Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
File: A2buGcyLQ0A-42qUouguQBnjUdE.cer (raw, json)
Hash identifier: olNz7OW2EBFoVT25qBk9H6Lk5b0ja+CVEXABLlKrhxM=
Subject key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F4C3C39BB2C77410B7717B7F5F0C1CB11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Jul 2026 13:34:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 141.24.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:3c:39:bb:2c:77:41:0b:77:17:b7:f5:f0:c1:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 10 13:34:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:78:4a:6c:64:33:07:e6:2d:96:35:3a:de:
05:1d:f1:b5:4b:4b:b7:40:6d:3e:0b:e5:ba:59:89:
da:60:05:6b:8a:dd:1a:36:e7:70:b0:1d:a8:d1:71:
05:14:f7:77:ed:a7:90:36:60:9e:10:ff:73:96:bb:
70:d2:e6:d3:6a:62:60:40:d0:17:53:4f:69:eb:8a:
38:d6:e2:2c:e9:62:8c:ba:47:9b:b3:b9:d3:96:a5:
a4:64:f5:90:38:00:98:eb:44:17:93:bb:e0:1d:aa:
bd:b8:3f:7b:31:71:72:9a:ac:e6:6d:a5:9f:8a:7b:
c3:18:f9:7f:57:56:ae:8e:37:ad:c1:db:fe:58:e4:
85:63:a8:6d:ae:3d:2e:61:5e:f4:36:8a:d0:65:6f:
cd:e9:c8:77:41:d7:6d:10:c9:1b:5e:cd:8d:af:43:
12:01:65:6c:b7:dd:ea:eb:60:47:01:f3:af:7a:1c:
f8:27:06:4d:6b:10:57:ce:c1:98:e3:c2:fe:35:fd:
31:08:f9:de:35:b1:aa:b6:ab:45:7a:7d:7b:d5:4f:
e8:e9:62:2c:52:6c:24:8e:37:2a:f7:d8:f5:9c:23:
b0:eb:23:36:f7:9f:07:16:f7:83:42:e2:36:79:2e:
3a:bb:4e:6b:d1:51:b3:d1:76:0c:68:07:7b:01:e3:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:d7:2b:be:a0:cb:d3:56:42:45:a7:2e:1e:97:a3:c0:24:9c:
69:a0:f7:cc:9b:7f:b9:bc:d9:d3:e9:61:07:97:10:53:38:96:
ea:f5:84:eb:47:be:af:3d:b3:34:4c:b7:81:7b:9e:e2:d7:38:
76:f6:29:25:3a:52:97:7a:fa:08:db:e0:e1:8d:90:55:60:0c:
e9:e9:fa:8c:a9:33:dd:66:d6:f5:56:56:87:48:d7:1c:8f:5f:
55:8b:62:38:88:96:5f:81:db:ce:fb:c8:00:90:d3:18:c7:62:
dc:f6:73:44:14:90:29:de:f3:06:09:c5:08:ad:5b:6a:ad:a0:
c0:00:df:35:16:51:71:43:3e:e2:f9:49:14:17:d3:e8:25:11:
c2:aa:a2:ef:d2:89:79:45:05:d1:3d:26:35:b7:97:75:41:d6:
d9:30:81:f7:ec:74:0e:13:41:f9:50:ec:6f:f9:6e:18:a2:33:
78:23:20:a7:b0:29:c6:0d:ee:79:b0:45:f8:0f:e5:98:0c:19:
b7:bf:c3:48:2f:34:47:18:0a:6b:ff:24:3d:a8:d3:6c:df:a8:
a7:8f:d3:ef:69:c5:eb:0d:4b:8f:c0:88:c4:59:78:4a:83:1f:
be:9b:50:bc:2d:3a:e8:3a:47:8b:d8:63:35:1b:2e:c7:7d:68:
b0:85:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:57 2026 by rpki-client