Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
File: 4jBenNZCPdAyhv7s9V25OwYoL_E.cer (raw, json)
Hash identifier: BEGWpTIwskirRFXP8Tz6vE2G7qL0FPl/GMukYFluoEE=
Subject key identifier: E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC1F57E4F4EBD3EB3CEC012D4E3BCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203909
IP: 2001:678:d88::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:1f:57:e4:f4:eb:d3:eb:3c:ec:01:2d:4e:3b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:10:e6:a9:1f:72:c4:c7:fe:f3:c9:18:b2:
e1:78:aa:50:13:a5:37:6a:ea:51:89:4e:1f:d8:6f:
fb:ca:cf:e2:88:bc:c3:06:86:0d:28:37:04:25:90:
09:bd:6b:2e:c3:42:d5:a2:a0:fb:83:cc:f3:43:0b:
cb:a7:a6:c8:ed:3f:84:da:e6:8e:16:8d:27:36:20:
de:f9:b9:04:14:b8:17:25:89:3e:2b:83:32:35:71:
52:23:8e:2a:67:a4:e8:0b:12:81:77:97:a1:81:1b:
65:f8:a7:c3:c8:c0:4a:11:b4:b5:b4:69:93:7a:8e:
ac:25:8e:df:a2:3f:c9:92:11:29:c7:33:82:fe:25:
07:cc:0e:01:e3:17:fb:fc:76:f9:d0:86:ab:49:d1:
44:f7:5d:ba:7a:e4:49:96:37:56:a4:57:30:a5:0e:
90:40:90:64:69:7d:ea:58:27:ee:94:c5:61:c5:28:
e6:9a:b4:3f:de:6d:b8:16:ba:ea:d8:e2:2e:0d:d3:
7a:dc:97:97:85:25:8c:71:a4:17:62:1b:01:47:b6:
57:80:a5:47:1f:5d:e1:83:c6:3e:1c:aa:0f:73:9d:
80:cb:f6:6f:07:ea:79:5e:7b:42:fb:bd:0f:a5:4d:
a8:21:30:10:b3:ce:e0:34:d7:f9:29:03:aa:17:ff:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d88::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203909
Signature Algorithm: sha256WithRSAEncryption
68:7a:6a:53:15:a6:18:18:c0:b7:dc:02:5e:a6:c0:ca:6e:b8:
97:f2:8a:7b:da:89:a6:7a:15:e5:51:b4:f0:48:d4:e8:e1:b5:
8c:c4:a0:45:b1:4b:2e:2a:10:42:a0:7b:7f:28:5a:14:27:2c:
8f:3f:bd:f9:8d:72:30:c8:f0:45:ca:8a:24:de:45:b9:af:34:
38:14:58:87:fb:bf:5d:83:d1:84:71:09:ae:56:46:d2:37:6c:
26:bf:8b:35:78:bf:f5:a4:2a:b6:d7:e7:d4:12:dc:dc:30:3a:
4c:78:d8:4c:b9:2a:53:ee:4e:2c:d3:e4:aa:6f:7d:43:0f:72:
71:01:e1:2e:84:f7:41:eb:be:30:28:76:4c:d9:1a:4c:f8:27:
d7:e4:7e:95:be:08:7e:c3:54:e0:1c:f9:37:14:63:ef:30:2d:
af:39:22:1e:ce:7c:a0:25:ba:3f:21:b3:d6:d3:76:15:e8:75:
1f:66:d0:3c:59:41:99:34:5d:cc:58:0c:0c:59:6f:0e:3b:61:
85:32:a8:ee:36:e7:c1:e7:c0:ca:1b:48:65:63:4c:d5:35:ba:
b5:fd:29:b7:aa:0e:db:9f:b1:5f:1b:2e:bf:f9:5f:03:a1:2a:
ec:a6:01:94:ff:b8:bd:30:4c:99:b5:90:70:45:e1:cb:9a:fa:
4c:36:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:45 2026 by rpki-client