Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pOdI-oL64pRirh4wH5ZftkuWxzE.cer
File: pOdI-oL64pRirh4wH5ZftkuWxzE.cer (raw, json)
Hash identifier: pyMzJw1onUD4YzPMkHZsr7GbVZviPhz4as2H7lalz5g=
Subject key identifier: A4:E7:48:FA:82:FA:E2:94:62:AE:1E:30:1F:96:5F:B6:4B:96:C7:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE84BB4658B3CD5961FD76F4741C14FFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 17:43:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200155
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:4b:b4:65:8b:3c:d5:96:1f:d7:6f:47:41:c1:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 17:43:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4e748fa82fae29462ae1e301f965fb64b96c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:1a:de:93:f1:f1:fa:a7:3e:55:80:18:25:
be:ac:5a:7d:99:07:01:e0:48:f3:86:c5:ca:cf:91:
e0:6e:7a:48:94:7d:60:38:4e:48:cc:4f:ce:7e:64:
a1:56:a3:a2:99:dd:81:b4:bf:c9:3d:f5:20:4a:2b:
30:6b:a9:b0:3e:7d:a3:d5:a3:4c:b4:44:5e:e7:e6:
db:ca:4d:79:8a:03:a2:00:b0:a1:f0:a2:d9:9d:53:
51:bc:72:c5:a0:71:c8:25:79:13:86:88:76:96:c2:
fb:03:b2:23:98:8b:6a:c2:7a:bc:1c:89:92:03:65:
30:71:71:2b:ac:b4:bf:80:0a:ef:9f:d6:21:8e:74:
dc:23:16:51:64:a0:ef:df:e7:85:95:85:87:d3:cc:
62:d2:e5:11:ea:af:4e:c5:1b:29:13:f9:a9:62:f2:
5b:6d:12:ed:54:5f:c8:62:30:f0:7c:4c:0e:cb:93:
dc:86:7a:db:79:59:74:93:4c:64:3f:6f:3f:0d:58:
9b:4f:0c:4e:92:a2:83:1d:8f:7a:fc:75:40:f4:41:
5c:7d:f8:64:2b:49:f5:b0:5e:82:c6:1f:64:bf:ea:
a7:0c:a9:6f:5d:31:4f:9f:af:ae:50:16:0d:d5:bc:
94:33:05:64:d1:0d:f4:72:9d:e3:c7:5e:43:db:c7:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:48:FA:82:FA:E2:94:62:AE:1E:30:1F:96:5F:B6:4B:96:C7:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200155
Signature Algorithm: sha256WithRSAEncryption
6b:d7:00:0c:0a:c0:f1:99:f1:f7:b1:67:5c:60:8a:fd:87:9b:
b6:fd:0c:1b:0a:66:53:d3:31:7f:92:8a:37:bf:66:81:40:47:
dc:85:2d:fc:64:db:68:76:02:23:e7:db:60:dc:48:9c:ab:d1:
a4:1b:4b:ef:46:d2:90:24:95:c1:71:c7:d7:2f:96:fe:1d:fe:
1c:71:6f:03:ae:8c:43:ff:5b:df:51:c2:50:77:bb:e5:d0:ec:
b4:32:e1:b1:4e:f2:e7:b3:ce:79:f9:84:55:dd:cc:ed:a5:5b:
74:df:ce:bf:d8:03:dc:04:08:e3:b9:58:64:bc:a9:3e:f3:3e:
5f:33:0c:98:8b:6d:e9:67:8a:31:91:0a:7c:5c:b3:75:03:f2:
2e:cb:ff:1d:81:60:c5:e9:7b:46:25:7e:af:13:08:fb:2e:30:
b2:74:73:50:3b:2d:d4:c9:ba:94:15:a1:c7:7e:78:d5:5d:f6:
00:2b:37:3a:8d:51:8c:0c:12:c5:52:d3:bf:44:ac:b3:20:e7:
a1:fa:52:f2:1f:c0:d3:64:a8:aa:a7:03:ed:c4:07:be:7c:05:
a6:6b:ad:67:46:45:e3:5c:51:4e:84:9b:b5:eb:39:5d:05:39:
7d:ba:8d:d3:bd:5c:9b:74:39:9e:99:8e:f5:37:e9:a5:16:40:
6c:2e:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:11 2026 by rpki-client