Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
File: OR8g8mqm1jWY_zAlzdvbS5yatn0.cer (raw, json)
Hash identifier: 4l0x6SGgFKq5A1ae2cUhrVSg+ieZNfFoNw2hk+N8geI=
Subject key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A218E5BF75B2EC2B796C3A2AEC97608C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 03 Nov 2026 15:48:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215685
AS: 218196
IP: 2001:678:a90::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:18:e5:bf:75:b2:ec:2b:79:6c:3a:2a:ec:97:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 15:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:f6:0e:75:9b:fd:a9:8c:84:d8:40:d9:7e:
b0:0b:80:3b:9c:53:8e:d3:03:c2:23:8a:e5:ea:be:
3f:58:fd:27:4b:56:cf:79:2f:d1:0d:8c:b9:68:1d:
7f:3b:97:cb:8c:f9:bc:48:3d:83:22:85:a7:66:de:
f0:b8:02:8e:46:5e:fa:1e:96:3e:d6:3f:6b:c7:2e:
e6:62:11:3d:48:df:4b:c9:32:c8:e7:49:d6:85:77:
b6:05:8e:ba:84:22:0e:54:e0:3b:b5:8c:57:af:ae:
1a:cc:6e:ce:3c:8d:97:3c:e2:89:c3:46:37:8d:27:
bb:41:57:ee:3c:06:75:08:ad:d1:bb:65:80:6a:68:
7c:da:04:c9:f1:8d:03:5b:59:3e:e8:f9:bf:c5:c5:
f4:73:76:38:56:45:a4:c3:31:c2:d5:1a:cb:0f:62:
21:31:42:0d:42:36:17:57:6e:7b:41:58:9d:42:30:
21:66:69:12:e1:8e:ce:30:6b:54:e9:16:44:a0:c4:
8c:d0:2e:7f:40:29:7f:1e:80:ee:ca:70:52:38:0c:
bb:db:de:8b:d2:37:39:45:ca:b1:a7:5c:e9:4e:d1:
e5:07:a9:06:15:11:2b:eb:3c:62:4c:9d:8a:0c:47:
61:ea:52:27:6b:a1:3e:5e:9b:82:68:44:9e:52:b6:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215685
218196
Signature Algorithm: sha256WithRSAEncryption
57:c1:81:08:f7:bb:b2:1f:2b:fa:16:a9:0c:42:fe:4e:31:4e:
7d:e3:34:36:41:15:58:b6:dc:fa:4f:d2:56:46:e9:c9:7a:38:
e9:b1:1e:1e:42:5e:db:3b:f3:63:86:ac:aa:87:ee:9a:66:9d:
bb:f1:23:5b:b0:11:5c:1d:99:18:72:a3:2b:10:91:d5:f9:9c:
0e:dc:ee:fb:e6:10:0b:2c:58:8d:76:61:dd:ce:73:55:5e:ef:
6a:56:29:0e:a8:a8:cc:90:b1:ad:40:d8:05:24:8e:ae:63:fc:
7e:7f:b0:de:7e:64:b8:b7:75:72:9b:68:23:e9:38:82:fe:64:
a0:92:49:80:eb:cc:10:79:e5:67:c9:a4:b1:1d:10:4c:1e:75:
95:7c:01:21:18:78:df:e6:41:52:2b:a4:23:eb:6e:ba:1f:47:
4b:18:e4:47:24:37:d7:89:2c:cf:e8:0e:08:65:81:40:77:f7:
01:1a:df:53:cf:6c:53:6f:5c:c7:46:bc:02:f3:b9:82:fc:82:
61:ef:aa:06:24:33:f3:11:0d:73:9e:75:b6:11:eb:61:38:d0:
5f:68:96:d4:f4:5a:30:99:47:39:78:d1:54:6e:4b:d1:2b:e5:
bf:f5:ee:49:a1:85:70:7c:a7:f1:ee:9d:34:71:31:e9:20:79:
14:0a:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:40:40 2026 by rpki-client