Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer (raw, json)
Hash identifier: Sv2m8IgboYIgfzfQBvBmagS4PTeOL9yXeEkh6/FwFYY=
Subject key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E3758AE1252F7176194A7D7DB2B9356
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57257
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:58:ae:12:52:f7:17:61:94:a7:d7:db:2b:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:7b:b8:41:ee:26:25:70:d2:9b:39:9b:9e:
17:90:9a:7d:f1:1e:e3:18:ca:3f:f2:ee:d1:c8:eb:
06:a3:03:4e:07:70:97:62:c9:8a:9b:09:42:e2:1b:
18:4c:40:ae:9d:f3:44:5f:cd:e5:2b:e1:1f:5c:7e:
1e:28:cc:8c:5c:e2:2d:0c:ce:cc:79:18:c5:98:65:
98:0b:ab:05:05:b2:73:c8:c9:ec:4b:c9:6a:96:c1:
d9:94:57:51:05:28:70:33:41:4a:7b:8b:42:38:44:
c1:26:e6:df:3e:7a:fc:63:68:4e:79:0e:80:d6:6c:
9b:d2:48:a2:6e:69:fd:1f:82:28:f2:5c:45:fc:17:
cb:3d:92:f7:46:39:47:33:80:6e:9f:f1:e8:d5:86:
c7:79:1e:5e:90:8b:e4:9b:db:ad:24:e5:b0:e2:55:
03:da:41:27:15:8f:e6:9b:e7:1b:c5:08:2e:c9:dc:
08:9d:6a:78:89:37:a9:59:96:64:52:85:b8:5d:65:
1d:2a:22:18:95:0b:6c:47:67:d5:4b:75:ac:bb:b7:
ca:8e:ae:41:94:f2:b6:4c:46:74:f0:e6:28:1b:d6:
f2:13:7f:ab:b4:fe:d6:be:08:fc:d0:08:b7:69:44:
57:f7:2a:07:21:e2:98:e9:d1:2b:59:35:23:be:a9:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57257
Signature Algorithm: sha256WithRSAEncryption
7b:f8:9e:b2:4d:28:1a:fd:ac:81:2e:50:25:26:99:f7:af:d0:
f1:0d:09:87:5c:0a:4c:51:3e:38:46:e2:e9:9f:0b:74:aa:52:
da:a1:d3:0a:b6:50:b1:1b:38:63:e3:23:e1:59:ac:ae:4f:75:
43:11:d5:d4:e3:bf:4c:11:d6:d5:de:18:46:cf:5d:31:dc:8b:
92:82:d7:15:d7:76:a3:fa:4a:bc:d8:bf:33:f8:22:cc:28:e3:
7f:4a:9e:4d:d3:14:a9:c2:90:37:57:ba:65:70:3e:17:86:7e:
5e:df:81:06:25:a5:ff:aa:b7:87:e7:c2:2b:0a:2f:e5:fc:28:
61:96:70:a9:89:1f:f1:1b:a9:3b:ed:bd:19:10:c9:a8:96:83:
28:c7:ac:26:ec:24:23:46:89:6d:06:c4:22:c6:36:d6:0d:07:
21:cf:97:65:0a:5d:e9:a5:0a:eb:e7:81:0a:8d:96:ff:93:d0:
91:60:06:42:15:70:6c:8d:4d:e7:03:8f:07:fe:5e:d8:16:c3:
8b:f1:c9:f6:bd:24:54:d7:24:fb:f6:64:5b:13:59:8c:58:44:
58:46:50:0e:4c:10:41:63:4a:8b:93:f4:15:1f:19:16:1a:a6:
a7:3f:e7:41:2f:c2:16:43:4e:d9:3a:fa:6b:af:40:63:3a:9b:
b6:e3:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:32:24 2026 by rpki-client