Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
File: 4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer (raw, json)
Hash identifier: vIIRG2m8E2YbJypFU1qFJQWSB3x1oJ89CIM3DOWWXHQ=
Subject key identifier: E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A087FBFED187749161D1CD8A0251C4F43C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Sep 2026 21:03:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197309
IP: 46.174.48.0/21
IP: 62.122.213.0 -- 62.122.215.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:fb:fe:d1:87:74:91:61:d1:cd:8a:02:51:c4:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 21:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0b67541b8e7df3d564491fea558cecb29e97083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:f8:48:ec:d3:3f:cf:b2:36:3b:23:42:d7:
f2:c6:b3:ff:5d:1f:72:74:a3:ff:7d:3b:b7:e1:ea:
ce:fc:56:82:fd:fc:12:52:69:47:4b:4f:ca:5b:4d:
45:18:ec:98:c9:ac:e3:38:63:45:64:34:14:13:c1:
e2:8a:ca:7a:4b:d1:ae:ad:82:e4:63:e3:a1:76:4a:
3e:e1:4d:2e:9f:89:70:bc:ce:bf:8f:d3:86:92:be:
34:00:f0:34:dc:dd:70:2d:2d:a6:9b:af:6b:96:66:
36:a8:28:e9:26:91:e4:51:f4:2c:7c:55:80:c6:92:
3c:fa:56:cd:0f:4f:71:bc:13:cb:97:27:de:7e:d4:
2e:34:ac:ac:43:d7:37:90:4d:98:e1:60:e1:f5:34:
51:f4:d8:6a:c5:38:36:6b:ec:e8:61:19:ec:8b:0b:
46:69:d8:0e:9f:f5:0d:f7:bd:59:da:1d:e3:cf:86:
ba:00:e4:1d:0e:4d:88:6b:8d:b3:a8:30:93:ce:45:
ff:b2:8e:de:92:ed:2b:34:ad:da:d6:74:da:24:db:
93:a5:4d:e3:aa:73:60:6d:5b:42:43:7c:fd:64:49:
0c:a8:b1:80:95:aa:8f:c8:eb:fc:fd:a9:7d:16:f0:
53:15:74:a0:10:01:a4:3c:3d:4f:ae:49:c1:30:cf:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.48.0/21
62.122.213.0-62.122.215.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197309
Signature Algorithm: sha256WithRSAEncryption
9f:1d:65:4e:42:c3:80:09:1f:0a:fd:21:1d:f3:81:c9:27:65:
69:d8:be:67:03:f6:41:bb:42:bd:7b:e9:04:d8:5d:a6:5f:d3:
47:49:9e:7f:cd:84:84:37:09:1e:37:c0:d0:e8:c4:df:78:99:
02:7f:ec:cd:14:d2:02:39:90:ae:06:72:82:44:1c:07:45:cf:
42:64:e1:e7:17:cf:e4:d1:5f:82:ac:2b:9b:9a:af:b7:13:cd:
77:5f:24:6d:51:14:cd:40:31:2e:c7:6f:57:c3:b9:11:41:20:
fd:0c:fd:89:3c:9c:c7:ba:51:84:e3:e4:01:56:25:7a:31:0b:
29:d5:fa:6b:22:f0:64:10:cb:a7:4c:a2:c2:15:68:83:d4:04:
bc:3e:c2:c3:ac:a1:22:45:2d:96:25:df:e3:89:25:34:b2:82:
9e:c7:eb:f7:c9:03:40:30:ee:5f:07:6e:b8:58:79:5e:4d:cb:
5f:d9:a2:3f:ff:1b:c3:3b:35:c4:ba:c5:ab:4c:bb:a9:07:26:
45:0e:ea:dc:17:00:32:c7:dc:c5:59:20:48:89:f6:be:08:6b:
62:2b:ed:df:ac:2a:2d:34:d1:59:cc:3e:1e:f9:a0:52:e0:2f:
d7:da:1d:07:ee:8d:a6:58:1e:25:38:7c:25:77:16:e4:40:a6:
2e:dc:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:14 2026 by rpki-client