Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer (raw, json)
Hash identifier: vg9uQc45OrdPydKEJUyT+OS30Vm73I2BMOP5W3+IA/k=
Subject key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F752DB4B0AECB3418E236FB25827D794C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 18 Jul 2026 12:22:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219235
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:2d:b4:b0:ae:cb:34:18:e2:36:fb:25:82:7d:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 12:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:1d:d3:09:ba:59:0d:dd:d2:75:ad:4b:80:
c1:c0:22:34:74:22:40:a1:93:e8:14:e3:bc:05:51:
ab:71:a6:89:ee:b4:28:e1:94:20:b3:4f:e0:df:8a:
57:7b:90:69:29:b0:33:d5:78:1a:75:21:14:32:3c:
d3:53:ed:78:17:b2:dd:7a:b8:aa:81:2b:5a:ee:c3:
d0:98:3c:32:c5:6b:16:24:dd:62:fe:5a:0b:f4:8e:
05:ed:88:8a:60:e6:46:ce:4c:78:7b:99:4c:56:33:
fa:3b:c9:9d:ed:96:14:dd:fb:d7:4f:31:20:7a:92:
11:45:7e:ae:5e:be:26:cf:21:a4:9e:53:77:83:43:
5b:a6:29:42:96:6f:c1:f7:94:62:fd:6e:e2:af:03:
1d:41:9f:41:33:4e:7a:28:6d:e9:48:ef:a3:b6:34:
fc:af:11:3a:c9:23:79:5e:44:98:7c:c5:7e:65:56:
73:d8:bd:ca:61:a7:77:56:e2:c6:c7:d4:44:36:99:
e0:c4:1a:e7:b6:be:d0:55:2d:9d:a8:d8:a4:56:bb:
6b:3f:41:a5:13:2c:cd:56:00:13:28:59:83:5d:ac:
c7:aa:d9:6a:d3:cf:2c:22:29:f2:70:93:51:13:9e:
3c:22:47:e3:dc:f6:d5:68:4b:45:fd:32:7b:0f:11:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219235
Signature Algorithm: sha256WithRSAEncryption
75:8d:d8:66:a9:13:c0:35:3d:b7:e1:ff:a0:62:ce:b5:69:c0:
b0:ac:67:cb:4e:7a:ee:21:47:cf:b8:ea:15:b8:53:9f:1d:7f:
c0:04:ec:06:fd:9c:a4:78:e6:85:a7:50:33:0c:56:94:a5:dc:
e2:d6:1b:96:5d:33:36:5a:db:1c:02:78:19:9d:db:db:b7:1f:
e5:9a:3c:df:1d:f8:99:08:55:38:9c:8b:d3:94:f4:65:08:5d:
4a:7c:d2:50:cd:31:90:cd:6b:41:32:1d:f5:9e:3b:4b:f7:d2:
5f:3d:10:fd:8b:59:50:5e:87:50:5a:fc:50:15:f9:5d:c0:94:
4f:d9:69:be:e5:43:5b:13:03:30:e4:dd:76:e1:aa:db:63:fb:
12:0e:89:55:df:b8:37:b3:84:c0:2d:0e:0e:20:86:5e:6b:04:
76:89:79:c7:80:cd:e1:79:ca:07:8f:b4:60:49:15:9b:c6:eb:
06:d1:34:1b:51:10:56:4a:c6:1a:13:38:a5:77:31:69:05:71:
8f:97:c3:b0:5c:5d:00:21:ba:55:f2:d4:63:a4:1f:99:84:1c:
b8:cc:d4:62:d8:14:a6:73:1e:bb:82:68:5e:08:27:e7:af:02:
2c:aa:96:ed:ab:a3:0d:5f:6f:51:4e:f4:25:8c:64:14:d6:ae:
ce:1b:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:13 2026 by rpki-client