Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
File: Cn4rBHu6-WxHybJyFbobEOYav28.cer (raw, json)
Hash identifier: xlgHr5C9Iv0T+DVHfVpK8ZUHWZjGOTzI6Eom/1VpYEc=
Subject key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD789583951C89696E217555673D4BF24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 11:37:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.153.172.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:89:58:39:51:c8:96:96:e2:17:55:56:73:d4:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 11:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:1b:58:c7:d5:ae:b5:e7:ab:19:68:74:6d:
ec:89:70:27:14:ce:bb:bd:bc:91:70:d8:c9:d0:61:
07:d7:3d:aa:d9:f2:66:cc:61:81:ef:73:ee:ec:0d:
8e:74:5f:8b:47:46:8b:03:3a:12:b3:a4:c1:62:c4:
af:16:f6:e4:68:11:04:a3:13:f2:06:26:68:be:fe:
1b:74:95:40:b7:e2:2b:ca:fe:ce:87:d7:05:ae:f6:
d1:3b:1e:fb:36:58:b1:bb:b1:e6:d9:d3:12:2c:a5:
43:0c:b0:1f:b8:86:6a:04:02:cf:d8:fe:59:dd:da:
9d:73:eb:3a:4d:0e:64:56:41:5f:e1:52:ee:cd:ec:
16:0c:29:a8:21:a8:00:84:b7:46:90:9a:e6:15:a1:
7f:55:30:e9:0a:63:b4:8b:34:0f:ed:16:ee:0f:78:
50:8e:51:a2:08:e0:33:52:1a:e2:ed:a5:76:db:9c:
da:11:74:76:5f:c3:93:20:76:76:29:bc:28:af:75:
b8:79:b7:e1:73:c6:d5:50:e3:1d:df:fa:a7:63:23:
a5:78:a5:2f:0b:6d:4a:4c:e2:25:fa:0b:3d:72:b1:
d0:ed:49:ce:0c:0b:5d:b8:e0:b4:1f:a4:aa:55:2d:
da:51:3b:70:7e:19:ba:ec:e6:94:31:fb:4d:f3:d4:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b8:91:e3:ad:d2:5f:2a:7c:e1:f0:e6:8b:54:64:33:bc:dd:
97:c7:09:49:9d:26:78:f5:95:45:26:53:fb:92:a0:68:58:24:
78:5a:6c:51:5a:db:21:ef:fa:b4:a1:cf:af:53:2c:9a:fa:93:
ba:c8:65:51:f9:10:3c:a5:4c:1d:c7:f8:cc:7e:58:94:71:01:
0b:29:5e:50:61:34:44:2d:93:7e:1b:0c:1c:e8:58:2e:f3:5f:
59:6c:d8:7d:41:77:75:82:86:04:5d:ff:83:26:43:60:47:d2:
b4:e0:8b:2c:cc:e5:c2:ae:fd:ca:cd:a9:22:88:fb:b7:fa:4a:
6a:4d:9c:44:ad:d0:33:08:2b:ca:32:83:4a:9f:6e:5d:60:70:
40:e3:10:ac:93:39:d2:17:69:ff:fb:4c:f4:91:65:98:16:24:
e3:53:c0:4b:d2:7a:d2:2b:e1:c3:af:db:dc:59:6a:20:ed:e9:
23:57:db:1f:89:58:58:90:82:67:54:2e:87:79:27:3d:3b:ce:
83:92:14:c0:99:20:69:eb:8f:64:73:8a:bf:23:08:58:8d:b2:
0d:7b:61:bb:48:7f:74:8e:d6:b7:ea:6e:d6:9c:9f:b3:c7:36:
1a:75:39:fb:e0:a8:13:73:d1:35:ee:89:aa:72:93:58:c0:85:
19:57:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:26:59 2026 by rpki-client