Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0EedyjtSDCAfVsH4Ib6uMkfatIM.cer
File: 0EedyjtSDCAfVsH4Ib6uMkfatIM.cer (raw, json)
Hash identifier: cJ8OyYjTVor1mLTkK7iDIA/+5Z6k4ROXOIeCz97T3D4=
Subject key identifier: D0:47:9D:CA:3B:52:0C:20:1F:56:C1:F8:21:BE:AE:32:47:DA:B4:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0D3E0608346F0675EAA54743E79392BD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/010a93-fd48-4c41-9150-cdfb1dd0b94f/1/0EedyjtSDCAfVsH4Ib6uMkfatIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/010a93-fd48-4c41-9150-cdfb1dd0b94f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Sep 2026 14:44:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203967
IP: 87.199.156.0/22
IP: 212.108.121.0/24
IP: 2a05:8d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:e0:60:83:46:f0:67:5e:aa:54:74:3e:79:39:2b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 14:44:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0479dca3b520c201f56c1f821beae3247dab483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:f0:e8:18:15:08:bf:f5:f7:ac:ef:63:19:
c6:b4:1a:50:20:7c:ff:3e:87:c5:8b:16:0e:4a:20:
d3:12:44:7d:d3:71:f6:b1:89:36:a2:6c:3c:c4:3f:
ae:b6:2c:de:35:98:cb:8f:c6:ac:02:c6:45:1c:15:
63:6a:23:5d:4d:c1:7f:db:77:ce:5c:04:4d:ab:4c:
30:80:9f:8f:9d:50:98:62:2b:bd:23:9c:7a:f3:53:
7c:85:bd:ed:a2:bc:54:ba:58:87:75:aa:77:7d:07:
12:1b:1b:a0:e0:38:45:a8:21:26:7a:24:db:82:68:
fd:b7:39:91:4e:61:8d:6d:1c:4a:5f:e9:a1:d0:11:
d0:78:b6:35:28:be:02:27:dd:ee:4d:b4:ba:a6:7f:
20:01:78:9d:5c:15:97:3e:a2:a1:bf:77:12:e2:db:
4f:d9:0a:02:c6:87:96:d9:f5:d9:bc:4d:2b:54:1a:
31:84:06:76:4b:86:8c:56:ae:96:f5:c6:75:ff:39:
54:07:ef:64:65:91:c0:3c:4d:b7:f1:a0:c4:fc:3e:
03:62:90:df:c9:ce:7f:a3:f6:e2:a6:6e:fd:ca:8a:
7a:34:18:ff:f2:90:4a:0a:dd:2a:15:52:9e:8c:1e:
55:b6:f4:4d:a7:3d:64:f3:bd:17:1c:c6:45:0d:82:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:9D:CA:3B:52:0C:20:1F:56:C1:F8:21:BE:AE:32:47:DA:B4:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/010a93-fd48-4c41-9150-cdfb1dd0b94f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/010a93-fd48-4c41-9150-cdfb1dd0b94f/1/0EedyjtSDCAfVsH4Ib6uMkfatIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.156.0/22
212.108.121.0/24
IPv6:
2a05:8d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203967
Signature Algorithm: sha256WithRSAEncryption
57:47:f5:6a:44:d4:1d:5d:82:f3:50:96:ef:0e:a0:61:1c:88:
88:b2:a1:d7:0b:a8:8c:4c:d2:40:02:ee:87:fa:bb:d9:a5:9b:
6a:2e:d8:93:03:86:cf:04:89:2c:0e:6e:3a:c1:25:91:db:f6:
c5:5b:a0:89:af:3c:0a:08:74:6a:fd:bd:25:aa:ec:92:11:4c:
9b:77:15:d6:4c:51:0c:e2:3f:2f:45:28:56:f3:67:20:ec:8e:
5a:98:1c:1c:51:12:02:33:22:d9:6f:d0:56:a4:dd:2f:54:6c:
94:3e:3b:0b:63:40:67:66:c2:81:34:6e:ba:58:c7:d1:89:87:
bf:be:db:00:1c:1a:9a:06:cf:db:ff:aa:de:10:87:8d:9a:07:
9c:65:68:09:e8:67:23:85:80:a2:c2:fd:c9:27:9d:e1:0a:ec:
70:b1:0a:bd:84:5c:4f:79:4b:60:63:2d:10:3b:d8:10:6f:10:
3c:38:63:e2:dd:ae:0e:1d:3a:f3:f6:dd:0c:f1:23:97:f3:36:
cf:92:96:77:34:a9:a4:45:33:e5:1e:da:c6:48:65:3f:1c:f6:
21:54:ff:f1:ed:1d:2f:22:a9:ca:12:8a:de:a4:36:c1:fd:f7:
18:3b:3c:ba:9a:4d:d4:98:14:13:40:87:68:c6:84:65:f3:d2:
d3:97:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:23:20 2026 by rpki-client