1:37:17:89:65:7b:23:db:b8:1e:
84:69:c2:5a:d4:ee:aa:00:7a:f5:a5:55:c1:0a:1b:
f6:67:b4:67:da:b6:92:6a:ab:91:db:48:a1:f3:ad:
74:69:01:1f:ad:d3:ec:f9:21:45:ae:17:35:43:36:
ae:9b:b9:5f:4c:87:39:5b:32:93:c1:07:41:77:7e:
89:aa:e7:b7:c9:a5:04:79:48:f7:78:20:78:48:55:
5e:8b:a6:98:5a:4d:d8:2c:cc:9f:4d:10:98:08:5d:
27:c7:e1:02:33:a0:00:cf:1d:60:19:34:ac:52:3f:
7e:9b:79:a6:4f:72:10:56:45:37:92:6b:2d:c8:0c:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.208.0-171.22.210.255
IPv6:
2a09:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
80:88:37:9a:1d:fc:87:2c:8e:bf:7a:eb:c4:40:ee:64:37:52:
0d:7b:e5:a4:23:98:09:5c:0d:5c:0b:e5:d6:bd:c2:13:fd:52:
83:82:b7:97:a4:a4:b9:d6:1a:52:19:07:54:95:68:27:7d:fd:
e5:ea:96:27:97:4d:df:12:3b:5d:33:8e:42:de:c6:fb:76:27:
49:86:4f:e6:37:39:79:fb:f9:35:ae:3c:b8:b2:69:71:18:a0:
45:6b:fa:0e:f1:8d:7c:fe:ba:1f:5e:6f:90:54:b2:17:76:c8:
ac:37:99:81:86:d3:43:16:17:cc:2d:94:2f:20:34:a2:6c:ba:
7d:18:10:74:98:a7:85:4b:cb:b9:23:9c:1b:d9:40:99:78:f8:
4e:ae:a3:f2:14:63:7c:97:1f:8b:2e:60:1e:30:75:16:18:b1:
b7:f3:65:10:e4:f9:48:6e:10:0a:4a:4c:fa:ac:c3:f5:5c:46:
c4:e6:f5:90:1c:4a:3b:38:a4:64:23:97:bf:9d:86:42:e8:e5:
01:6d:4e:d4:3a:10:c5:7f:84:b4:7f:7b:0e:2c:81:67:4e:4c:
1a:6c:25:03:69:09:c6:d6:43:5b:71:93:5d:21:26:96:f9:4c:
c8:82:9d:60:97:61:22:0d:95:a2:46:d7:1a:dc:eb:53:49:db:
90:ca:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:27 2026 by rpki-client