Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/C-p-8g_kQStVnlueyaoJOBYjQO8.cer
File: C-p-8g_kQStVnlueyaoJOBYjQO8.cer (raw, json)
Hash identifier: xdCW/GJ3aJLp5gnUIgY6/eqZhTpaC8kzqSjP31L+hss=
Subject key identifier: 0B:EA:7E:F2:0F:E4:41:2B:55:9E:5B:9E:C9:AA:09:38:16:23:40:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06723713ECB4499EE52A97BF5254E8BD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 11:59:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208355
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:23:71:3e:cb:44:99:ee:52:a9:7b:f5:25:4e:8b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 11:59:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bea7ef20fe4412b559e5b9ec9aa0938162340ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:a9:c6:65:08:33:7d:7f:2b:8b:e3:ca:44:
d2:e6:b0:9b:1a:61:9b:a2:bc:47:a5:06:eb:e9:0a:
89:4f:e6:96:bd:8a:bb:68:ad:8e:75:04:cc:5d:93:
41:e3:d3:b1:44:7c:82:8d:1f:e9:fb:2f:b2:96:bf:
31:83:52:7c:27:b6:7b:a7:cc:90:a4:aa:a0:12:15:
db:2b:ec:11:17:2d:3e:67:8e:d8:df:7c:4a:f4:57:
87:85:fc:41:7a:35:d7:6b:f4:da:06:67:56:98:a2:
f0:0b:c5:b3:44:9c:03:a8:7d:1a:ef:86:49:6d:b8:
5b:cf:27:1c:6e:3b:92:0c:a9:2c:11:1b:b6:19:b7:
18:d5:ea:dc:02:3c:d8:a9:97:b6:35:ff:15:01:e7:
f9:c7:be:1e:e8:42:2a:28:d4:1e:ba:40:d0:7f:a4:
9d:8a:b8:f5:26:53:c3:ab:ff:38:75:7a:32:9b:9b:
d7:91:53:7c:d5:77:15:dd:d6:11:2b:66:f1:09:00:
5d:e4:44:7f:05:96:e9:85:98:d6:02:2b:71:da:c2:
60:4d:ef:c6:84:53:1c:1f:8f:80:21:9f:c3:9a:f2:
cb:25:cb:6b:18:b5:d6:59:69:9f:d6:85:fe:b5:d7:
6c:45:c9:88:91:1f:60:3c:c0:30:3d:29:70:8b:41:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:7E:F2:0F:E4:41:2B:55:9E:5B:9E:C9:AA:09:38:16:23:40:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208355
Signature Algorithm: sha256WithRSAEncryption
40:76:01:14:e1:3b:8c:79:96:4c:fc:13:c6:b1:2e:64:ac:35:
a5:01:49:b7:f7:3e:fe:70:9d:bb:40:23:d7:bf:2b:8d:0c:a4:
42:77:cb:27:79:ae:1f:e8:66:d8:d6:bd:b6:c1:fb:2c:5d:77:
a9:6a:63:0a:43:85:56:dc:84:7a:25:06:6a:85:56:dc:61:fa:
44:df:6b:36:99:ee:b7:ba:22:38:9e:7c:4f:ca:a9:a8:eb:fa:
31:b2:33:ef:4a:ac:64:7e:2e:7e:8c:78:3f:5d:56:55:67:76:
66:f1:81:34:7f:dd:f8:ef:b8:ab:d0:50:85:9c:34:15:8f:87:
27:9d:25:ff:b8:48:7f:de:5d:08:fe:ce:e3:7c:bf:41:0a:05:
88:3a:c8:c9:59:f5:d7:29:94:99:d4:96:fc:97:ef:2d:b6:5d:
03:84:77:28:1a:2e:a9:7d:01:3e:1b:0a:17:16:a0:48:88:dd:
2b:b5:f6:a5:73:20:19:9b:02:c4:7f:4c:f8:ff:be:64:2e:7a:
ab:8d:46:63:39:7b:e6:13:8e:46:31:9c:af:15:3b:d4:05:e8:
ef:37:6d:4a:de:00:7a:ba:9c:29:a9:23:b4:26:37:3a:71:3d:
00:9e:1c:11:9e:12:ff:e9:c0:0c:73:61:74:6c:7f:5a:c3:27:
e1:94:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:20 2026 by rpki-client