Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/od7xNhBOW-PrzcOR5aCl-dRUN78.cer
File: od7xNhBOW-PrzcOR5aCl-dRUN78.cer (raw, json)
Hash identifier: Bq6KJvlFxLaKODkAki8B2XOagbObffKjPhEMceq23Cw=
Subject key identifier: A1:DE:F1:36:10:4E:5B:E3:EB:CD:C3:91:E5:A0:A5:F9:D4:54:37:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A189B3999244DECD36439ABC1DB3AC1E32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
caRepository: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/
Notify URL: https://rpki.shrdserv.com/rrdp/notification.xml
Certificate not before: Thu 29 Oct 2026 22:06:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219157
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:b3:99:92:44:de:cd:36:43:9a:bc:1d:b3:ac:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 22:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1def136104e5be3ebcdc391e5a0a5f9d45437bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:a5:a9:99:a6:d1:94:01:f8:63:b0:db:c7:
1c:8c:05:f9:25:ad:d0:15:f8:cc:b4:b5:73:d7:75:
2c:e6:66:da:16:a9:16:bd:73:73:33:9d:09:d0:25:
f0:11:fb:e6:ec:b8:39:d6:a7:72:25:5c:38:0f:6f:
97:2c:83:49:6b:02:ad:27:4f:fb:fd:58:5c:df:19:
71:ff:aa:58:cb:77:4b:db:ad:b1:4e:d1:11:0c:cf:
7f:48:5a:b5:3f:11:ed:61:88:91:c3:b8:6a:15:be:
27:8b:83:a3:6b:56:ca:44:26:42:dc:f6:46:52:f4:
6e:b5:72:bb:88:31:11:a3:6d:9d:49:a5:a3:b4:7a:
55:9f:17:eb:ac:c2:26:c4:52:81:1a:bf:46:13:e6:
dd:b0:82:37:f6:42:93:eb:25:63:0e:36:17:dd:77:
6a:b1:ff:ae:fe:1e:17:4b:d0:9d:e7:a9:37:5d:a5:
a8:9f:66:c1:0f:5d:8a:65:2d:87:20:51:eb:57:de:
6a:64:b8:2c:25:77:ed:ef:14:93:b1:77:61:ad:7c:
e7:2d:5f:47:c6:d6:d0:23:8a:d2:8d:78:f1:84:9b:
84:34:36:a6:07:cb:ee:15:6f:40:1e:11:44:e7:dc:
95:2e:f1:d2:2d:bd:17:3c:a1:fc:86:31:6a:08:49:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:F1:36:10:4E:5B:E3:EB:CD:C3:91:E5:A0:A5:F9:D4:54:37:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/
RPKI Manifest - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
RPKI Notify - URI:https://rpki.shrdserv.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219157
Signature Algorithm: sha256WithRSAEncryption
27:20:2d:6e:55:fa:ed:25:9c:78:8d:5d:c8:8d:9c:dd:93:9c:
e4:8d:02:0c:5f:73:6d:02:2c:eb:7c:b5:df:c1:d2:60:47:f8:
d7:75:18:35:4b:58:77:16:71:d0:01:39:98:51:f5:47:2d:67:
a0:d5:e0:55:6b:a3:33:8b:2a:8a:1c:c6:14:a0:59:f3:22:89:
4b:41:47:7d:b8:13:0d:07:c0:0f:7b:c6:5d:90:eb:d1:e4:40:
53:d9:f5:0b:e8:7c:9b:e0:d6:88:56:e0:53:c4:cf:f7:f5:fa:
db:13:40:4d:c4:26:81:37:9e:af:a9:2a:d8:c3:49:1c:5d:28:
8e:1f:6d:5f:cb:a8:c0:c0:d0:4b:33:c2:e0:7a:fb:07:bb:56:
60:f7:93:6d:d6:39:d6:85:58:32:1e:77:8d:35:8a:d2:8e:fd:
93:52:21:a9:93:2b:8e:3f:39:ae:fe:bd:90:f5:88:af:c8:14:
d7:34:6f:33:9a:87:ba:09:0e:dc:e0:95:04:a6:8a:81:0d:60:
03:cc:eb:39:f7:5b:a0:3b:e9:b0:c0:15:b1:52:83:7e:3a:09:
52:73:56:53:f6:24:fd:59:8c:3b:1d:0b:90:3f:c9:d8:a3:d8:
01:86:b5:e5:27:fd:8c:6f:1b:9b:a2:d7:bc:ac:a6:71:6e:a3:
8e:8a:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:38:18 2026 by rpki-client