Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
File: ISaWdazvu_hJex4hynN2SvSqjHs.cer (raw, json)
Hash identifier: 16NC0UdaGx4xG3NLHAYpZx5FU3LyhuZmYtGo26hA9Jw=
Subject key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0672F79C40406B06B80A76F6FF09BF645
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 12:12:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20847
AS: 39591
AS: 201597
IP: 62.165.64.0/18
IP: 77.94.240.0/21
IP: 79.143.208.0/20
IP: 80.65.96.0/19
IP: 84.241.128.0/18
IP: 185.3.104.0/22
IP: 185.66.92.0/22
IP: 185.89.16.0/22
IP: 185.232.252.0/22
IP: 2001:1690::/32
IP: 2a00:1280::/32
IP: 2a05:680::/29
IP: 2a05:d480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:2f:79:c4:04:06:b0:6b:80:a7:6f:6f:f0:9b:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 12:12:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:a9:5a:65:ef:06:3d:44:fc:92:dc:b9:52:
91:a9:b2:47:50:d8:eb:af:fa:7d:5a:59:c1:72:1b:
6e:2c:5a:e0:49:dc:a6:2b:ff:49:02:56:2b:cf:64:
d0:77:dd:0f:07:06:53:92:22:21:75:fe:39:c7:bc:
e7:f3:49:df:60:c9:5a:f9:db:da:a3:e6:3c:dc:36:
96:28:25:8d:97:c9:3e:12:64:52:a3:67:ec:8c:86:
f4:15:ff:f3:3d:05:17:1c:5e:32:56:b7:c9:fd:b2:
08:4e:af:3b:5a:e5:e1:54:ba:8b:2f:ec:2a:db:81:
e1:20:fd:6b:00:14:f9:6a:6f:69:71:9f:7b:18:c8:
3f:86:9f:ab:e9:2d:39:77:77:b5:f7:07:be:e6:07:
2b:1f:aa:71:72:54:3c:db:31:9e:5d:28:00:80:21:
4f:26:04:9b:f1:d7:80:54:c0:24:1c:67:66:e6:7e:
53:eb:95:41:7e:97:b8:f1:02:0b:39:b8:1c:6a:47:
08:ac:e4:48:fa:43:59:b1:21:0b:42:88:e9:81:e5:
37:5d:ca:d6:af:4f:17:ce:e9:35:e3:46:cb:64:00:
de:0a:74:97:bf:06:4f:ff:e2:cb:3b:44:62:bb:af:
00:24:1a:14:a4:3f:6c:d6:83:04:45:8c:84:78:d2:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.165.64.0/18
77.94.240.0/21
79.143.208.0/20
80.65.96.0/19
84.241.128.0/18
185.3.104.0/22
185.66.92.0/22
185.89.16.0/22
185.232.252.0/22
IPv6:
2001:1690::/32
2a00:1280::/32
2a05:680::/29
2a05:d480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20847
39591
201597
Signature Algorithm: sha256WithRSAEncryption
29:c3:41:ad:f0:cc:e9:81:68:a7:87:84:6c:7b:77:d1:51:48:
06:c8:02:aa:27:01:82:4b:1d:2f:89:6d:1a:c8:96:b9:8e:4c:
43:be:5d:d2:8e:b7:ed:a8:b1:63:4c:c2:b2:f0:2c:02:6d:a3:
bc:32:51:29:a0:fc:70:4e:f4:5b:7f:0e:c5:12:05:79:80:c7:
b9:61:bb:24:13:de:03:a6:c5:45:a8:2c:c4:78:91:f5:86:e3:
cd:7c:95:3a:fe:18:b2:b9:97:74:35:3a:46:a1:1a:ce:1b:4c:
36:11:a5:04:e4:20:ff:ce:e6:c9:ee:41:5b:3c:d6:16:fd:73:
61:66:50:1a:66:48:1c:4b:68:ed:ff:58:82:4f:ef:47:26:ee:
0e:32:27:62:51:3a:f7:1d:32:44:ea:fd:f7:2e:2b:4e:e6:0d:
c3:00:64:0d:6e:c1:11:9b:83:c4:63:f1:fa:a2:a7:8b:f9:86:
62:b1:f8:8f:a5:4a:2f:85:69:85:6c:ff:55:41:4e:96:93:a4:
92:f9:00:b4:b3:cb:de:2d:e9:b9:f2:2a:01:6e:f6:03:bc:b5:
8a:1c:b9:8c:7c:80:6f:11:c4:8c:3c:14:3b:7d:87:20:a9:91:
05:16:d0:11:c1:ae:98:96:18:87:a6:8a:61:ae:f0:89:77:44:
58:09:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:13 2026 by rpki-client