Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer (raw, json)
Hash identifier: yDlB4g0zBQTXqF8KppuM35E1MRLrpepnTdJATzhTfoE=
Subject key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C710621EB311CEEBF75A166D34744C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59464
IP: 194.49.32.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:10:62:1e:b3:11:ce:eb:f7:5a:16:6d:34:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a0:69:a0:ca:ca:d4:52:bc:2d:58:e2:02:
cd:3e:36:68:d7:52:14:b6:6f:81:66:29:24:47:1c:
ca:b7:e4:bf:26:ed:72:d9:c3:2c:22:0d:8f:02:1b:
e1:b1:b9:02:22:55:5e:d2:7d:58:0c:d4:fa:8a:ca:
0b:dc:2b:aa:3e:1c:db:72:95:74:7a:81:cc:07:2f:
c2:a6:cd:ee:5d:d1:65:c3:0c:48:7e:74:40:89:f2:
6c:48:35:5c:25:3f:b8:e3:68:b7:3c:cb:97:11:c6:
3d:e3:2a:61:a2:fa:c5:c1:24:74:f2:98:9e:10:65:
4b:c2:2e:93:87:7b:d7:6b:40:1c:30:1d:06:7b:04:
9c:fb:d7:dc:e7:3d:db:7c:c2:94:27:4b:58:31:ce:
09:b4:31:84:2f:0a:43:f2:31:9b:41:4e:08:e8:10:
cf:f1:34:09:77:21:a0:68:34:15:ab:e3:4e:32:f5:
38:5d:74:58:15:52:94:17:8c:c2:20:d0:90:57:6f:
ee:fc:69:9a:e1:bb:b7:b2:24:dc:55:9f:1b:9f:a7:
b8:f1:a3:fe:3b:6a:3a:b0:8b:e8:a1:cb:f6:a7:7c:
82:95:01:a0:f4:62:b6:6c:89:24:ea:67:ec:2f:fe:
9e:0b:61:c5:67:24:6b:e8:be:9c:4c:9c:6d:fd:05:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.32.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59464
Signature Algorithm: sha256WithRSAEncryption
39:e0:b0:ad:23:00:98:61:6d:23:cd:9b:e3:f7:23:50:89:b3:
f8:ad:26:08:e7:a1:f6:4f:96:a8:71:87:a4:5a:4c:ff:d6:74:
17:b4:49:f5:04:20:0c:71:e9:b1:7c:29:c8:f4:f5:6f:d4:16:
06:b6:19:bf:81:36:83:9a:de:1c:5b:44:69:60:59:2b:0c:d6:
6a:7f:b1:ef:92:e5:aa:78:53:54:fd:61:0e:b3:b7:c3:69:d0:
bc:3d:c3:08:8d:0d:61:63:9d:45:a2:fc:13:67:e8:9b:19:6b:
22:58:76:12:7b:aa:36:4b:67:42:79:38:5f:2f:0e:f6:e4:ad:
20:ad:43:95:7e:dd:3e:f7:1a:6c:6c:69:e8:7b:7a:56:bb:57:
15:88:45:3f:48:d7:39:ca:d2:7f:08:a2:c1:cc:95:1c:34:e1:
c4:7f:1e:2b:3d:49:cd:dd:0c:97:74:a5:0c:1a:a8:87:75:df:
c0:9f:7a:64:99:63:b9:48:b7:55:bc:9a:c1:43:33:d2:7a:0d:
2b:23:bd:7c:43:28:bb:8a:a2:3d:28:4d:9b:dc:73:53:c7:19:
27:92:cc:2a:48:f6:ce:fc:94:37:87:8c:52:67:d2:d7:95:da:
62:87:60:10:06:3c:a2:90:a3:df:c2:47:97:0d:e8:d3:87:92:
f6:3b:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:58 2026 by rpki-client