Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.cer (raw, json)
Hash identifier: nTz7HO2oLJIz4hy3HczB3tnTNG/b619v61yZAk/ocPM=
Subject key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94A283BBEC2076CA8B84565F17C84835
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 11:50:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200861
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:a2:83:bb:ec:20:76:ca:8b:84:56:5f:17:c8:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 11:50:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a34dae315ab980922567155e792d1af441e0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:37:8d:8a:c7:73:88:b4:37:ba:44:6e:57:
99:18:9f:f8:a0:c5:14:31:85:74:d8:5a:2e:fa:42:
9c:19:b9:f2:86:e2:14:14:21:4d:af:ec:a3:df:5e:
16:fb:92:2d:7d:8c:31:58:8a:c3:d7:93:49:74:fa:
8e:da:3a:26:2c:b6:7d:dc:66:f1:d1:f5:ac:63:9c:
29:de:2b:a7:84:50:34:93:84:d6:82:ba:5c:6f:08:
bd:db:40:47:15:3c:7e:f4:9e:c1:c3:1e:ff:bb:5d:
60:8e:8e:83:93:b0:d4:b8:78:d2:5a:43:06:9b:55:
d4:9d:6b:4e:7c:df:ce:0f:79:0d:78:9e:44:ec:07:
67:8f:d6:f0:ed:2f:a8:bb:65:10:ed:34:8c:75:b6:
62:97:8d:f0:aa:8c:26:f4:92:55:7d:34:40:03:f7:
2b:db:1b:df:82:92:5e:4f:65:5a:46:46:88:fa:43:
2e:63:b1:d9:2d:fc:8a:56:28:c6:3c:61:e8:e1:5c:
87:9b:6f:0f:62:24:4c:0a:80:ee:79:e4:71:3d:53:
9c:88:a8:64:8b:18:cf:ea:1c:c3:f1:2f:21:b6:76:
28:37:60:89:f2:aa:e0:8c:80:a2:70:27:2c:56:db:
55:f6:7e:fd:38:35:a9:47:a4:2e:8d:c8:8f:4f:46:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200861
Signature Algorithm: sha256WithRSAEncryption
6d:1c:41:8f:6a:e3:e5:38:82:04:d0:09:25:f6:69:6a:e4:1a:
eb:38:a0:e4:90:1c:77:b5:e6:81:4c:83:55:b5:68:eb:8b:cb:
fa:94:16:67:25:ae:21:e7:9e:7b:db:13:d0:26:27:b4:f8:6c:
f1:39:c7:f4:8a:88:63:ca:8c:7f:ef:f9:cf:c9:9d:6e:df:b4:
6e:a2:fa:a6:85:07:18:45:90:5d:ed:c7:5f:f2:2a:fb:be:d7:
77:19:79:59:f7:83:24:f4:fb:81:29:94:16:fa:62:9e:6d:82:
57:10:b3:4c:39:8c:c0:d6:48:94:93:b4:b0:32:b4:80:08:6e:
21:5d:5c:bb:5e:41:32:2f:28:74:90:f3:c8:28:fe:74:f9:1d:
fe:4b:19:5a:32:6f:18:d9:6e:8f:62:65:93:c2:f8:30:ee:99:
64:9b:df:ba:a3:7d:43:96:5b:04:d4:5e:6e:0f:f7:aa:47:25:
32:4a:9d:e5:cf:22:9b:d5:89:78:f6:8d:3e:b9:d2:84:01:e8:
fb:a0:eb:28:8f:f1:f3:85:46:23:c1:ca:24:16:29:a3:c3:e1:
2c:09:e9:3f:01:cc:ac:11:7c:53:6a:fc:1c:78:d8:07:88:f5:
ff:8b:bb:fb:ff:95:96:db:8b:78:aa:78:9e:29:4b:91:a0:1b:
9c:e3:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:38 2026 by rpki-client