Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Cca52IgyuVBdGyAlt2QYerFdJnE.cer
File: Cca52IgyuVBdGyAlt2QYerFdJnE.cer (raw, json)
Hash identifier: GU1V0NmPmCeWT8xjgBH6bAYEHgs5dOq48wPBKx4RfdE=
Subject key identifier: 09:C6:B9:D8:88:32:B9:50:5D:1B:20:25:B7:64:18:7A:B1:5D:26:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1AAE3955EF975EA91886FE13EAB2B2111
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/660629-7525-44fa-8e53-4cfcc2c08dfe/1/Cca52IgyuVBdGyAlt2QYerFdJnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/660629-7525-44fa-8e53-4cfcc2c08dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Nov 2026 08:46:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218226
IP: 2a05:4940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:e3:95:5e:f9:75:ea:91:88:6f:e1:3e:ab:2b:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 08:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c6b9d88832b9505d1b2025b764187ab15d2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:c5:89:4f:86:7a:1d:17:4a:7f:e8:78:2d:
82:ec:61:4c:ca:97:bd:74:0e:20:db:c6:b1:0d:42:
4a:5f:76:5a:70:82:ba:95:a1:9f:85:0e:33:41:af:
ee:79:60:9f:ef:c3:0f:7c:25:9b:68:e1:16:87:a6:
2c:d6:2a:c6:d0:7d:5c:53:d2:fa:fb:5c:70:0f:f6:
f1:6a:3d:fe:19:07:71:35:73:90:22:49:c7:21:aa:
ea:8d:a3:6c:4c:ec:d9:fb:24:7e:c8:52:cb:ca:a7:
30:d3:76:d6:1e:8a:c1:31:a9:2f:88:0a:03:ca:3f:
18:e5:89:4f:29:b0:da:2d:1a:c4:f0:20:c9:a5:c6:
95:ef:78:51:34:41:59:7e:4a:1c:ce:d1:d2:e9:ae:
c2:92:77:7c:38:90:7d:40:5e:a1:85:7e:c9:b8:de:
66:0e:1f:a5:62:72:61:36:4e:8a:c3:d7:31:a7:7d:
7f:e5:11:bd:7b:9f:87:a5:c6:78:89:aa:46:6b:10:
bc:17:b4:34:21:0d:3f:83:a8:52:6f:06:5e:ca:67:
f6:a9:03:7c:ca:0e:38:6f:7d:96:ac:3e:53:be:20:
06:a1:33:70:ac:df:99:9a:11:3a:a4:96:2d:0e:7f:
fd:9d:fd:09:76:e4:5d:78:5f:66:86:d9:7e:b2:36:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:B9:D8:88:32:B9:50:5D:1B:20:25:B7:64:18:7A:B1:5D:26:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/660629-7525-44fa-8e53-4cfcc2c08dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/660629-7525-44fa-8e53-4cfcc2c08dfe/1/Cca52IgyuVBdGyAlt2QYerFdJnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218226
Signature Algorithm: sha256WithRSAEncryption
0f:2b:21:19:9f:db:14:b6:07:76:6b:0c:5e:db:f6:7f:6f:d9:
53:8c:a9:82:b9:27:48:7c:62:c5:f2:e5:ec:77:bf:29:9a:b7:
bd:3c:8a:01:93:0f:d7:bd:43:d6:00:b8:37:4f:d6:f0:67:bb:
05:68:47:ae:6b:e8:4d:5f:9f:bd:c8:ed:e5:2f:48:4f:66:0d:
0a:a2:0a:88:89:57:00:e0:d7:76:68:82:3b:f0:c2:30:1f:8e:
82:53:80:a8:10:94:86:27:ac:32:fb:e4:3c:8b:7e:ca:02:ee:
bd:55:80:3f:28:85:e9:bc:66:35:65:44:c7:f2:e6:4a:ea:05:
32:e3:59:6b:05:ab:0b:06:80:b6:8b:e7:82:90:09:0c:88:6a:
fa:62:6a:1d:39:10:aa:1b:21:f7:53:25:bb:be:e6:d7:b5:87:
c5:fc:1e:06:48:15:56:f5:d3:39:37:12:6f:c8:af:61:9b:69:
f0:88:94:1c:30:c9:c9:1f:59:ba:14:05:b4:58:f9:99:86:38:
1a:c1:67:43:8c:24:f8:66:e4:c5:5b:76:5f:bf:06:fc:21:fc:
3a:4e:d1:2e:d7:9d:3a:f8:af:ec:f6:ff:1a:17:dd:34:1a:40:
e9:26:fe:d8:32:fd:21:22:81:a8:c1:fe:8e:83:c6:c0:4c:6b:
56:c8:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 16:51:18 2026 by rpki-client