Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.cer (raw, json)
Hash identifier: TXIRP0zqC68yJMr/1Ctlfv2JkaQ6I6mGKgWZtcP3x6I=
Subject key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB682AC484DA9C3ACC67DCC02202B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208346
IP: 217.198.186.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:68:2a:c4:84:da:9c:3a:cc:67:dc:c0:22:02:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:a2:82:f7:39:e6:ed:1c:08:e9:29:9b:17:
8d:1a:fe:73:2c:f6:08:73:0e:ce:d4:18:b0:aa:d8:
77:e1:20:12:1b:2f:6f:60:89:f4:73:81:d6:26:32:
92:3b:b7:40:93:cf:c1:ab:b3:31:31:a1:41:1a:a4:
78:a4:65:46:e3:8e:a5:7c:bb:e3:45:70:e8:33:bb:
09:b5:67:32:db:ea:bc:74:be:ce:56:08:1d:d8:7b:
e0:74:56:d3:ed:a2:fa:f8:b6:c7:2f:b8:6b:32:1f:
2c:a3:9b:b3:d7:72:b1:2f:eb:ea:5f:b3:6c:df:44:
4b:db:ed:99:95:3f:3f:e3:58:0e:82:f8:e0:68:a6:
74:95:43:31:49:f4:d0:c6:98:40:6a:09:c7:ef:5f:
9b:08:34:38:e8:8b:4e:ac:77:00:2b:46:14:37:c8:
e5:e7:41:93:ac:d0:2d:ca:be:cd:80:88:82:4a:f8:
5c:40:13:7d:72:d0:62:bd:8f:fd:14:8e:b9:8e:19:
0e:47:a3:97:9b:e0:9d:3b:2a:3e:09:82:5f:a8:b5:
9d:d7:8c:ba:8d:5c:2e:44:01:a7:2b:9e:ec:0f:79:
5c:72:73:1c:9e:39:50:ba:f1:72:56:f0:86:80:a8:
19:24:04:28:5b:b6:8c:63:e7:cb:14:c4:38:ee:ff:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208346
Signature Algorithm: sha256WithRSAEncryption
5d:2c:c0:17:d3:88:91:36:22:72:c1:30:d4:3c:d6:96:26:9f:
5c:f9:db:45:91:a9:fb:e0:8d:52:d8:8a:0d:8f:43:34:3b:2a:
de:ac:6e:47:aa:e0:95:83:e9:6c:c4:c8:38:4e:7d:8c:b5:e4:
9d:4f:84:bf:e7:94:6b:5a:ae:9f:0c:db:e4:5c:27:48:c9:5d:
90:15:e9:2c:4b:a3:6e:38:be:05:7a:2f:73:d9:e5:17:e9:71:
ae:9c:9a:b2:bb:f7:c0:48:b5:6d:e9:1c:2b:73:3c:d4:02:a7:
4b:8e:38:d6:46:77:d2:68:e8:ad:9b:1d:09:f9:85:4d:f8:c5:
ec:0a:44:f6:37:e9:45:be:74:fc:fd:4b:28:81:e1:42:e8:a6:
00:e0:c6:c1:2e:73:1e:62:4d:47:b0:4b:be:0e:78:78:35:ac:
d4:c3:59:3c:3f:75:0e:55:03:d7:a7:8d:0a:a9:72:26:05:de:
a9:f5:cb:41:aa:91:eb:49:a4:a0:fc:8f:47:26:de:9e:2e:7a:
d5:f8:a3:71:57:e7:49:72:37:73:e6:97:69:3b:03:7a:61:f9:
63:d3:5e:f2:15:d4:df:27:c4:f6:e3:d2:13:5c:83:e6:aa:21:
a8:3e:8f:b7:52:01:83:fe:27:1b:93:8c:0a:d1:fe:0c:ba:1b:
5f:0d:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 02:38:14 2026 by rpki-client