Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
File: AoDVqrjuctqjUocfunLspFGnDtw.cer (raw, json)
Hash identifier: QjtnoskAIYFArdUIF+mFqEGv9tyMM7kjljzPfOnmo88=
Subject key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B791089D905597AC5676EF0FA64663658
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198768
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:89:d9:05:59:7a:c5:67:6e:f0:fa:64:66:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:6d:3b:ac:0f:3b:68:18:91:a9:71:35:fb:
e4:ab:60:9d:6c:4b:25:37:0c:04:08:08:4b:00:5e:
6f:99:e3:07:b3:4d:ea:cc:88:0c:ec:73:56:48:7e:
0e:1d:0c:1f:ce:73:2a:0f:3c:08:2f:9f:4a:c8:f6:
a8:d2:19:52:1d:47:a7:33:69:48:41:36:20:e4:48:
0f:0a:0a:cb:65:ab:66:9d:80:a9:25:d7:33:ce:b1:
89:5d:de:34:77:79:2c:e0:7a:55:b1:6e:ae:7f:b7:
05:ab:17:ce:82:cc:f9:81:93:30:f0:94:fc:81:ed:
e0:50:0c:90:de:64:b1:ae:18:d2:e9:5a:69:39:05:
56:d9:aa:76:f5:b1:bf:9c:ff:42:d7:10:b8:13:da:
73:05:e4:0a:58:b3:d6:ce:29:6e:eb:99:89:6c:29:
e8:a3:29:53:4a:9a:54:d1:ca:ac:c8:07:8c:dd:05:
d9:7c:b7:d8:74:64:f0:57:94:2e:9d:6b:b4:df:c3:
3e:86:60:24:e9:29:51:e4:7d:4b:f9:e9:69:5b:a7:
f5:8e:17:d7:c0:f6:4a:9f:34:b4:d9:73:cf:8f:63:
63:1c:97:7f:3b:88:c4:3d:88:c0:b5:c6:62:31:e5:
af:22:24:8b:f8:18:eb:7d:48:43:84:cc:55:df:71:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198768
Signature Algorithm: sha256WithRSAEncryption
7e:69:9f:fd:fc:07:96:57:a5:c6:23:36:b3:09:b3:58:62:6c:
cd:83:0f:a1:13:8d:4e:83:46:05:d7:93:fa:c0:11:88:76:7d:
3d:ec:7e:85:bc:47:3e:33:6b:f1:cc:61:bb:22:02:94:79:71:
1d:a7:cd:f6:17:5d:2b:fe:6a:e2:5c:3c:9f:34:0c:46:5c:e8:
7f:06:f8:bf:c3:d4:66:d4:2a:87:63:9a:95:bc:7c:d5:69:f4:
d5:66:79:42:cb:34:18:9d:9f:f7:ce:20:a2:b9:00:88:d2:cd:
fa:f9:19:02:b9:10:67:34:e7:dd:19:af:21:8a:71:20:c2:b2:
e4:ae:f2:e3:d3:fe:97:07:5a:87:fd:f2:1f:ad:84:42:67:5c:
4d:0e:b1:cd:df:ad:c9:d5:62:78:53:ce:20:2c:aa:29:00:98:
d9:66:3d:28:9a:72:5c:7d:c9:2b:e7:29:e5:3f:5c:42:92:63:
d4:5f:56:af:c2:b7:cb:44:5d:10:cb:b4:bb:f8:0c:9a:10:fa:
47:60:bd:d1:09:f5:36:7e:36:a7:8c:01:e0:1b:f8:b7:a3:67:
68:46:91:7e:19:bc:75:e7:1a:00:d1:ed:15:cb:c9:60:ef:a9:
5b:aa:30:ce:90:80:af:73:51:ec:c0:e8:3c:78:7f:b1:09:91:
ed:89:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:23 2026 by rpki-client