Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
File: CAj2D5I4oAJLM24y1FaePkwStRU.cer (raw, json)
Hash identifier: CxLFLeq6EsfUh43su3jCNklE48dqaJGVrMBR8UaxdPA=
Subject key identifier: 08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEFCE0089D343AEA778C33C165180F750
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jun 2026 14:48:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219383
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:ce:00:89:d3:43:ae:a7:78:c3:3c:16:51:80:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 22 14:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:4a:2a:94:ed:00:ce:ff:c6:75:26:a0:e9:
6e:d1:93:93:76:3d:68:07:47:67:79:5e:1d:c2:62:
45:7e:1f:ec:6d:10:53:45:3b:d7:7e:ce:fe:fd:64:
a7:0b:90:eb:24:67:90:0e:54:52:ee:1b:0c:37:6a:
93:31:7a:b7:15:51:d0:a3:ef:2c:bc:08:c7:9e:43:
85:c4:c0:c9:36:63:8b:a8:52:cd:e0:52:af:c4:f3:
9d:48:e6:8f:39:7a:d1:2d:f4:9d:80:d7:ac:00:81:
09:4a:c5:46:2d:cc:00:3a:28:d4:f7:22:07:4c:68:
e6:0b:c8:21:dc:5f:54:b7:46:fe:a4:e8:63:67:1d:
0a:dc:90:c4:1a:f2:c3:24:2e:d1:d1:0b:b0:e4:98:
82:97:c4:e5:7b:ba:fb:b6:ee:52:d7:12:8e:79:ef:
aa:2f:7f:69:97:6f:f9:69:5b:01:0f:d1:0f:f1:89:
11:54:ef:4f:ee:0e:61:1e:be:ab:77:d0:14:b7:d6:
3b:b8:a0:00:0f:78:60:18:1e:39:7e:b8:8f:1b:29:
c4:fe:ee:bd:a2:9b:89:4f:5e:be:5a:30:c3:74:0d:
f0:e9:4a:1e:7e:dc:1f:ed:30:eb:55:d7:bb:13:fc:
19:27:c6:25:8f:98:d8:8b:2d:de:61:0e:24:57:22:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219383
Signature Algorithm: sha256WithRSAEncryption
54:9b:0d:02:0e:7b:7e:78:0e:a2:84:13:c5:ac:4b:cb:c8:a7:
3a:79:a1:be:c6:fa:cd:cc:83:b1:d0:ad:9a:44:11:1c:de:89:
81:a3:f7:87:1e:d3:1c:4a:ec:6b:32:b9:a9:62:d8:e4:f2:d8:
03:61:55:e1:99:a6:84:91:3b:ba:08:36:bf:50:c4:a5:82:14:
5f:06:fd:61:8b:db:12:d0:d5:b6:75:34:c7:6f:ec:13:07:2c:
e6:38:1a:5d:92:ea:74:f2:da:15:b7:b8:60:15:c2:79:19:ab:
98:2d:af:ef:d8:af:d8:85:59:12:40:98:fb:3b:f9:02:8d:21:
af:99:24:54:9b:e9:f7:3a:93:2a:5b:12:a7:0b:9b:8f:2b:43:
28:04:85:da:54:49:b5:c0:bf:ec:33:1b:c5:7f:ff:11:5b:dc:
9b:e7:95:a4:0c:09:e3:3c:d8:de:a4:c3:d8:a9:6b:0d:0a:86:
07:08:4f:e6:3c:cb:90:d4:4e:7c:b2:d7:41:a6:f2:d4:5f:64:
83:c5:cf:db:eb:24:42:87:13:23:40:11:25:dd:5d:df:b6:e1:
80:72:67:3d:6f:a8:c4:48:2d:67:75:29:b1:e0:1a:e1:2e:66:
09:e6:96:66:3d:c9:29:0d:b3:cc:07:11:84:5f:72:5f:99:9f:
27:fe:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:27 2026 by rpki-client