Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.cer (raw, json)
Hash identifier: mk31RhI1u1BSXxtl0Qj9JHZHnE3WFhUQVNI5BhEtSa4=
Subject key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D94D2935F77C099DB62F710F95605287B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Apr 2026 05:45:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204027
IP: 195.43.60.0/22
IP: 2001:678:f0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:d2:93:5f:77:c0:99:db:62:f7:10:f9:56:05:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 05:45:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:4d:6e:c0:9d:29:46:ee:8e:4f:76:5a:e1:
e1:71:e8:23:05:eb:03:bd:27:ce:ca:f6:a4:f6:62:
c1:83:80:ad:66:ec:f0:38:75:9b:b6:65:96:f9:df:
96:38:bf:2d:ae:ab:be:67:d6:39:e5:b0:85:88:ce:
22:ae:bf:4e:4a:39:76:99:cb:05:af:d0:5e:a0:28:
03:ac:ad:e3:f7:7f:83:7e:bf:60:9e:27:e4:74:15:
46:32:2c:7a:69:7a:1b:bb:30:09:5e:c2:62:7b:8b:
d2:86:6b:43:46:b2:f2:76:29:f1:58:28:fe:a3:a3:
7a:c8:30:b3:a1:be:1e:2f:1b:f6:33:6e:46:1e:90:
cd:6b:bf:cc:32:a2:45:96:be:1c:f1:12:be:7a:88:
6f:a0:cf:b1:4e:c6:55:b4:b3:88:6c:cc:17:e9:54:
31:3c:14:4d:b6:fe:15:a9:9c:4a:e3:75:6a:26:24:
42:a1:83:95:83:2d:ee:62:f1:70:0d:6a:a0:bb:17:
f2:2c:a2:7f:96:1f:9f:39:5b:71:1a:d4:47:bb:98:
90:7a:c1:25:ea:b3:b3:40:9d:2c:f1:8a:00:59:dd:
d4:87:76:e9:74:35:f7:0a:13:3b:4e:0c:c5:7c:b3:
88:dc:54:dd:ae:eb:09:d5:ef:3f:f1:ef:0f:b9:89:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.60.0/22
IPv6:
2001:678:f0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204027
Signature Algorithm: sha256WithRSAEncryption
49:31:a1:c6:0d:4c:4d:c2:ff:b3:9d:cc:9a:2c:3c:fb:b4:df:
1d:73:ad:51:b8:a9:f2:41:09:2d:4d:58:49:d6:14:e0:1f:4b:
4e:a8:94:41:b4:fc:3d:5a:d8:89:d0:ac:ab:3e:18:52:3a:26:
c9:f0:79:59:ec:4c:c3:72:e4:bf:48:25:e9:32:d5:d3:c1:9a:
c7:59:ae:7a:fa:86:44:56:b5:29:5c:6d:44:82:41:d7:00:6b:
da:8d:3d:35:cc:70:8b:59:92:0b:a0:6b:a6:ad:5a:58:0c:e8:
37:d2:40:45:5e:84:d3:9e:ab:79:74:48:ce:e7:2c:5a:6f:44:
28:e3:3f:56:a7:14:27:85:b4:c5:3e:d6:1b:4d:c3:98:37:00:
a5:90:fc:2d:c2:24:50:3d:38:e2:9d:fc:9d:95:cc:9a:f6:05:
69:93:19:6d:f9:d4:d2:e6:bd:a2:1e:79:99:37:73:bf:89:e5:
85:55:f8:5a:61:0e:fa:90:51:4f:86:db:9f:30:ef:37:b9:bd:
0c:d6:ed:d1:76:9a:74:b5:1e:74:98:a6:60:08:2b:79:89:c0:
49:40:f9:b2:e9:5e:0b:4e:2b:c3:e0:8c:27:63:fc:5a:af:2a:
f8:ba:7e:01:f5:24:c6:ed:04:28:68:a2:f9:7a:69:f8:cf:7c:
6e:76:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:08 2026 by rpki-client