Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer (raw, json)
Hash identifier: xH9u1R+GsFPEtB3bm1FB6zvADqsvzA4jvVdI0RnXukI=
Subject key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0ECA2C47E56BE040483D1D8E19546687A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Sep 2026 10:08:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218550
AS: 219153
IP: 91.213.140.0/24
IP: 103.27.156.0/22
IP: 103.31.76.0/22
IP: 103.110.64.0/22
IP: 103.146.118.0/23
IP: 132.243.192.0/18
IP: 195.226.82.0 -- 195.226.95.255
IP: 2a14:8200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:a2:c4:7e:56:be:04:04:83:d1:d8:e1:95:46:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 29 10:08:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:5e:db:06:ec:85:a9:85:db:83:ef:8b:af:
49:28:9a:18:4b:53:f9:04:ab:ba:4f:54:e7:40:46:
dd:92:39:63:7a:45:7c:65:87:5e:f3:d3:9b:fa:94:
ab:9d:fa:49:62:78:8b:86:04:76:51:3f:ff:dc:ae:
49:2c:b5:bc:7b:1d:e5:14:08:21:e9:0c:de:03:a5:
2a:8e:ed:6d:c8:a9:25:d9:c3:9a:91:66:3f:6a:42:
c0:29:21:2d:c7:0d:e2:4d:ea:40:e3:ee:e3:6c:48:
5b:49:78:f5:12:9f:0c:79:6b:57:31:e5:37:8e:33:
34:9c:8a:08:26:eb:e6:f7:38:1d:74:88:3e:4f:2f:
23:e4:73:f8:66:ae:6b:d9:9d:cf:d7:e1:c6:6e:ca:
3f:56:23:44:8b:4e:ea:f4:ae:d6:96:e6:64:70:eb:
fa:dd:1f:61:e0:3e:ab:49:a5:ee:3b:4c:31:4c:57:
29:b9:5f:38:a5:a1:29:34:8d:8b:8c:a9:6d:02:51:
04:f6:5f:53:34:08:b8:5c:41:8a:bd:52:ee:87:70:
a1:f5:2d:b7:4c:46:fa:ab:64:2d:d5:66:4e:59:74:
6d:b8:e8:53:36:e4:8d:87:4d:fe:46:7b:24:55:7a:
71:21:41:ed:af:6e:67:3f:4c:0f:af:57:67:4d:dd:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.140.0/24
103.27.156.0/22
103.31.76.0/22
103.110.64.0/22
103.146.118.0/23
132.243.192.0/18
195.226.82.0-195.226.95.255
IPv6:
2a14:8200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218550
219153
Signature Algorithm: sha256WithRSAEncryption
9c:91:c9:e9:05:8c:15:79:b7:5e:fa:62:d2:93:15:0d:04:69:
7d:d4:03:79:9b:54:ae:1a:4a:92:3d:b2:da:ad:60:1d:d6:b2:
8f:5e:31:73:4e:f5:11:c8:51:40:a0:d7:25:1e:16:60:99:3b:
d1:34:56:0b:c7:8b:22:11:36:73:c1:92:f0:77:6b:17:55:74:
48:f5:80:f4:d8:60:8a:38:d2:04:57:5c:0e:ea:a9:f8:e5:02:
6c:02:79:78:3c:ba:84:55:43:1e:2a:73:b9:94:c1:d8:a8:54:
ac:be:e8:13:fd:96:b6:e2:9f:bb:12:3c:19:43:28:e3:7e:24:
2b:7e:30:25:20:57:c2:a8:4e:56:71:40:fc:9b:c4:b9:1b:54:
0a:18:62:09:71:ec:86:83:ff:9b:b0:1e:2f:89:61:3d:42:05:
bf:cd:02:f1:93:35:23:8d:be:c9:b8:5f:95:9a:02:b0:e5:50:
b0:df:c3:6d:93:94:f4:d6:74:12:6f:28:b9:15:1e:ef:67:d4:
9e:41:3b:fe:8d:e4:6f:1d:98:d1:48:e5:96:b2:6e:1e:64:7e:
df:03:d3:f7:bf:87:ac:f7:ff:a9:01:94:b6:25:cb:76:24:dd:
d2:46:4a:6b:d6:6b:04:e8:7a:a7:fe:20:a3:80:34:b4:db:45:
e7:42:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:55 2026 by rpki-client