Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer (raw, json)
Hash identifier: lV9YiJ/tiCmKmcpGkvH+DVmj2DdEcU3lSn1dzhtUqdQ=
Subject key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA3DED38008342795F3019DB3C72D69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:18:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:de:d3:80:08:34:27:95:f3:01:9d:b3:c7:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:8c:f9:1d:f2:51:a5:1e:b5:84:37:10:21:
67:75:30:09:b1:5a:81:fb:e1:a9:e2:cf:c3:9a:fe:
a6:83:60:d3:b5:f1:07:63:ab:39:e2:b2:29:02:ee:
be:3c:75:00:80:26:56:2a:2f:b1:72:b7:6d:21:ce:
c4:be:19:4d:4b:ca:d0:51:77:5b:a8:1d:57:d1:fc:
ea:9d:9e:b5:fd:4f:ea:2b:0a:e9:01:42:ab:f9:b4:
19:75:fb:cf:3a:f4:9b:fe:e6:b5:9c:23:78:b6:bb:
e3:6a:67:e8:ca:66:60:14:01:2c:92:ae:69:13:75:
21:60:34:e0:24:84:59:e0:0f:86:9f:44:72:e6:88:
c2:9c:fc:0c:04:ea:21:de:0a:2c:c4:1e:da:5f:24:
3c:db:02:9a:ff:21:13:43:95:85:7a:7a:33:4c:c8:
09:ef:f9:6b:04:12:55:29:31:85:26:bc:1e:7c:64:
a2:b8:86:bc:e0:52:08:45:2a:80:35:5f:3b:5d:21:
31:fe:6f:e2:5e:f0:82:5f:db:97:95:5d:72:44:75:
0c:04:d9:1f:f7:7f:aa:70:c2:9a:67:21:83:77:49:
40:c0:a1:30:bd:32:36:78:92:ba:fe:a0:e3:50:4a:
5e:d1:a3:e9:5c:28:29:af:5b:0a:bb:d0:25:e3:2f:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212895
Signature Algorithm: sha256WithRSAEncryption
36:94:39:25:05:61:b8:8b:e1:4f:d1:a6:05:51:1f:f9:07:0c:
ee:60:ad:b6:4a:4e:7a:fc:4e:8f:4e:5c:aa:a4:d4:51:87:bb:
94:c1:3d:3f:27:5e:ba:32:e6:cb:48:3d:c1:f6:02:c3:3c:bc:
c6:fb:ea:59:15:a5:88:bf:86:cb:e9:58:74:6b:e9:d0:03:82:
d8:7d:5b:ca:71:b9:7c:8a:5b:f4:95:4e:8e:d5:71:f6:21:82:
35:9f:45:40:3f:4b:32:9f:6a:dc:f0:bc:9b:7c:bb:aa:35:ff:
f1:81:3e:37:cf:8c:d2:42:9d:d9:86:1c:2e:d2:de:38:d7:c7:
2a:55:68:a1:f4:99:d8:e0:4f:98:ee:7c:76:88:05:43:8f:e4:
60:bb:cc:15:6f:79:bc:0f:83:42:58:9d:99:3f:b1:57:96:c4:
9d:ec:eb:2e:bb:2e:3d:f4:49:1e:63:33:2d:a9:df:9b:32:94:
f2:c4:e9:25:78:35:45:70:0d:a4:57:01:c4:d4:17:58:8f:b0:
d9:09:8c:c4:33:d4:b6:9b:65:ed:77:9c:de:94:dc:4d:99:82:
08:a2:c4:b8:5e:0d:b9:a9:0d:10:52:7f:f5:44:d0:63:22:c9:
14:0a:82:c3:bf:59:8e:69:5a:76:63:d3:c4:45:12:f6:67:91:
d8:16:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:18 2026 by rpki-client