Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
File: 4fNRL1HcQruesSq8C7UpZosu3uQ.cer (raw, json)
Hash identifier: e0Uq+2U705dYt/EJcgkLE9CJ/zzFtPMeFp2BR9AVuNI=
Subject key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A15E0E922307E87F0DF175E9B9966496E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 21 Oct 2026 10:42:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207215
IP: 45.149.152.0 -- 45.149.154.255
IP: 89.150.49.0/24
IP: 91.231.126.0/24
IP: 91.231.156.0/24
IP: 91.232.99.0/24
IP: 91.232.103.0/24
IP: 185.33.26.0/24
IP: 185.123.156.0/22
IP: 185.144.12.0/24
IP: 185.162.176.0/22
IP: 185.234.100.0/24
IP: 188.94.191.0/24
IP: 193.17.95.0/24
IP: 194.99.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:0e:92:23:07:e8:7f:0d:f1:75:e9:b9:96:64:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 10:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:bc:b9:d1:a0:23:28:d4:7a:90:a7:6e:37:
2e:42:fc:ec:7e:3f:33:2f:5e:4d:6b:06:de:9c:3e:
ea:a5:b7:06:3e:80:e0:76:15:7b:94:a3:2d:ef:0a:
2f:34:36:07:8c:37:cb:40:36:9e:60:18:e0:0e:84:
7d:5a:cb:10:81:cd:70:a5:33:19:d0:34:65:56:30:
68:0e:1d:37:ee:28:48:70:d3:4f:b3:38:76:f4:ba:
82:b0:76:c4:2d:ce:e2:c5:1d:be:1c:cf:60:96:3b:
23:ac:73:17:93:a7:87:af:68:5e:de:d2:29:7c:5c:
b1:ee:e2:d0:cf:23:60:b4:61:43:d6:83:c3:22:e1:
45:03:e3:01:43:5f:d5:6a:09:50:21:ed:19:6e:9d:
7b:a6:58:fe:e2:8b:f1:2f:b3:29:1a:b0:25:0c:66:
d5:04:b3:4c:b5:2a:d3:c2:f5:13:c9:c4:bf:73:d5:
d0:09:84:c4:dd:b5:4e:6d:cc:93:ea:81:9f:53:c4:
ec:9e:8f:af:7a:bb:b6:70:e0:f4:b0:01:cd:7d:e0:
aa:fa:91:72:fe:70:89:4d:2d:2d:11:2f:a8:44:43:
5d:a9:7c:7f:7b:62:05:b3:fe:81:c1:83:7f:e4:bb:
a4:84:64:b6:a3:0a:a4:29:93:de:f8:14:29:95:25:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0-45.149.154.255
89.150.49.0/24
91.231.126.0/24
91.231.156.0/24
91.232.99.0/24
91.232.103.0/24
185.33.26.0/24
185.123.156.0/22
185.144.12.0/24
185.162.176.0/22
185.234.100.0/24
188.94.191.0/24
193.17.95.0/24
194.99.156.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207215
Signature Algorithm: sha256WithRSAEncryption
34:60:72:4a:09:32:0b:da:11:eb:73:a2:cc:bb:1f:84:bf:2a:
7a:c9:9c:45:3a:d0:2f:29:0f:69:39:19:0c:62:e4:0a:13:03:
19:c2:11:a0:0d:f2:33:bf:80:53:bb:28:f3:e1:9c:5a:0b:43:
3d:c9:26:c6:3f:aa:c8:d8:7b:c7:81:92:2b:c8:d5:7a:f9:38:
e3:1a:c2:75:ed:78:c9:6f:c5:30:20:6d:d1:c9:26:cc:ce:1f:
ec:4a:7c:a4:be:37:f8:2b:f2:30:73:66:2c:28:b4:ea:67:e5:
4a:be:3f:12:03:51:70:fc:9f:6e:06:83:6e:81:51:23:7d:9b:
7f:58:25:42:ad:5b:0f:0a:fc:ee:32:f9:af:4c:a3:bf:b4:34:
6c:b8:37:8e:13:54:b9:e6:6f:a5:d6:2a:ac:a3:e9:53:d3:ab:
f8:33:e1:fb:7d:b0:09:4f:54:a8:83:17:09:cc:32:48:ee:c8:
f3:8f:eb:64:57:38:de:99:5b:11:aa:ad:4b:be:ef:90:35:89:
24:ee:de:20:8a:85:bf:67:a5:f2:c8:69:4a:4a:aa:da:3f:cc:
0e:ac:25:4d:1b:33:9a:0c:b5:33:ce:c2:e8:c9:33:56:82:8a:
06:68:3c:f7:f0:db:d4:25:44:72:65:32:e8:ea:ec:80:4f:73:
22:84:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:01 2026 by rpki-client