Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
File: 0Nela7eOsawUaqeHHn3JaNsczZI.cer (raw, json)
Hash identifier: kpBFJCcL7gpqLX9ndEFUjH0T4tDEviJkDQdmYpmhLxM=
Subject key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0584032DCA3AF5AEC3EBE1B91B49A7202
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Aug 2026 14:36:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218805
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:40:32:dc:a3:af:5a:ec:3e:be:1b:91:b4:9a:72:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 14:36:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:be:ff:84:58:27:09:8f:1c:af:96:06:98:
3a:60:11:b9:7c:34:28:53:bc:78:9a:f1:0f:7a:3b:
4b:16:36:3f:2f:bd:9b:d6:8c:11:9c:8d:66:d9:b0:
ff:2e:7f:65:3b:fe:f0:98:9b:b0:e2:fa:b8:e1:19:
06:6f:37:b8:7d:40:dd:0e:57:86:82:27:f4:0d:dc:
8d:ee:2d:6a:e5:e7:dc:82:ae:49:cf:cd:bc:2a:b1:
dd:bb:51:3d:74:30:ab:ea:dc:fe:54:5e:7c:78:fb:
e1:96:26:c1:86:d9:7f:9d:dc:29:cd:07:72:98:0e:
29:be:6a:79:68:0f:7b:99:41:e0:94:10:ff:1e:a5:
4c:77:aa:5a:34:70:8a:5b:50:fc:b7:91:cf:da:a3:
71:e9:bb:bb:af:e5:a2:df:7b:74:6d:ac:19:2c:3a:
07:a5:fc:4e:2e:35:ce:5d:36:9a:90:48:38:51:60:
ee:eb:3a:72:f0:38:f0:cd:4d:f5:a7:5e:d3:f7:63:
01:f5:c6:e1:92:6e:23:51:1e:47:a9:18:65:dc:d3:
4d:cf:a4:9e:e8:ff:e8:66:35:62:be:d4:9a:c7:5f:
6b:4f:68:d8:f7:f0:2f:ee:6e:c7:75:89:2a:07:b9:
fc:fe:e6:8f:e3:1f:dd:3c:23:6f:7d:6e:c6:9c:91:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218805
Signature Algorithm: sha256WithRSAEncryption
9f:40:dc:38:c0:3b:17:ea:51:37:21:6c:a5:e2:d0:fb:8e:bb:
d9:a5:9f:38:c6:55:e4:dc:38:d8:56:43:0f:3b:7a:b6:3b:08:
d4:41:95:74:be:4c:d7:7d:7c:f1:61:5b:05:6e:a8:95:32:d7:
22:fd:1a:e1:aa:56:4e:1d:b2:42:71:65:f8:10:2c:c8:fd:fb:
fc:4f:56:7e:f8:dd:e6:30:58:f6:05:e0:89:e9:61:c7:aa:81:
8a:68:05:a9:eb:3d:5d:be:10:9f:01:9f:7a:08:69:08:b1:2c:
45:48:a7:67:d5:69:42:e5:6c:55:3a:16:33:d7:15:db:a4:72:
bb:48:2d:9c:a9:8a:a9:fb:7c:89:90:8a:f3:01:ae:08:86:b5:
e7:3e:d7:c1:f1:8b:6f:cb:86:3f:0c:77:92:33:da:e9:43:06:
da:ce:30:5b:c9:e0:ee:6e:49:e3:85:ec:0e:c4:a8:f2:fa:28:
d7:2b:da:5e:e5:24:dc:87:d3:04:7a:80:fb:5a:a5:5f:4a:f6:
c1:2b:8d:c2:2f:a2:6a:e3:36:71:ea:b7:44:bc:07:60:99:d2:
70:86:53:05:25:b1:a5:9f:0e:3f:fc:49:c1:b9:f2:4c:dd:18:
80:bc:7a:22:ab:15:b4:cc:46:7f:3a:de:f6:e6:cd:5d:5a:2a:
75:f4:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:27 2026 by rpki-client