Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
File: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer (raw, json)
Hash identifier: JJ+hOMsOoW6r9FTig30VVAPp+EUBf7BDrXeiYQSM3ps=
Subject key identifier: FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCA007095073BB6115FE36FE1BED442
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48377
IP: 91.209.126.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:00:70:95:07:3b:b6:11:5f:e3:6f:e1:be:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:9b:62:69:c7:55:c5:35:ff:80:79:3a:0a:
cb:9b:08:7e:96:ab:ff:86:48:3b:74:20:9c:06:75:
93:54:66:82:f3:7c:bc:cb:38:93:c1:fd:23:bd:de:
74:21:0d:f4:56:f8:82:fe:f4:55:71:82:f6:e4:66:
5e:e2:82:57:c3:61:26:d0:24:21:fd:c7:ed:9b:64:
76:94:79:ad:e2:5f:56:61:f3:28:31:81:58:fe:5b:
fb:db:25:43:fe:52:a2:9b:8d:aa:73:4c:51:da:4e:
42:9a:dc:00:a2:7f:df:6e:67:cf:07:4f:e0:79:73:
8d:16:59:78:d7:9c:b1:16:f2:ea:7d:26:17:2c:95:
ae:cc:39:a2:65:e5:e0:54:2c:7a:c5:73:17:85:79:
7b:42:94:10:7b:79:82:9a:77:2c:a4:72:32:87:8a:
5f:be:32:c3:20:be:26:9e:1b:01:be:eb:01:29:c6:
59:d2:90:68:ac:e1:c7:e6:d9:b8:b5:81:ff:8b:30:
42:01:88:ec:9f:56:4d:c6:f2:43:c2:e4:42:f5:85:
51:8c:d6:ee:d8:11:3d:c8:3f:1c:ce:7d:2f:cc:9e:
b7:17:31:75:a5:de:58:54:4f:db:e8:0c:9b:10:35:
b9:4d:64:8b:67:e1:15:8d:45:4a:ee:50:f5:db:64:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48377
Signature Algorithm: sha256WithRSAEncryption
9f:72:b2:78:58:32:3e:d2:9f:ca:97:48:28:42:a5:27:10:42:
17:ff:f6:54:3a:f3:c9:e1:9a:00:5d:33:b8:e1:df:47:14:b6:
8e:62:64:8c:a4:53:ff:15:d7:04:09:cc:06:fd:68:eb:4f:4a:
c6:cf:a8:8a:a3:d1:3a:cb:4d:a4:33:a9:fc:6f:41:a4:b1:44:
25:e0:e6:99:c5:20:df:7d:d7:30:1a:bd:9f:15:40:20:90:72:
00:d7:2e:b7:fa:36:4c:0f:da:ab:2d:27:d5:84:14:89:2f:44:
61:71:da:6c:71:5f:2f:f5:3f:2f:7d:21:93:a3:b0:60:68:31:
2a:62:34:45:69:b4:c1:b5:80:5b:05:08:d4:76:11:bd:0c:2e:
4f:e2:65:88:5e:08:4c:ee:57:03:3c:ac:06:ff:81:99:2d:b8:
84:3f:02:6f:00:57:2b:5e:e2:79:13:94:9a:1e:6c:4f:6d:ea:
29:06:b7:a3:43:b7:32:ea:6c:14:1a:f3:9e:61:b7:5d:e5:76:
81:3c:a6:ea:a7:cc:06:af:08:ec:db:75:54:b3:32:60:b8:dc:
88:34:6f:33:97:b1:43:96:8c:d1:2f:96:ef:ff:ce:29:dc:e1:
14:f2:85:c5:5f:02:7c:88:54:f9:91:85:63:27:70:40:f7:6b:
d5:07:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:50:00 2026 by rpki-client