Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
File: vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer (raw, json)
Hash identifier: dzJbwcOL8JNyrEAacHH59TWLEuCnoJxg4E4Vbs44HC4=
Subject key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A36F80D5FF3B2DCE8EBC95CA78738C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:6f:80:d5:ff:3b:2d:ce:8e:bc:95:ca:78:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:31:7a:d9:b8:d3:f0:32:03:78:4d:10:28:
5e:9f:4c:ec:2a:c8:62:df:12:71:91:fd:63:2e:80:
59:1c:de:26:0f:8e:09:6d:45:ca:c4:00:cd:88:16:
aa:34:67:44:33:58:1a:4a:e5:69:48:73:7c:72:06:
f0:bc:15:25:2e:50:5c:ab:6f:94:96:6b:e5:a8:9f:
1b:92:07:c1:eb:b3:cf:c5:71:1b:09:f7:21:06:15:
ab:57:75:8b:75:d8:e0:b2:59:7b:ce:45:7a:6f:b0:
7e:60:75:28:dc:ad:b6:0a:d7:db:f6:32:77:94:18:
fe:2b:80:40:9b:3b:ea:02:f7:cf:e6:b9:73:83:53:
5a:f9:09:42:58:5d:d7:e7:b2:04:ff:4c:73:69:31:
87:94:0e:87:9d:af:94:60:c6:e0:55:0e:86:3d:c4:
50:8d:e3:f7:4b:31:eb:ea:9e:e6:7b:2e:9f:12:aa:
59:09:25:e5:1a:da:54:45:66:b2:ef:cf:2c:5b:ed:
2a:46:04:28:6f:65:d1:b0:f9:d3:e0:c0:44:21:86:
3e:2c:96:b0:6f:e5:92:f7:fd:73:28:b0:b9:b5:95:
e8:32:7e:f5:f6:5b:c8:d3:8d:92:32:ba:7f:31:05:
cf:a6:94:2d:cd:17:8f:f1:04:c1:e3:fa:28:68:d1:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216255
Signature Algorithm: sha256WithRSAEncryption
27:e3:fc:b5:40:19:a7:ef:0c:99:0b:26:af:c4:2f:c4:09:22:
a0:78:5b:59:95:02:63:71:0f:49:b6:b3:05:bc:43:ca:e6:83:
04:a6:2c:17:46:59:34:dd:11:a9:3c:ea:90:81:79:98:ef:a7:
45:ae:93:27:a2:8f:83:84:6c:43:55:13:3d:9b:9b:00:60:77:
e1:70:d0:d4:7f:43:d4:65:bf:60:4e:b5:3e:dd:0e:83:d8:dc:
2c:f3:12:75:8e:1e:13:ef:d6:c2:47:cc:8b:6f:a6:ae:21:b3:
4f:f0:46:03:45:ea:f6:18:65:19:3c:29:c1:8a:1e:9f:11:2f:
77:dd:20:e8:58:94:33:1b:cf:b1:7a:d7:66:e8:80:27:0b:9f:
49:5d:7a:35:6e:1b:2c:60:94:42:3f:04:a6:12:70:9d:81:da:
4c:19:e7:61:73:c9:17:cb:16:95:55:9e:4f:ec:35:ac:ac:74:
16:c5:ff:42:7b:40:b9:1e:63:ed:e6:81:69:a3:e9:7d:e8:20:
b2:4c:cc:f8:47:43:0f:51:61:a5:ef:87:77:4a:8d:d3:99:54:
bd:04:28:85:dd:a1:04:fb:36:e2:49:47:72:c8:c8:a5:b7:38:
cc:33:16:b9:a5:45:c6:91:b3:17:1e:b1:5b:d6:27:57:c2:33:
4a:48:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:40:46 2026 by rpki-client