Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
File: A8rxExkhh6RIXy4twOzIt2ZCSU8.cer (raw, json)
Hash identifier: oB1p3LQ59/Zji1CiMatZvcD6elujWWYDQfOBomjUq1Y=
Subject key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1989A118DEA3CA01AA3FD134E42EAC60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 17:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219308
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:89:a1:18:de:a3:ca:01:aa:3f:d1:34:e4:2e:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 17:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:0c:ed:93:e3:63:a1:60:c5:1e:ae:e8:fa:
59:b0:ab:8d:bf:f2:00:a3:9f:cb:a6:23:ce:47:04:
5c:93:e6:50:c5:21:07:bc:06:de:de:a9:e8:48:1d:
47:1c:14:28:b8:2e:38:56:10:29:19:32:2e:c2:d2:
1b:83:ad:c5:8a:e5:12:e1:01:ad:fe:b7:03:cd:ac:
7d:7f:08:34:8e:96:a4:16:56:3f:b9:76:28:96:9a:
bb:6e:a2:24:cf:38:a1:c9:8f:69:42:be:4f:06:69:
c9:30:de:c2:b9:bf:80:9c:a3:70:23:cc:90:13:5f:
c9:1a:58:60:49:31:07:79:2f:2a:e4:0b:0a:f6:a3:
5d:ca:7c:80:a0:e2:f0:0d:0b:46:75:49:fd:4c:e4:
23:f7:7e:ad:e2:b9:40:6d:0c:22:59:0f:29:66:58:
d1:81:4c:d3:2f:1a:9b:ca:72:ca:40:73:dd:fb:cf:
fe:00:2b:17:ae:78:ca:1b:42:b4:63:48:e9:46:72:
60:42:74:8e:b2:15:05:8c:c3:6c:c4:fc:db:8b:40:
22:73:f1:b7:9d:4a:e5:c2:43:f2:3a:95:bb:aa:5c:
55:7c:ee:ce:6c:d5:a2:53:a5:f7:5b:0e:f5:ba:d4:
9e:7a:c0:9b:19:95:2c:3e:0d:6d:46:82:3b:2d:e5:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219308
Signature Algorithm: sha256WithRSAEncryption
3a:92:c2:39:db:cc:95:46:d4:ab:54:a4:70:6e:64:45:fa:52:
1a:64:f7:38:68:88:d0:27:c7:aa:c9:3f:00:ec:33:bd:cf:93:
f6:6c:d2:de:5f:16:2c:3e:6c:50:e0:15:1c:94:4f:8f:c8:1b:
db:7c:69:6e:9a:bd:b7:a3:1b:88:e7:d1:ae:27:16:5d:04:50:
ee:55:bc:79:9b:c0:79:81:ca:9d:fe:2c:a2:5e:aa:8e:d6:82:
95:01:b4:c4:ab:3b:a9:dd:cb:ad:7b:9c:97:0c:42:d0:e4:d4:
22:00:39:2d:e9:af:cc:a3:75:8f:90:3a:de:c0:0e:6c:5c:e0:
20:c9:d5:2c:5a:de:5b:30:b4:d7:5d:2a:3c:44:6b:2d:45:07:
62:f5:4a:c2:57:24:8b:d8:93:70:9a:5c:e1:50:51:f1:15:e6:
6a:2f:46:2f:95:8a:d3:5c:50:5c:61:4a:d9:dc:8b:44:2a:33:
3b:f6:1e:a1:75:f7:15:d4:e9:6b:c7:d4:cd:0c:ff:8e:33:34:
62:8c:05:00:fa:39:98:15:57:2c:21:2b:f9:14:2b:c7:d6:b5:
eb:8f:27:1a:22:f4:23:26:4c:87:37:26:79:8d:25:e9:59:82:
d2:bd:32:bf:ce:fd:0c:7e:b5:43:2a:1f:26:23:3f:a0:7a:c4:
07:0d:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:00 2026 by rpki-client