Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
File: AURLjJMub2XrHJyZmhreW9iskRY.cer (raw, json)
Hash identifier: ZUyNwTPjD/vDsDs7vxW0a7mz74jPubrxuBey2Kb4JME=
Subject key identifier: 01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E49DF0DE1E3255C46B08CF7AB3FB03C5E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 May 2026 09:30:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197371
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:df:0d:e1:e3:25:5c:46:b0:8c:f7:ab:3f:b0:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 09:30:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:7e:4e:7f:3a:49:29:a8:28:6a:a4:cd:e1:
4b:ea:99:4f:2a:fc:a7:3c:b5:de:86:6b:49:a0:b4:
16:b7:4b:c4:05:11:a6:81:6c:45:09:c8:b6:ee:e8:
28:a0:09:51:40:3b:40:dd:7c:9e:49:33:8d:74:f1:
e7:4c:b0:00:82:bc:49:98:5f:ac:3f:a6:70:45:18:
b3:f7:7e:c6:cf:6a:74:eb:ee:e6:71:38:df:af:91:
b5:d7:92:7e:55:fa:67:00:0a:34:42:c4:b2:de:72:
7c:8d:55:13:b8:34:ce:5d:98:e9:d3:3e:76:56:1d:
4b:82:91:5e:34:eb:8c:4d:d5:35:04:52:7f:4e:a2:
88:01:f5:c5:f5:69:a1:32:7e:76:80:21:30:86:3a:
86:d1:64:8a:2a:23:0c:38:41:5b:a5:b4:ab:8d:4f:
10:07:a4:89:4a:40:03:69:4e:95:e5:9d:83:9f:76:
48:7d:19:ec:a7:fe:2e:76:52:91:44:a4:a2:4c:ff:
22:e5:7e:83:f4:f7:f0:0d:dc:ef:0a:4f:a4:f2:9b:
a8:d7:24:cb:b5:0c:c5:ae:03:1d:0a:fa:7b:04:cc:
2b:d8:cb:b7:aa:ac:f6:d0:f8:98:11:a6:60:1d:97:
66:41:98:dd:6c:90:82:e4:56:31:df:fc:cd:45:cd:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197371
Signature Algorithm: sha256WithRSAEncryption
a3:34:f9:3b:65:14:6b:0e:8d:cb:3b:7c:fb:5a:58:99:e2:c7:
3f:27:35:98:9e:b6:ee:c2:7b:9c:64:72:7d:c4:74:86:94:11:
c7:22:16:4d:a2:a5:22:52:61:07:ff:cc:1b:b5:b5:c4:c4:ea:
d9:2d:88:1f:2d:93:fe:a2:32:f0:ac:d0:c2:39:81:56:e2:71:
06:0d:7b:4e:ba:e0:95:09:a9:9d:20:fe:52:10:db:39:9d:7c:
9d:60:69:8e:c7:32:19:ba:f8:ea:39:11:40:0b:9a:11:cf:4e:
62:79:40:25:d9:82:18:66:ce:de:fd:f2:27:88:f6:59:a7:1b:
7e:f5:e0:8e:bf:05:72:82:b3:45:04:12:fb:af:2d:fc:19:8c:
eb:10:64:1f:3f:7b:e1:b2:15:6a:7b:bd:f2:91:16:ca:39:ed:
f7:cc:12:bb:5b:23:7a:96:88:40:c6:83:93:82:3e:ad:9e:13:
13:50:78:3e:1e:1e:cf:d9:49:c8:b8:26:9a:6e:40:60:80:14:
96:b7:29:07:6d:f2:38:26:fb:09:58:49:02:1a:85:16:70:0d:
97:b5:43:37:73:21:ee:45:bd:47:ae:7c:de:4a:cb:05:36:1e:
ed:26:f1:64:8d:82:75:f7:6d:ad:ee:59:68:9e:28:58:61:96:
39:20:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:59 2026 by rpki-client