Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer (raw, json)
Hash identifier: wGu7pRtRBq8X08QfzgZ3vInl5ezNg+QbeJN7LZ/OiiU=
Subject key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7BB46EE1293307ECB11D8D1C1EADB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213995
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:bb:46:ee:12:93:30:7e:cb:11:d8:d1:c1:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:98:52:4d:77:13:37:96:00:6b:6f:bd:2f:
ba:83:2e:00:e9:bf:88:2a:2e:fd:49:72:62:84:42:
1a:96:4d:89:86:5b:a9:af:55:93:2f:25:15:34:ba:
7c:ec:22:22:21:66:63:df:b1:c1:46:7e:cd:e9:18:
d3:7a:c5:9a:5e:a9:e0:8e:12:f9:b9:3c:39:3c:0f:
04:ce:5a:11:26:75:f3:b4:e5:18:79:11:af:25:4f:
8b:6f:70:20:24:7f:d6:16:8e:26:67:31:8b:7a:da:
18:a1:14:39:42:75:eb:c7:94:60:e7:85:e3:cc:2b:
e0:40:34:82:3a:04:6a:cc:61:24:b3:dc:02:3c:ce:
b9:06:fd:dd:e1:71:13:ef:b6:53:20:5b:70:be:1d:
13:2e:df:c6:90:ee:d9:9e:be:28:f9:53:49:97:eb:
1e:9f:3e:56:5e:4a:30:b5:1a:dc:8f:9f:46:83:74:
40:4e:bd:79:d3:e8:e0:2a:7a:77:4e:4b:dc:15:ae:
2d:82:9b:73:7b:d6:09:15:76:be:36:42:55:18:bf:
3b:cc:9d:c8:f2:f5:07:28:d8:d6:ee:c0:bb:8d:ae:
10:da:06:bc:3e:6e:ed:b0:a9:b7:6f:17:f1:4d:c7:
ad:eb:2a:82:e6:4e:d4:f5:5a:04:5a:b2:c5:9c:84:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213995
Signature Algorithm: sha256WithRSAEncryption
7e:6a:79:c0:d0:db:68:f8:6f:67:8f:40:c2:a7:0c:a1:df:d9:
d8:b1:e8:fe:af:d0:d0:5e:56:0d:d7:87:81:17:a5:d1:af:7a:
55:52:a2:d3:c7:8d:3a:4f:71:10:6f:c6:11:b1:6e:fc:38:7d:
7b:a0:8a:cb:9b:19:6a:bb:eb:49:2f:c7:f0:8c:dc:a5:ab:18:
c4:16:28:84:49:f7:ec:e6:91:e5:e4:b5:ea:e0:2b:43:e2:29:
c4:2b:0f:23:49:00:c4:b6:60:34:66:74:b6:98:76:56:0c:1c:
f7:68:2b:43:eb:13:70:b7:ca:b8:c9:16:f7:38:f2:ed:74:23:
36:92:46:f5:eb:04:45:a9:c6:d1:65:de:35:fa:cb:28:73:ad:
db:bd:3d:9c:d9:9a:94:f1:cd:d3:9d:93:23:81:15:7d:2d:f5:
37:10:a1:27:b9:6a:df:05:d1:0c:ed:13:4b:e8:ac:f9:08:f4:
52:5d:94:16:15:9e:a1:a7:7c:52:be:a1:d6:6a:3e:90:b5:ea:
42:63:53:ea:50:f9:f7:58:bd:50:51:3d:a8:50:58:8e:55:de:
b4:59:2e:42:d4:7f:ba:b9:a4:a2:04:e2:ad:00:b7:23:fc:62:
7a:6a:34:42:33:97:18:a1:f8:15:ea:be:96:b0:a6:9d:bb:39:
4f:74:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:05 2026 by rpki-client