Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
File: 95GOL2KDAdauUZe5M-PqJb-AUBg.cer (raw, json)
Hash identifier: MUUIr/VB+Z82s9ikeouA/Omkd565r/h/eoGfxBakvaY=
Subject key identifier: F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9ABD67B5FFA5454A369F24D32C39D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203992
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:ab:d6:7b:5f:fa:54:54:a3:69:f2:4d:32:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7918e2f628301d6ae5197b933e3ea25bf805018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:3c:31:0b:c7:f0:c7:14:4b:7f:80:e8:23:
23:96:a1:c4:8a:5d:90:bb:f0:6e:91:e5:78:79:0c:
21:e4:fb:05:21:6d:d4:a6:ee:fa:d8:0f:cd:87:a3:
d7:5e:b1:6e:24:65:45:09:74:ff:c5:38:a8:15:9b:
cf:0c:55:9e:a3:ba:1c:5c:04:87:7a:d5:f8:7f:56:
da:c7:50:08:0d:62:92:2a:fe:47:d5:61:d7:b1:ee:
16:a9:e9:ec:5b:9f:f3:75:fa:0e:bb:54:bd:da:24:
42:60:da:62:8b:43:50:52:e6:8e:fc:13:f0:fa:96:
39:3a:d0:f6:52:be:d0:b3:a0:68:f3:d2:5a:22:06:
75:23:85:21:07:85:5d:52:b2:f1:fa:29:a0:62:2d:
2f:47:02:4c:75:0f:f9:51:97:6e:c2:24:9b:72:ac:
76:20:ec:59:90:c2:b4:bf:0b:5c:70:d5:64:7c:81:
5c:42:c3:71:bc:08:8c:2b:a0:92:04:b5:4e:82:ce:
b3:f8:3e:b3:68:30:98:55:3c:b8:c3:ef:6d:82:a2:
66:66:00:eb:33:3b:5e:0f:b4:71:f4:83:08:0b:68:
5d:f6:60:7c:46:df:a9:91:d6:e4:4e:c3:b5:ab:18:
92:4e:4d:76:09:d2:28:11:c9:d7:46:71:72:d7:24:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203992
Signature Algorithm: sha256WithRSAEncryption
7e:03:ab:50:e1:dd:07:ce:f3:62:83:4c:4d:6a:be:fc:23:6e:
80:39:0d:48:e5:10:61:40:73:5d:6e:f4:7d:7b:b0:55:a3:78:
23:ae:33:30:11:b6:9e:f5:f0:ba:4f:c1:be:08:73:6b:eb:5c:
86:67:55:93:2c:05:9d:61:47:99:28:e4:f1:40:b2:b7:51:87:
19:9b:83:dc:b3:b0:ba:17:29:28:c9:e2:ad:91:f9:d0:d0:02:
9e:a2:03:63:7e:c7:fb:28:94:61:3e:ea:ac:9c:d5:d2:23:07:
10:c6:ca:4a:f6:6c:15:f0:d4:88:f3:87:2e:63:fc:bf:6e:75:
6c:d3:b4:85:a2:32:4f:25:32:d0:73:db:da:c9:9c:88:04:b1:
cc:10:ec:34:2f:2b:86:57:57:73:10:33:87:34:08:ba:54:b6:
1f:d8:61:86:eb:1a:18:bc:5c:c3:ce:8d:bd:fe:df:fd:40:05:
1e:41:5a:1b:ae:f2:14:4d:7a:c0:1b:16:73:73:e7:48:66:34:
6e:fe:4a:4b:dd:fa:34:25:12:79:36:c4:92:bd:ba:54:13:82:
45:99:c2:7b:54:ca:e2:7e:d0:e5:21:fe:22:d0:8a:9b:2c:c0:
5b:70:0f:5d:da:d2:60:28:15:2b:32:14:fb:2e:d4:59:87:f6:
31:0d:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:33 2026 by rpki-client