Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
File: fSiu_AZob_0_snjG3lKXc-2r3p4.cer (raw, json)
Hash identifier: /X5O0qYp9Tv+n0GoFQu9/XuUDA1XPoDnly/ojSTR1LU=
Subject key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F144DF54B0527EF9EF68CBFA093A148
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:19:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205563
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:4d:f5:4b:05:27:ef:9e:f6:8c:bf:a0:93:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:ff:31:08:71:61:71:17:17:07:4b:92:ae:
17:8a:2b:f7:4d:cc:20:eb:13:02:33:dd:1f:2a:b5:
3d:16:b2:e2:d2:34:eb:aa:ff:c7:9a:2f:f2:88:92:
60:a0:ce:82:f4:ec:16:c3:fa:63:c7:df:af:8f:6d:
84:71:bb:f8:99:2d:9c:1c:17:77:e5:6c:b4:da:cb:
48:87:50:a2:fb:72:ef:25:af:b2:dd:7b:3c:02:db:
42:04:e4:37:aa:04:1f:57:d4:6f:44:f3:39:f4:75:
98:c0:20:22:51:04:37:f4:dc:6a:d6:a4:01:9f:c9:
93:9c:5f:b5:d4:d6:fb:0b:20:a1:4e:de:de:72:c1:
9e:e8:4b:fa:8a:d4:f6:a0:a2:54:81:e6:96:a0:a3:
3e:a5:93:74:1a:a6:18:4f:f2:9d:0e:f7:c9:d9:ef:
91:a0:50:50:15:30:2b:85:3f:de:67:73:8e:b3:5d:
5d:ea:6b:71:bd:1e:33:32:25:42:d0:2a:7f:cb:f1:
78:50:4d:58:7d:9b:c1:39:af:af:55:2d:d1:16:cf:
35:84:69:cf:1f:e3:50:16:04:fd:4e:64:86:57:64:
5e:4d:73:d8:3e:c0:f7:0e:8c:65:70:a4:d7:89:b4:
f5:09:b9:fa:c6:45:3f:89:70:55:77:14:be:c0:06:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205563
Signature Algorithm: sha256WithRSAEncryption
39:31:c4:be:4c:0c:3f:85:ac:37:7b:e2:db:16:da:30:e0:d3:
fa:47:83:ab:95:31:0b:54:0e:be:d9:91:8e:10:8f:33:fc:5a:
c4:fd:3c:36:37:76:10:a7:3a:a3:3d:03:7c:22:2b:ff:54:11:
d5:5d:8b:4c:19:a4:d6:02:d7:16:6c:c1:7f:48:ce:23:2e:1d:
06:7f:65:a2:6b:33:79:ed:c4:c7:22:5a:bc:87:13:32:ed:26:
9c:76:08:08:5b:2a:d4:cc:21:6a:fc:7e:a0:c4:51:c8:20:f0:
5b:92:c2:61:32:65:c3:1e:85:48:bc:48:34:1c:a2:04:3f:a0:
b6:59:0b:43:87:15:62:5b:a3:a0:2b:25:a6:f1:2b:63:e4:5d:
8b:3f:fd:ac:4a:ac:e9:d6:51:ef:0d:d4:b8:73:5d:03:59:b3:
d3:4c:14:d3:3a:66:f6:bb:d8:2a:72:2f:7d:26:4c:1a:ab:ca:
60:1a:9e:00:f0:9b:27:d0:7c:5b:d4:6d:90:bd:11:f0:c0:00:
11:89:1e:84:bd:ed:3b:14:22:0d:e0:b6:8c:34:cd:b7:93:94:
bd:b3:54:c8:88:2f:75:77:88:f7:75:88:84:10:b4:c8:80:17:
5a:4b:98:36:22:11:5b:26:0c:bc:cc:5d:6e:3b:46:d9:c1:fd:
3e:cc:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:56 2026 by rpki-client