Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.cer (raw, json)
Hash identifier: UxebeU5V0IsOMHFSzdRe0R4XffwomnLlGSr/m01dxAw=
Subject key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EBCEF2D8601A4C93785610A1E399D7C17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Jun 2026 17:44:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219481
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:ef:2d:86:01:a4:c9:37:85:61:0a:1e:39:9d:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 17:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:a7:49:c9:d3:95:fd:f2:e5:20:0d:d7:49:
2e:a3:44:98:90:20:7e:07:11:25:11:fb:ac:76:49:
33:4d:07:51:1b:92:ac:90:1c:9f:65:6e:d2:20:e5:
93:df:5e:09:8f:78:c2:01:96:45:1c:0e:aa:a6:70:
53:3d:f4:1d:f1:37:c4:6a:90:5f:ab:84:2b:78:78:
4b:9a:8b:79:f6:6c:f4:ad:eb:3d:f4:23:cb:1c:54:
c5:64:b6:cb:36:0a:8a:f4:07:1e:34:f6:3f:62:1d:
10:61:f3:d2:15:57:f0:77:6c:9b:5b:2c:45:91:f6:
c5:21:2b:76:5d:d5:44:9f:48:a1:2b:13:18:ea:8d:
c0:4f:ec:1f:20:88:d9:59:12:cf:6c:c3:fa:4c:d5:
09:de:7c:b6:7c:fe:f1:32:1a:fe:ec:b3:c8:8e:ee:
1a:ea:c8:c9:a1:48:bb:08:cd:95:6b:c3:6e:9e:18:
7d:66:b4:79:9c:8c:29:6a:96:94:c8:6d:96:0f:f7:
1f:e5:06:89:b5:4c:e1:5a:96:41:c3:cc:fa:67:f5:
af:09:6f:e5:07:96:ee:23:ff:e3:12:8a:fa:18:22:
a9:61:56:2b:26:48:07:a1:c2:9a:97:6e:19:37:14:
03:58:e2:40:c2:7c:fa:41:52:ad:15:8c:50:71:26:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219481
Signature Algorithm: sha256WithRSAEncryption
6e:9e:59:7e:12:00:c5:14:3c:71:90:66:a1:c9:39:f3:bf:b0:
81:54:cd:2e:c0:64:1a:a7:9a:85:45:21:8b:6b:9b:84:ca:c8:
81:1f:c4:9c:42:ec:80:c9:e7:8d:57:8c:87:9b:3f:a9:22:ab:
0f:da:69:1b:6d:14:85:3a:d9:7f:d1:93:91:43:59:e2:72:3a:
2c:b6:16:34:c5:42:15:82:89:e0:ae:66:d5:25:59:4e:41:c3:
fa:54:12:db:86:8f:e8:a3:24:3d:e5:e1:a4:93:43:f1:6a:09:
a0:c6:4a:03:8f:9f:08:3c:37:4e:31:6b:30:5e:48:82:c2:fb:
34:6d:b3:3c:1d:62:0f:37:d5:cb:20:9c:57:97:26:36:0e:fe:
36:fd:17:d4:22:4a:e8:f5:35:38:46:d8:19:13:19:81:07:e2:
90:94:16:fe:ad:1a:48:d8:d0:08:62:e6:a1:08:82:fc:4c:a3:
b4:34:0d:1f:eb:41:aa:e3:46:28:64:2f:12:d5:c7:2f:c4:18:
17:97:a1:bf:57:55:e6:35:14:d0:96:74:80:51:16:93:3d:fd:
65:9f:e0:3f:af:9c:9b:95:a9:e5:e7:65:9f:7d:52:c1:a3:fc:
53:61:7a:22:1b:58:84:de:d3:e9:0c:db:f8:ab:9a:9a:ac:31:
2d:d5:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:16:18 2026 by rpki-client