Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
File: 0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer (raw, json)
Hash identifier: 7fsnTeYZcfjMToxfCgpma8Zu9kQIKXA4ZvfVNN/Ffas=
Subject key identifier: D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01993801F6A050D15A68C57393E1225DCAA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Sep 2025 09:01:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214671
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:01:f6:a0:50:d1:5a:68:c5:73:93:e1:22:5d:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 09:01:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d062a26a23db57f3d04090c64cdc62d54d40a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:05:f5:e2:ce:91:29:fd:cc:a4:dd:6c:2a:
67:87:48:46:09:ff:f6:f1:27:eb:8a:7b:5f:11:a9:
68:08:0f:8b:cd:d3:45:aa:b3:e0:a6:51:39:0a:b4:
c5:72:65:f0:71:f9:d2:4e:92:39:df:fb:ad:e3:4b:
66:13:e9:cd:11:c9:83:4a:4c:3f:d6:f9:22:60:9d:
57:fa:7c:40:02:c0:4b:7e:0a:71:a5:21:b0:b4:37:
10:ea:71:44:1b:d4:ad:fd:4c:7b:02:3f:72:e2:39:
51:49:b8:44:27:41:d9:2a:93:13:43:23:b5:45:4a:
cf:61:9a:0a:24:e2:61:99:65:75:92:ca:fa:f9:7e:
49:14:48:6d:d1:b3:50:78:55:29:63:46:66:3d:f8:
6a:e9:68:62:66:9a:b3:15:9f:99:c5:db:77:26:89:
3c:79:92:16:1b:c6:82:db:45:c4:73:4c:06:51:67:
07:9a:ba:2e:a2:6e:96:9c:c4:1e:22:28:82:f4:22:
4b:6b:f8:75:96:1b:5b:b9:59:1c:97:5f:9b:9d:1a:
2d:4c:fb:6f:84:93:16:4b:4f:f8:bb:62:0c:91:9d:
69:d5:6b:9a:03:f5:dc:f0:81:92:7b:9b:6c:ab:cb:
91:a7:18:6e:64:0a:6b:8a:55:32:34:20:a7:59:8d:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214671
Signature Algorithm: sha256WithRSAEncryption
03:70:3e:2a:22:2f:f7:77:66:11:46:5d:0a:ed:d9:02:a6:ad:
f1:f0:94:34:0a:fa:c9:7d:57:a9:50:51:60:eb:d2:20:68:a9:
d8:8c:08:8c:56:a7:05:45:fc:19:38:20:29:9c:69:e0:bf:a9:
d6:c7:3f:5e:62:70:b0:a1:84:0c:58:94:1f:7c:c0:80:d2:c4:
0b:3c:0d:9f:5c:0e:14:8e:54:a7:96:cf:f9:90:db:3c:63:d6:
fd:4a:14:85:7f:e4:57:50:d4:44:9f:73:2a:a4:cd:6f:73:7a:
ec:f8:56:cd:a9:07:6b:97:08:36:32:79:52:16:44:b8:ed:7a:
d8:01:46:7d:32:55:4b:be:36:53:28:59:2e:90:42:57:74:14:
3e:11:ef:01:ef:6b:f3:cb:5e:b4:aa:ee:0e:b6:ad:93:a0:e3:
13:a2:5d:eb:fb:9f:16:31:51:10:ae:1a:de:36:b1:9d:0b:ba:
ac:b7:a3:0c:43:91:7a:a3:a6:29:1a:8d:b1:36:6c:a4:9d:00:
60:89:e2:eb:09:5e:1a:0b:f9:21:fc:f8:d7:d2:20:26:67:41:
cc:4f:54:3b:62:e8:fc:41:89:b3:8f:bc:37:6c:5a:9e:dc:f5:
c1:17:8b:00:93:96:8a:2c:14:2f:51:4b:ec:76:f8:ef:90:82:
6b:e5:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:46 2025 by rpki-client