Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.cer (raw, json)
Hash identifier: esCQoDMOmiR+PzEBXPy1DNGigWoI/dvzEqzugjr7WFU=
Subject key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DF3BA985E292EF87292E043C1FEF8B89C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 May 2026 16:03:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215437
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:ba:98:5e:29:2e:f8:72:92:e0:43:c1:fe:f8:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 4 16:03:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6806801aa819c8a1ca8898d159894909ce82829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:c4:d0:60:fa:e6:e2:7b:05:7d:81:ef:5a:
d2:62:a9:8f:6e:47:04:b1:57:60:cb:a1:09:8e:90:
fd:d4:db:a7:a7:93:dd:e3:77:40:d5:e1:ad:c8:28:
2a:e9:d8:33:87:ee:4f:8c:ad:6f:f0:91:be:d6:4a:
09:55:ff:5f:c9:5a:16:82:d9:90:85:11:06:d1:38:
d9:2c:74:b5:a6:d6:98:23:94:a1:b1:c8:22:88:8c:
34:ec:19:56:66:69:42:98:0d:98:d8:3c:54:49:fc:
8e:d5:c6:e6:b2:4b:2e:6e:01:e1:15:a1:34:3a:8e:
ad:34:94:d3:45:3a:39:b9:34:40:82:a3:df:9e:bf:
15:be:5d:70:8a:55:61:75:53:99:4c:00:a6:ab:23:
f2:3d:3e:9d:61:32:02:96:89:27:e8:b9:0e:aa:9d:
ca:79:46:aa:51:74:aa:68:e1:2f:31:f7:3a:40:50:
7f:9c:bd:f0:1a:fa:62:76:be:61:24:aa:24:30:fa:
19:c8:ea:1f:72:0b:76:f1:f9:06:af:e4:9a:4b:04:
0a:6a:e5:e5:36:6f:d6:0b:e5:5a:69:6b:b8:b7:e8:
72:5d:36:42:9f:4c:10:d5:e1:58:3f:a1:87:ef:72:
5a:51:af:74:d4:9a:03:6a:2b:b9:f9:e3:1f:68:c7:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215437
Signature Algorithm: sha256WithRSAEncryption
89:ad:8a:7a:df:94:c5:af:27:a9:09:08:72:52:5a:c0:9d:b5:
0a:7a:34:82:df:05:b0:e4:23:05:35:42:42:0c:e1:d0:a7:4d:
b1:9f:7c:36:02:bc:05:9e:76:d6:82:9e:5b:a8:2d:db:d7:80:
d8:d6:36:cf:9b:ae:9b:e3:05:c8:9c:93:7d:74:43:9b:44:8b:
5f:8a:ba:c6:40:07:94:f2:0c:21:fc:b7:55:cc:5d:3f:b9:ce:
56:a6:40:e8:23:9d:27:04:ba:98:3e:23:4e:ba:b7:5e:2b:51:
4b:42:ef:63:80:60:ca:cb:82:49:8c:17:9e:2b:79:87:54:40:
78:df:80:14:17:9d:27:23:f3:eb:1b:ae:c1:5d:d2:bb:c1:f2:
84:d6:d8:2d:6c:40:f5:39:1e:5e:28:6c:02:89:97:be:4b:91:
9d:22:d5:28:5c:dd:45:1b:b1:fb:50:73:da:8a:de:6f:4c:07:
a6:5f:f1:96:fc:4d:53:ce:dc:03:f1:19:ee:16:27:a0:41:7d:
d2:de:1f:05:b0:24:60:c0:c3:85:b0:05:66:a9:f8:b3:52:bc:
af:91:81:25:3e:4b:fd:9b:41:02:01:c3:47:ea:77:26:d7:50:
4c:ad:22:62:1d:04:1e:9c:8a:4f:5d:be:2d:68:18:2c:4c:f9:
1c:b0:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:56 2026 by rpki-client