Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
File: k47pUc2rw86AXsjfC_NAO9-pxlc.cer (raw, json)
Hash identifier: REo9V/5Xe6IAcJ6LsOfS9sScoTzVHp0xj/DPw6349Os=
Subject key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5D03E5E9F8BBD6D28964AEBD521E12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:20:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206620
AS: 208206
IP: 45.154.20.0/22
IP: 185.181.12.0/22
IP: 2a0a:bb80::/29
IP: 2a0f:9f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:03:e5:e9:f8:bb:d6:d2:89:64:ae:bd:52:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:86:8f:2e:4a:ef:31:6a:a3:d1:dc:dd:95:
a2:95:e9:ed:32:90:5e:cd:f8:a5:05:3a:c8:2d:0c:
ac:1b:5c:61:ed:af:35:b0:14:57:cc:4f:93:bb:4a:
f7:34:ca:99:40:70:1b:bd:6a:15:00:8c:8a:32:b7:
98:c9:7d:8e:7a:e8:0c:1c:23:4d:33:c7:df:63:cf:
aa:71:85:09:1c:b5:02:63:14:ce:03:26:6e:97:92:
10:7a:b3:7c:ae:23:49:2e:13:fc:c1:7e:1b:b0:4f:
34:40:95:7c:53:08:c0:63:7d:30:18:5c:d7:9a:83:
72:92:2c:10:b2:77:be:83:a2:5e:d4:e1:ec:92:69:
71:ab:22:7b:4b:25:fe:36:b9:d3:74:d0:28:31:59:
0f:74:b3:26:42:f8:f7:01:49:a5:ab:2a:fe:9a:c2:
67:50:ce:e8:32:57:ab:03:d3:03:b7:f1:79:3f:80:
8e:5a:2a:1a:74:ad:9f:72:88:fc:30:d5:e4:dd:c4:
62:6c:ea:9f:11:d6:bd:7c:53:00:6c:ea:61:f7:be:
f3:f7:98:ac:9e:24:42:59:53:44:38:d1:67:7d:2f:
76:b6:c4:53:8e:8b:43:b6:1b:f3:b9:ec:c0:74:00:
0c:3b:b2:af:98:dd:dc:cc:f4:01:8f:51:36:24:a1:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.20.0/22
185.181.12.0/22
IPv6:
2a0a:bb80::/29
2a0f:9f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206620
208206
Signature Algorithm: sha256WithRSAEncryption
22:27:9d:97:7f:d8:94:fc:c3:36:14:b4:bd:47:46:68:79:44:
d1:c5:20:e5:cb:1b:15:14:0c:70:cc:bc:82:84:1c:5a:2e:41:
b4:c9:3a:d4:dc:14:dc:95:82:3f:ae:f4:d7:a9:7c:c1:04:0b:
f0:18:e6:0f:d6:76:46:93:e0:1b:3a:46:6b:4d:76:08:61:df:
51:0d:4c:74:f4:15:f5:91:93:2b:de:ff:84:1b:e5:ba:de:76:
74:f3:66:6b:82:d7:a5:11:6a:69:a0:2a:93:0f:8f:21:15:b1:
b5:17:bd:4a:9d:dd:9f:fe:14:11:e6:95:f8:6d:a5:d7:74:83:
fa:bb:b2:aa:fd:7a:88:06:d4:a3:3c:62:ae:e9:39:9c:89:57:
ab:d5:40:8c:0e:36:9b:7c:f7:1e:27:36:3c:73:4d:bd:ae:fb:
b6:b7:37:a8:2f:37:82:ed:f8:e2:7a:55:a7:51:8c:73:64:ea:
cd:84:e3:bf:4f:55:34:38:b9:cd:aa:44:09:e2:0a:dc:53:98:
09:ac:f5:67:67:01:ee:42:77:5b:f5:37:84:cc:fc:b7:df:c2:
31:3d:0d:39:56:ce:16:e7:61:65:d8:d9:a7:43:8b:dc:f2:d7:
95:27:79:b4:fd:24:a5:67:f0:8c:75:17:4e:f8:a9:df:57:b6:
d4:e6:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 04:59:18 2026 by rpki-client