Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
File: SRodzN7JXOWDRq33ARJj1k6TtNE.cer (raw, json)
Hash identifier: Hw52w9UZ5l+oqAFUWrUTVZZpkWlIAPL56Sqg9D4/FIo=
Subject key identifier: 49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AD3F1FDEC525E91AB5779AEB02C07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210338
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:d3:f1:fd:ec:52:5e:91:ab:57:79:ae:b0:2c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:db:b8:ee:0d:7b:a2:0a:3d:ae:06:79:07:
d9:10:1b:79:c5:20:cd:85:80:34:02:4b:16:e8:0b:
0b:7a:5e:0f:e2:59:bc:00:62:69:04:17:9b:5e:53:
16:1c:b0:11:84:1d:81:a4:8f:86:22:54:6b:25:89:
42:88:5c:52:6f:42:3f:7c:3f:f1:09:c6:77:25:e3:
78:22:7f:36:a2:10:42:de:a5:3c:af:26:62:f5:0d:
31:5e:43:fa:15:55:ad:29:82:f7:cd:2a:0c:d3:00:
c1:55:f1:aa:36:39:35:e2:8c:9b:c8:08:20:48:e0:
d0:f6:86:22:fa:1b:da:f7:af:64:25:6a:0c:a6:f6:
0f:a6:7a:69:ee:20:61:71:4d:a5:31:94:a8:8b:d3:
47:26:cf:8b:7c:2b:32:38:e4:29:83:8a:24:37:68:
39:97:21:33:7b:44:4c:70:f0:4e:5c:c5:f3:ca:14:
1d:48:6e:9f:a1:82:fd:a5:d9:8c:04:92:af:7d:5a:
51:16:3d:63:96:8f:8d:f9:ef:64:c9:75:ae:cf:11:
d5:00:8f:26:18:b3:bc:70:49:1b:67:d0:3a:28:d2:
72:50:21:73:99:e0:e7:3d:2d:5d:22:a3:9e:82:89:
1e:9b:61:49:d0:a9:a3:b5:da:71:ef:f2:ae:9e:1e:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210338
Signature Algorithm: sha256WithRSAEncryption
25:e9:0d:0f:48:1f:74:b2:f5:62:e0:35:c5:b6:54:5a:91:cc:
8d:c1:ed:80:fd:fd:b7:3b:8f:51:45:8d:bf:c7:66:66:5f:76:
96:3c:85:1a:60:e4:3c:e9:e9:12:6a:72:7e:9f:3a:3a:03:89:
43:63:01:22:1a:a1:dc:37:6a:ec:5c:10:76:e1:4d:69:47:2a:
b5:e0:e5:04:3b:0c:1c:b2:25:9e:3f:09:4a:f8:22:63:39:22:
ae:28:37:2b:d7:47:c1:1a:8a:83:39:62:bf:ec:32:a5:19:3f:
59:81:5b:b6:8d:15:b6:f0:9b:2d:8a:98:de:de:1d:9b:83:3d:
dc:4d:76:50:ae:17:67:15:3a:95:65:54:e0:e1:98:00:02:61:
10:85:6b:72:bc:19:a9:20:9e:84:33:30:23:05:4e:58:94:b5:
55:e3:55:3f:43:45:91:79:81:e0:e9:65:be:1d:9b:d6:57:26:
e3:28:20:cb:54:2a:00:3d:00:37:3b:2a:50:92:89:3d:5a:1a:
f6:b6:cf:2c:db:90:24:d5:2f:db:4f:53:d9:e1:53:9f:9d:25:
2e:b7:51:73:e4:3c:20:3e:ab:95:81:7a:a1:68:30:81:4c:af:
6c:f5:5c:d5:e9:cd:aa:3a:18:f3:e0:c1:3c:1b:8c:62:8a:5c:
d5:24:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:40 2026 by rpki-client