Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer (raw, json)
Hash identifier: kjB3Ja09qIxsi90vkLQ81ghE/Z6Rk5s0Hokv0iWoOXI=
Subject key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0D7884B506D5FFD3867DB50F53A1C179B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Sep 2026 07:47:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202794
IP: 159.200.221.0/24
IP: 195.222.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:88:4b:50:6d:5f:fd:38:67:db:50:f5:3a:1c:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 25 07:47:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:e3:aa:7a:3a:2f:08:7b:ab:a1:92:7d:74:
89:d2:ee:0b:f3:54:b9:7b:f7:bc:9e:0b:c2:4b:64:
66:4e:c7:15:07:96:a3:ce:07:18:6d:2f:40:d3:67:
4e:95:cf:ad:ec:aa:79:3d:c1:38:64:97:1a:c2:82:
dc:d8:09:19:86:fc:06:b4:f3:4a:11:28:96:2f:1d:
9f:e1:4f:00:7f:00:d5:15:e4:17:a5:22:c6:25:b9:
3f:12:2c:2c:1b:c8:61:6e:f1:70:da:0b:f3:29:d6:
82:66:1d:5a:12:6d:76:c1:20:f3:99:93:b0:33:76:
a6:47:84:77:42:ce:a9:c9:66:b5:1a:7b:84:c9:d3:
60:2c:cd:6d:a0:e9:86:5a:57:75:2a:1e:32:20:ee:
c6:63:c9:72:da:50:49:9a:bc:58:a4:58:71:c6:77:
c0:ea:f9:af:46:c7:0c:ec:a3:2c:2f:be:59:8e:0f:
55:c8:40:a0:67:b7:f9:da:48:d0:b1:0f:61:86:3e:
fc:b8:ae:c1:a2:35:92:3f:70:7f:cb:1e:40:d8:6a:
17:af:16:1e:5f:52:d4:b1:c7:c9:63:0d:c9:17:d7:
3c:2f:18:a0:3a:c7:df:f6:d3:66:9a:19:8d:c5:b7:
35:88:05:37:a6:7e:74:3b:73:22:a6:dd:07:41:e9:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.221.0/24
195.222.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202794
Signature Algorithm: sha256WithRSAEncryption
41:ff:9a:02:b9:6f:c5:1d:b8:80:e6:4c:ae:02:d6:9f:33:c6:
cb:34:da:3b:05:ef:b3:83:70:d4:ae:b9:9e:8e:ad:2b:5f:c2:
8e:a1:50:78:4c:80:dd:b8:33:be:00:96:2e:b9:7b:44:4e:ef:
38:d5:1e:82:24:86:64:75:82:f4:bd:76:13:2c:6b:ae:85:ea:
ea:56:9b:03:32:23:5a:24:52:fd:81:38:71:75:00:cb:65:f5:
6b:51:1d:a8:36:33:46:3f:14:c6:95:c6:20:85:d8:07:21:26:
4a:a0:cc:d0:6f:b5:e1:2a:30:53:a8:fc:b8:06:18:fd:7f:e6:
20:47:92:c8:a4:94:27:72:4a:ac:4d:0e:11:9b:9c:40:fe:e2:
4a:2b:12:49:af:38:32:d9:5a:fd:b6:8e:67:4b:73:20:50:90:
6a:2d:6d:6d:8e:5c:8f:f2:06:b4:77:7c:b5:10:07:c0:d1:0e:
45:02:c6:b5:3e:0a:9b:7c:76:c5:33:7f:4b:f3:4e:87:b0:7b:
b8:ee:b7:fd:8d:d4:04:e3:e3:44:41:46:04:15:cd:4b:46:e1:
41:60:38:ea:db:ea:8b:fe:6f:86:73:7e:f7:fd:d2:67:96:b8:
48:78:a5:77:6d:42:5e:72:0c:61:f7:0e:fc:e5:1e:a7:bb:f5:
5e:74:b6:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 30 09:33:00 2026 by rpki-client