Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
File: p4kEQNrxw6w4dz6FIVES90twYjI.cer (raw, json)
Hash identifier: 3AKbku4hM7myUUeYxGY56mWX8wO9+8q7vQnSbhBoawI=
Subject key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB85DA7128FA8FF21C3C55F3E3CB7E21E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 10:21:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 213.239.128.0/21
IP: 2a12:68c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:5d:a7:12:8f:a8:ff:21:c3:c5:5f:3e:3c:b7:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 10:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7890440daf1c3ac38773e85215112f74b706232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:78:a6:27:a2:86:b2:43:c4:2c:38:09:d6:
e2:71:53:85:75:09:51:cf:f6:89:0f:39:d4:13:a4:
ec:c2:fd:9b:2e:55:f8:d2:48:db:43:02:38:2b:0c:
1a:c0:00:58:b2:fe:5a:59:ff:31:3b:ce:ac:c0:15:
1a:dd:3f:d3:3e:37:ba:95:60:8f:b6:84:cc:08:ff:
56:6c:a5:58:1a:94:e1:39:f4:91:63:e1:d7:b5:2f:
77:55:16:da:d2:29:70:38:5a:94:ad:a2:ae:fb:52:
ad:48:43:0e:b9:51:4c:9d:91:27:4a:c6:cc:b9:16:
cf:e4:7c:5b:89:8e:1f:14:3a:87:67:a9:fe:83:97:
0c:2f:da:4a:86:f1:a5:26:d6:de:a8:26:d4:14:8d:
d7:16:4b:3c:b3:f6:48:35:b7:56:f6:73:ef:b2:40:
99:e8:85:51:e0:3c:0b:0c:2c:10:e0:08:09:af:bf:
c3:b0:a3:a2:b2:53:e2:05:13:aa:16:1c:11:08:01:
1e:c0:ff:4f:1d:be:e7:9e:c4:f8:35:d8:53:9c:38:
18:c2:09:13:b8:b8:6f:8b:ec:74:d8:c4:ea:b3:06:
c5:c0:01:6b:f9:40:5b:20:a3:28:08:9f:57:4d:c2:
0b:23:b9:bc:e0:64:97:0f:42:f5:9f:6a:b9:9b:8e:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.128.0/21
IPv6:
2a12:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:05:05:bb:ba:e5:13:29:07:aa:3d:8a:77:38:16:41:40:99:
3f:cd:00:a3:43:10:2b:c2:79:f9:ab:18:5e:7a:e9:94:c6:0f:
4f:68:65:7d:9e:6f:e7:69:24:20:dc:1f:7b:e1:d2:47:f1:6d:
1b:13:20:e2:8a:16:48:3f:6b:c7:78:8c:82:9c:56:72:83:e5:
58:11:aa:54:f9:cb:ff:96:40:47:38:84:98:59:95:07:47:c3:
11:3d:c7:c3:66:d2:4a:6b:0b:75:a1:e9:89:ec:95:97:93:1d:
a7:3e:ee:97:2d:1d:67:ee:ab:01:a8:d5:98:56:06:d1:62:2a:
36:0a:f3:fa:b9:eb:4c:fe:3b:1a:52:88:f1:65:9a:cf:2a:04:
7f:57:b5:21:0d:26:a1:45:29:cf:ab:1d:ea:64:b4:52:01:7e:
84:4c:bd:81:a8:db:35:86:b0:8a:60:ce:ad:e1:cd:4a:12:ea:
19:cd:e1:e1:cb:3e:6f:8b:ac:f4:c4:18:e5:fd:b7:4b:af:5b:
3e:b1:07:3b:b9:de:b3:b4:82:c9:6a:ed:ab:29:02:b9:c5:11:
83:c9:5c:52:b3:98:bd:f5:80:c7:ad:6f:f1:dd:e9:41:89:4b:
f8:bc:3e:54:60:35:44:9a:ac:42:ab:48:65:a6:8e:ad:4f:5c:
c6:62:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:49:03 2026 by rpki-client