Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2R2cwL3tA-ci0RoRnj67vQPEpi8.cer
File: 2R2cwL3tA-ci0RoRnj67vQPEpi8.cer (raw, json)
Hash identifier: QpaGnX8eAOpwd8kSnOx1C2q7za975aiiQDaiuuo5b3s=
Subject key identifier: D9:1D:9C:C0:BD:ED:03:E7:22:D1:1A:11:9E:3E:BB:BD:03:C4:A6:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B40D8D4A9904EB4502BD4B06FA1836E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 10:26:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213045
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0d:8d:4a:99:04:eb:45:02:bd:4b:06:fa:18:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 10:26:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d91d9cc0bded03e722d11a119e3ebbbd03c4a62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:d8:78:d9:91:8f:61:26:ba:26:75:8b:4a:
58:64:0e:97:be:73:a1:bb:32:b5:33:d8:bd:2a:bd:
51:0f:1f:c4:cf:5f:82:d0:26:9c:38:3c:4b:af:1b:
96:75:29:1b:e6:2a:d4:88:26:38:51:b1:c5:25:b1:
f5:f3:c9:9e:d2:ba:4f:5a:ca:e1:10:e9:c4:ab:a6:
d6:f3:9b:07:20:52:6c:4c:61:ba:4b:cf:30:5c:d5:
b3:44:06:af:e3:92:21:16:33:14:4b:b6:2d:59:98:
49:78:bf:bf:1c:da:5a:08:d3:86:cf:f2:72:80:9f:
ce:cc:ed:f5:c4:89:15:80:d4:58:22:f9:8c:e9:05:
79:d9:98:a5:c5:74:a0:34:75:ac:66:23:94:b9:78:
ea:83:19:6e:9f:6f:df:79:21:1b:6a:a8:b9:42:98:
63:69:89:74:1c:69:4e:ff:70:e5:26:9e:b6:29:67:
68:28:85:2f:36:4e:4a:12:7e:58:9c:0d:fc:f1:77:
db:2d:1e:af:bf:b8:56:6b:27:3d:bf:82:de:15:a9:
7f:23:fc:49:08:6e:33:6b:55:de:62:92:4e:6d:d6:
91:4c:b5:00:e9:8c:81:b5:ff:e5:b0:84:1d:85:94:
ee:a4:1b:9c:97:fc:81:8c:cc:d4:24:06:0d:f6:5c:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:9C:C0:BD:ED:03:E7:22:D1:1A:11:9E:3E:BB:BD:03:C4:A6:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213045
Signature Algorithm: sha256WithRSAEncryption
6a:dc:6a:ba:22:01:f8:c6:10:70:4e:6b:c2:0d:a0:da:f8:9e:
a1:4c:48:1d:b0:51:72:40:0f:00:dd:be:b8:e6:15:e5:ba:f7:
74:50:94:91:8a:5d:2a:a4:59:ce:0e:79:ab:7d:63:97:07:82:
a0:07:14:d2:db:c0:03:e0:58:fe:ad:74:c6:72:af:12:d9:60:
05:cf:2b:17:06:89:43:ae:66:56:f9:a2:ad:47:fb:47:19:6e:
52:0a:05:40:a4:bf:d6:85:92:98:42:8f:41:35:61:a4:e5:6e:
73:57:a7:35:28:0a:f7:36:01:43:d8:cb:e2:76:c0:44:7e:93:
c4:ac:e0:99:e3:e4:ac:73:5f:8d:62:ef:c9:89:5d:fa:87:47:
6c:b1:94:f8:10:ae:e3:31:89:6d:e0:00:cd:78:e5:c6:e4:30:
ba:76:53:77:19:15:67:b5:c1:a6:91:43:1b:ef:9c:1a:6b:c7:
d5:35:99:42:c8:17:4e:27:2e:6e:e5:d0:d4:a0:84:f4:18:47:
ce:e4:2a:90:f8:af:c1:32:23:29:a6:c6:f1:12:c5:ce:ac:ea:
9b:3a:5d:e8:4e:af:18:01:37:e8:06:01:62:c6:23:1b:ef:e3:
91:c7:4b:8a:16:8d:3e:93:dc:17:11:b9:51:8a:83:55:c6:9b:
a9:72:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:19 2026 by rpki-client