Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
File: T0d31JE06rdaecERgyrX7OcmcUU.cer (raw, json)
Hash identifier: AdytbgXSMLra1tpBKb7GdIkFqaOBf3b6/gpY3EKKMiQ=
Subject key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EF464A442319FE44F527D33F3F079FF72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jun 2026 12:11:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215423
IP: 193.33.16.0/23
IP: 193.176.36.0/24
IP: 2a14:bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:64:a4:42:31:9f:e4:4f:52:7d:33:f3:f0:79:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 12:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f4777d49134eab75a79c111832ad7ece7267145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:0a:b8:0f:23:8b:c3:cf:49:87:f1:2d:69:
48:0d:c0:b0:11:6c:f9:45:94:7a:cb:e0:37:8f:80:
68:dd:2b:41:84:64:f0:94:86:f2:7f:b5:95:74:7e:
ef:0b:56:5c:89:ef:0d:e9:95:0e:ad:f4:f2:1f:7d:
22:25:93:f4:08:83:83:26:ea:00:3d:af:29:43:6d:
31:c6:19:e8:ec:1c:c8:bb:34:db:b3:14:99:bc:b9:
ad:a9:24:c1:04:2a:2c:e6:c8:3a:47:5f:2e:6e:0f:
d2:a4:7f:06:41:5e:18:3e:b8:51:a4:3c:0e:76:18:
b9:cc:33:53:04:d3:f3:f5:2e:f1:4b:cf:de:fa:0f:
2e:97:64:70:a7:81:ab:c9:fb:e2:ae:e5:8d:67:71:
67:58:bf:58:62:66:ec:56:ee:f0:86:77:12:4a:8e:
12:b4:d9:5c:a8:97:a2:d6:f0:d4:a8:73:32:fe:53:
dd:26:22:f4:0c:49:85:f1:09:f5:96:58:0f:ad:df:
a6:4d:a4:95:68:8d:40:4a:6f:28:a2:2c:54:60:37:
02:0e:b0:e0:b2:0b:89:41:81:4a:0a:b9:9f:70:53:
87:b0:38:a0:48:a6:00:62:5f:bb:d5:0f:f7:9a:a0:
25:0a:96:8b:72:a4:cd:35:fb:d4:98:89:da:b6:2b:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.16.0/23
193.176.36.0/24
IPv6:
2a14:bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215423
Signature Algorithm: sha256WithRSAEncryption
8d:46:23:5a:19:8d:6d:b1:d5:58:17:fa:cc:a9:bf:e0:e0:61:
fb:8b:04:3c:8a:a4:b2:9e:ab:c5:87:54:3a:10:d0:13:39:5b:
c2:56:04:ae:70:e0:55:d1:fc:08:7a:98:98:9d:1f:0e:7d:b6:
2e:21:ef:98:62:97:7d:78:0a:8f:0a:a3:f7:33:97:67:8c:88:
50:ae:a8:b6:bd:9b:ed:c8:d3:42:4a:4c:98:ec:6a:3f:2c:eb:
0b:7c:ca:b5:38:9a:43:74:2d:65:23:6f:22:61:e7:f6:a8:2e:
16:87:6b:d5:5c:4f:33:d7:64:9b:3e:19:9e:e2:b7:82:82:47:
57:82:07:f6:1b:95:f9:63:ce:62:eb:1e:06:3d:aa:70:07:12:
ae:9c:68:14:0d:2a:9e:8b:5b:b0:d6:0e:94:92:0a:8a:ff:00:
f0:ef:c8:a8:ca:58:6b:87:7b:6f:3b:7a:26:af:e9:3e:e8:da:
81:d1:f8:84:a9:0c:17:a5:71:03:c7:f0:30:c3:ac:16:c7:28:
11:da:3e:cf:43:5b:02:63:d4:6f:9c:04:b8:91:85:21:3e:b6:
d0:07:cf:c7:a5:3a:6e:05:4e:2f:1f:0d:90:c1:46:e4:03:4d:
02:01:cc:f1:15:db:8f:ae:8f:ed:00:d6:b0:b6:2f:b4:97:48:
6a:37:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:33:57 2026 by rpki-client