Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.cer (raw, json)
Hash identifier: IMncsjVfY3PLJahpVvq4Y7UsNVInW0LBqZ6tABNqVTY=
Subject key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DAEE479FDB8AB2CE20F72C4E34E40CC19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Apr 2026 07:15:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213678
IP: 117.55.198.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:e4:79:fd:b8:ab:2c:e2:0f:72:c4:e3:4e:40:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 07:15:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:4f:a9:cc:8b:f2:77:75:67:6e:cd:5e:90:
a2:c8:bd:2f:05:ab:01:67:d1:77:d6:36:54:4a:3a:
f3:af:b3:ea:a4:89:4f:a8:03:58:05:72:54:43:eb:
6e:14:60:26:9b:50:c1:87:1c:e4:14:eb:70:fc:d7:
e4:97:24:21:b8:8d:12:30:88:ea:ce:ef:1a:99:a9:
da:b1:6a:27:54:8a:41:2a:bb:30:c8:b7:b5:3d:2d:
78:c3:1b:60:3d:b1:be:e1:06:6f:08:87:e9:88:de:
00:30:ab:09:64:21:25:bf:f0:7d:28:c3:58:b3:36:
d3:5e:8f:72:3d:40:d3:e8:1a:cd:f5:a1:c3:af:42:
b4:54:81:e1:5f:75:c7:32:6a:9d:da:ee:86:2a:c6:
a2:57:75:bd:e7:ff:ef:90:30:b6:f5:dd:ea:23:e5:
f1:e6:cc:34:db:8a:5f:0f:30:dd:d2:b9:b5:21:2a:
f8:bc:16:a5:e6:37:0a:70:53:2e:e9:77:14:79:8c:
3c:b4:c8:41:94:37:fd:f8:85:b5:8a:21:32:b9:6c:
0c:c3:5b:2a:c8:7b:8d:eb:85:4b:f1:c2:34:34:65:
d0:c4:b9:17:12:d9:f1:df:c6:dc:0f:fe:fa:2b:3f:
b5:b4:33:4e:d1:89:1e:bc:f9:05:b3:3d:55:4b:ee:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.55.198.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213678
Signature Algorithm: sha256WithRSAEncryption
92:b7:b2:9b:f4:d1:3d:39:f6:0f:dc:6c:10:5d:a6:7d:7a:9e:
56:aa:d6:9e:90:e9:aa:34:f8:5f:07:97:b3:c7:0c:62:71:1c:
d8:27:ac:ff:16:84:7a:ef:de:bd:3c:1a:fd:1a:30:63:6b:01:
15:4a:c6:d9:f1:cc:ba:36:b2:43:be:a6:44:1f:ea:24:8f:4e:
17:42:0b:2c:06:0d:ac:e1:ae:e3:2c:cc:05:37:d5:2e:32:6a:
e2:5e:1c:fc:9a:c6:52:a4:9c:e7:2a:5a:d8:c9:16:14:d8:4a:
aa:f9:03:29:cb:af:45:09:b0:45:55:4d:4c:55:ca:c1:25:04:
bb:f3:9b:7c:bc:00:7f:54:24:c5:70:1f:42:09:7d:db:68:b1:
e1:b3:dc:c6:e1:1d:24:ac:03:04:1b:a3:6d:14:75:49:cf:6d:
33:06:bc:c4:5b:a2:cc:c0:80:6d:2d:bd:e5:47:3d:91:b5:b3:
26:69:86:fc:05:dc:73:46:ba:93:b8:90:25:22:7e:74:15:2a:
af:94:1e:da:ac:98:f7:35:79:65:72:d5:1c:fd:44:80:62:e8:
91:81:d9:ca:48:c7:f8:33:e0:02:53:2f:58:35:3f:02:f0:df:
61:b4:00:f3:37:a9:5c:2e:7f:87:45:4c:cc:68:74:a2:ee:a9:
55:e6:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:08:34 2026 by rpki-client