Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
File: S0g59fGdvV8HCyEzK1HblgDs_x4.cer (raw, json)
Hash identifier: M5iNVHHrfYOSZqk36EnFTV0oSwbkSigRKHQAmFZ+l6A=
Subject key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB54ED0AA518B20425E022D92161EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.176.98.0/24
IP: 2a12:f3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:54:ed:0a:a5:18:b2:04:25:e0:22:d9:21:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:d5:2e:b9:46:8a:14:75:44:f1:03:ea:15:
c9:ea:84:d7:aa:0e:df:0f:dc:e3:b3:18:30:e6:28:
ba:e4:2c:3e:5a:67:e3:82:1f:6c:3c:4f:f3:60:d8:
82:55:d6:38:93:a6:26:91:e1:83:7f:fd:38:34:2f:
f4:66:4e:e6:a3:bf:26:b5:25:5d:74:a2:1a:6d:af:
ca:63:ca:01:b6:00:7b:2b:22:e9:45:4d:c2:40:bf:
89:b5:7d:54:90:b6:12:52:10:9c:b2:df:9c:33:18:
13:a3:ee:94:c2:5b:13:1c:08:da:2d:53:f1:b6:7e:
e4:3b:7e:bd:44:d6:af:83:43:4f:29:d3:0f:fe:f8:
2b:f2:ba:cb:f0:7c:f8:06:32:1d:76:d2:0c:e7:8a:
43:de:85:e7:17:52:66:fb:10:51:03:b6:33:c8:31:
e0:b2:c3:34:a1:35:d8:06:5e:71:ed:40:cb:17:97:
3b:77:25:c4:7a:15:17:e3:3a:05:b8:9c:5e:bb:a0:
2c:c4:98:71:1f:56:06:ce:db:dc:44:68:7e:61:27:
34:53:f2:82:61:db:31:6a:1b:b5:67:b9:60:01:ec:
a1:70:f4:07:3e:9e:a9:44:d9:83:17:0f:69:7c:1b:
7e:78:8c:dd:6d:b0:75:62:9f:78:5f:22:84:80:42:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.98.0/24
IPv6:
2a12:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:77:ca:a6:4c:48:a0:24:b2:c2:7f:3e:44:88:13:91:47:5d:
65:38:81:c1:8f:ad:42:f3:0e:1e:15:85:f1:2c:17:b5:30:73:
e3:7f:49:ea:d7:25:26:05:a1:11:c2:46:74:5f:17:be:84:9a:
63:ea:b9:aa:ad:fa:11:d0:93:27:b5:8a:ab:5d:c7:21:ae:02:
21:b3:f5:1c:f4:5c:c1:af:df:ec:85:bd:f3:8c:6e:95:46:e9:
11:9f:4d:44:28:d9:08:da:52:b2:44:d8:93:21:8c:a2:c9:d3:
1d:41:fc:d0:50:df:84:50:6b:0e:fc:f7:1d:c5:90:67:e7:36:
9a:97:e6:d3:48:ea:06:36:34:b8:0c:17:b8:2a:b5:c7:b6:fe:
10:84:93:a7:95:26:01:04:b7:64:e2:42:c3:6e:22:c8:c1:8e:
61:a4:18:be:8c:15:25:fe:dd:72:de:d1:0e:ce:81:c6:5b:b1:
9a:c8:94:54:4c:d8:6b:ac:20:bb:6d:b5:f3:dd:48:a0:98:5b:
39:74:37:9a:2a:94:ce:63:74:ad:da:96:12:28:2a:70:55:bb:
bc:8b:e5:fe:0b:73:07:10:bb:3b:55:5d:34:5e:e8:e5:d9:d6:
5c:4d:e0:bf:f6:82:db:aa:c1:e0:f2:62:d0:21:c5:a3:d6:d5:
37:09:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:10:31 2026 by rpki-client