Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/B9jd2rKVrKryZGLqf90w6sSeK30.cer
File: B9jd2rKVrKryZGLqf90w6sSeK30.cer (raw, json)
Hash identifier: ooj2CReXWj53A/cun2QU72IV0VM78NCHiqBH2J9vNDg=
Subject key identifier: 07:D8:DD:DA:B2:95:AC:AA:F2:64:62:EA:7F:DD:30:EA:C4:9E:2B:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1172C67565B7DE24FAF4A34C62A2A7E0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c50705-e17f-4bb6-8266-d085579c2d5f/1/B9jd2rKVrKryZGLqf90w6sSeK30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c50705-e17f-4bb6-8266-d085579c2d5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Oct 2026 16:22:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218469
IP: 2001:67c:a98::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:2c:67:56:5b:7d:e2:4f:af:4a:34:c6:2a:2a:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 16:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07d8dddab295acaaf26462ea7fdd30eac49e2b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:83:06:85:75:3c:ba:d8:b2:6b:70:32:d2:
80:75:bc:b5:97:cc:50:e4:dc:ad:52:7d:77:7f:c2:
06:11:c2:8b:41:8a:18:43:fb:cb:a4:49:5a:57:c2:
bf:7c:d4:f1:b6:32:9d:69:48:fd:b6:fe:75:cd:5a:
b6:df:23:d0:53:5b:f9:58:0d:13:84:6c:6d:45:a4:
11:35:43:93:d4:56:3b:44:7b:10:05:5f:5c:15:0d:
9e:d9:7b:a1:84:1b:93:77:89:74:ca:c9:48:ac:3a:
42:88:c3:a4:57:38:81:3b:2a:00:68:96:44:db:51:
37:c2:74:2c:e6:65:94:9f:16:55:53:4c:5b:91:34:
52:5d:10:15:65:05:f9:b7:e4:f5:b4:d1:ce:48:ac:
4e:70:9f:ef:38:ac:ce:21:54:81:60:26:ca:d6:aa:
21:28:ff:32:23:2a:fd:cc:62:5b:e2:94:e8:71:de:
38:70:ae:06:74:75:13:9e:66:1d:9d:5a:d4:38:5c:
c1:38:18:ec:44:f7:63:36:3f:89:57:41:f6:98:9d:
f0:93:c0:39:51:04:92:3d:40:c2:ce:51:5e:e2:31:
7e:1b:02:16:48:52:26:04:bf:70:d6:81:8a:44:c5:
96:8a:d8:6f:75:1f:7c:30:39:3b:1c:28:d9:44:c2:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:DD:DA:B2:95:AC:AA:F2:64:62:EA:7F:DD:30:EA:C4:9E:2B:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c50705-e17f-4bb6-8266-d085579c2d5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c50705-e17f-4bb6-8266-d085579c2d5f/1/B9jd2rKVrKryZGLqf90w6sSeK30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a98::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218469
Signature Algorithm: sha256WithRSAEncryption
a4:5d:9b:84:ea:46:2f:c2:47:02:f8:65:e5:1d:be:9b:ad:d5:
8c:6d:30:7a:e1:05:3c:fa:94:7a:c5:69:5e:bb:21:6d:9d:d7:
65:e2:02:7c:a9:80:02:f5:e3:9b:b9:f3:a6:74:f1:14:12:d4:
c4:16:b0:11:5f:04:4e:ea:29:45:18:62:2e:0b:84:20:35:38:
b8:ec:33:c8:9c:98:77:42:6f:83:15:08:ba:34:d6:2d:bb:51:
fa:b3:d7:ce:9c:d9:f1:78:3f:6b:b4:e9:32:b7:f6:ee:4d:16:
0b:cf:0b:3d:60:65:42:c6:57:c8:d9:d0:f4:e7:c1:54:d3:12:
29:b2:bc:40:c8:1c:8c:35:2e:70:d2:d2:f9:38:2b:28:90:09:
f1:eb:e4:75:a0:75:cb:7d:66:89:85:14:5e:a1:98:67:f4:5f:
ae:31:e7:fc:f6:62:4a:17:31:77:38:40:d4:ab:d7:85:bd:57:
6e:29:be:b2:fd:a0:2d:aa:9c:4b:5c:86:3d:16:51:de:6e:2e:
4a:0a:e1:d6:72:c3:9b:0b:9f:b2:76:af:6c:47:b7:2d:bb:24:
3a:4b:d6:2c:09:41:c4:a6:0b:f0:6c:70:bd:8f:3d:38:0c:9a:
ec:7b:bf:0f:98:e7:c5:ce:50:70:44:1c:9e:65:c5:76:23:49:
a9:4b:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:26:28 2026 by rpki-client