Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
File: K9rGR35J6G36G33E-N86Q-GsZmY.cer (raw, json)
Hash identifier: 9mjeo+UNEHf3o67p4tQr+EsIIOLINMl3ehVWB9DFaVo=
Subject key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77D2A000AACA4FC8ADD6D5692EDDD25B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:30:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213428
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:d2:a0:00:aa:ca:4f:c8:ad:d6:d5:69:2e:dd:d2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:15:d7:94:a4:f6:a5:bc:21:34:eb:ef:8c:
4b:f0:8d:2f:35:ff:cf:74:62:2d:c7:a4:4c:77:ed:
d1:cc:39:fb:a5:fd:53:b4:4f:60:d4:b5:11:63:01:
9f:f8:65:fe:60:6e:d0:98:bb:2f:a2:a6:d9:8a:f4:
82:db:d3:53:78:09:42:af:c5:8b:ef:fd:d0:f3:89:
c7:68:e9:ba:3b:b2:8a:20:60:fe:20:a8:26:12:4b:
26:7e:7d:0b:d4:cb:d8:e8:57:09:6f:9a:02:ff:5f:
fd:58:14:fa:e9:f7:36:f8:7c:65:4b:0d:73:34:b5:
79:ed:f4:0e:24:7b:4a:23:6e:33:4f:13:b7:91:50:
41:0e:04:b2:d6:dd:19:14:49:e5:4f:55:e4:8a:29:
49:ae:16:00:2a:3e:8e:d0:b6:c9:a5:1a:21:69:e8:
6d:9b:58:44:0e:ae:c4:cc:da:ac:85:25:ef:c4:5d:
2a:83:b5:70:36:19:4f:a2:b8:fc:29:fd:16:9a:5d:
98:e1:5c:43:12:1a:b8:19:cc:ff:c9:8d:b6:61:9b:
c0:30:0e:9c:2d:20:ac:dc:e6:00:20:8a:35:24:3b:
6f:40:5d:ce:a7:7b:90:6f:ee:69:7a:d2:f8:e7:c5:
1e:04:3f:c8:30:bf:7a:b4:aa:5d:65:a9:ff:f1:89:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213428
Signature Algorithm: sha256WithRSAEncryption
84:4a:cb:91:d6:5a:10:49:7d:33:24:8f:bd:07:6b:c8:b0:dc:
ef:9c:7e:69:93:27:cc:8a:cd:70:c8:4b:5d:ef:da:bc:65:2f:
16:28:18:fa:c7:5a:3b:4c:e1:7e:9d:e9:c0:81:53:33:f3:a5:
5c:41:5c:79:4d:92:15:dd:8f:f0:dd:54:db:46:23:c5:c6:c3:
20:d1:5d:fc:0b:1c:9c:d5:32:52:2b:eb:c8:38:7d:a7:8d:06:
6e:ff:c8:08:49:41:17:7c:b3:d1:0c:41:99:6e:4c:8c:4c:14:
df:9f:19:8e:44:6c:24:71:24:65:06:b7:fd:11:6e:85:95:37:
98:3a:9b:f8:aa:d6:f2:b5:1f:73:d5:60:c5:44:60:5c:a1:3f:
d9:2d:43:59:74:c4:11:92:50:ba:eb:54:0c:9a:15:2b:39:7e:
c7:d7:88:20:14:3f:1d:be:09:65:ed:98:88:b2:dd:0e:d6:a6:
1c:6f:7a:e4:eb:15:a9:a0:fd:f0:83:fa:85:28:cf:76:08:a3:
be:57:cc:38:95:7f:0e:48:99:20:02:42:7b:59:b5:9c:2b:5d:
ff:9f:1b:16:d4:ec:c2:0d:65:87:55:49:1d:8e:a1:54:9e:b7:
db:1a:98:4f:92:23:fc:c4:10:55:c5:7b:f5:7a:6a:b9:e8:01:
b5:19:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:30 2026 by rpki-client