Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
File: xJH8Ajs5EjN6xxQp2chKN15bzS8.cer (raw, json)
Hash identifier: 5KZsUudqEBBrnb+uPMyffxApihPxIkZBnbNLNNnE5PQ=
Subject key identifier: C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A09F6045A7A8C7E892AE0D4CCAEC0A5082
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Sep 2026 10:04:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218677
IP: 2a0e:8a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:60:45:a7:a8:c7:e8:92:ae:0d:4c:ca:ec:0a:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 10:04:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:b7:e9:4f:cb:33:c9:34:f7:85:f5:ee:fd:
6d:dd:06:4e:5a:c8:f1:f0:68:b0:65:22:93:fc:26:
d7:75:7e:5a:10:76:9b:1e:2e:58:44:68:f8:58:ba:
68:9a:ec:67:54:8b:76:e3:d2:c8:fa:f6:85:56:fe:
8d:f2:fc:72:3a:44:3c:46:0b:e8:85:68:01:7e:58:
5d:e1:e6:a8:82:b1:5b:21:3a:66:0a:a9:1e:df:0f:
4c:5a:03:4d:e1:51:c6:b0:bd:26:10:7d:51:1a:7e:
c5:10:20:25:97:8f:b0:55:b1:86:23:b8:f3:a5:a6:
65:cb:78:45:cd:90:64:f5:19:2b:9f:e1:6d:c0:97:
29:f8:89:2f:f3:db:be:7c:fb:e7:fe:2f:e7:d4:0b:
17:6d:84:bc:d4:eb:b5:a6:13:e4:d8:2d:51:76:67:
07:f1:35:df:65:64:42:ca:a6:ca:5a:02:d4:a2:f0:
9c:3a:6c:08:db:ca:4b:8a:86:4b:a5:18:c9:be:5e:
db:a9:1c:aa:5d:1d:2a:2a:39:a3:c0:85:89:fe:10:
77:5f:10:08:e1:69:3a:45:d6:8d:82:0d:8e:73:82:
92:1e:61:ed:98:ae:bd:ee:f9:1c:dd:6d:2e:d1:0b:
7f:47:dd:1a:70:32:96:ab:d0:ef:c5:b7:ec:25:16:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218677
Signature Algorithm: sha256WithRSAEncryption
7a:1a:cf:23:0e:2f:32:fc:51:64:64:c9:11:d0:f0:cf:d4:d3:
da:98:1c:6f:e6:0c:a1:f7:07:46:a6:87:61:3b:48:63:21:22:
db:83:07:ba:33:bf:df:2d:1c:a8:5a:ad:3d:37:7f:9f:f0:44:
e7:9b:7f:98:de:35:97:1a:11:3e:a7:96:84:0c:5a:77:7b:45:
57:fc:94:8c:49:ee:51:8a:10:63:0b:b6:6e:c5:1f:9f:ec:b4:
c2:aa:c5:23:18:d4:cd:f8:f0:ca:48:6d:75:64:68:30:6d:7c:
b5:71:e2:2f:7f:42:26:3c:ce:9f:45:81:55:4f:34:44:66:90:
c6:23:d5:9d:68:d2:d7:96:8b:7a:82:22:81:2c:52:12:a1:70:
65:08:84:d5:5d:5e:4d:21:03:5b:5f:f5:01:65:62:7c:9c:d5:
90:dc:2d:48:32:21:74:b5:1e:77:f9:5f:3e:ad:f6:9d:87:27:
c9:22:0a:ff:24:9d:37:9c:a1:aa:e7:5e:e8:54:37:11:1a:f9:
6a:02:14:9c:8d:e0:44:73:6f:1b:48:36:d7:01:75:a5:32:c0:
61:55:df:96:66:29:d4:d0:fb:49:9d:ff:49:12:91:75:7b:c3:
2c:4f:1f:1c:2c:9f:95:5b:1f:47:a5:5d:5f:e7:91:4d:42:8b:
a5:e1:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:10:57 2026 by rpki-client