Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer
File: FVyGOUifFGOmhVPNwF0ZZKAXoac.cer (raw, json)
Hash identifier: +NxQ8gW7VTucgneFcN2245GpnPvWOOrGpUtBinihzB4=
Subject key identifier: 15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0532DDBA159989625FDC6197BEE291AB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 30 Aug 2026 14:58:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203686
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:2d:db:a1:59:98:96:25:fd:c6:19:7b:ee:29:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 30 14:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=155c8639489f1463a68553cdc05d1964a017a1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:1a:a9:10:6d:49:47:a1:5e:6e:05:02:82:
43:28:24:3a:5d:90:75:fd:f6:28:d1:24:cf:27:9b:
7e:2e:c9:b9:2f:67:c3:39:21:66:48:f2:f6:6e:d2:
fa:01:1c:d1:48:bd:95:d3:96:15:ea:99:2b:41:c0:
03:09:81:56:15:a4:62:07:2c:89:3c:32:01:4c:2d:
14:52:9b:11:43:42:f6:05:76:02:cd:a4:9a:d7:e9:
3d:5c:f1:6d:2d:e1:04:56:d5:4b:a6:4b:b2:6d:7f:
d1:4f:f1:57:0e:fd:c5:6d:8d:cc:e9:cb:41:17:90:
47:34:d2:05:61:c4:c8:5e:ef:6e:61:c1:e8:26:4c:
23:8b:ee:84:13:78:3c:4f:9c:c7:d4:65:c1:97:c3:
ec:1a:cc:cd:59:2d:cc:76:91:48:86:0c:4f:76:15:
30:d0:f5:23:b6:8b:22:98:3d:4d:97:0f:70:d0:0a:
2f:77:2e:83:3d:b0:b0:83:5f:f7:17:94:f3:bc:e0:
e5:32:39:2e:3f:2b:e2:a8:15:c1:e2:84:78:8c:43:
ee:74:cb:ca:61:ca:5a:d3:6e:af:19:e5:4a:f0:ba:
47:96:eb:b9:54:29:6d:63:39:1a:44:ce:15:69:d6:
1b:72:f0:0a:c0:a4:ee:d8:29:cc:e6:c2:9d:71:5b:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203686
Signature Algorithm: sha256WithRSAEncryption
75:cd:40:0d:fe:f0:bb:0b:c2:a7:3b:3e:8e:36:7b:46:0d:1d:
8f:c6:c4:4c:65:b8:e4:0e:b4:a6:1f:3d:3d:bf:06:9f:a3:97:
f5:33:98:0a:ac:72:c3:13:f5:cf:6b:75:6b:a2:56:92:dc:af:
24:a5:52:2e:9d:5f:d7:b5:60:1f:87:d3:18:17:90:96:39:d2:
61:a9:7c:67:a0:e1:e9:7e:ae:2c:87:9c:08:b0:53:0a:e5:27:
70:72:71:75:0e:9e:8c:c1:10:66:d0:c7:c1:82:25:f2:94:2b:
ca:65:d2:3a:c3:17:70:0b:40:53:15:7d:c7:ae:f6:4c:d1:0c:
83:e8:9e:ef:39:e6:d6:43:07:94:59:a8:a8:56:02:78:0a:c7:
08:7f:df:44:fe:4c:f5:1c:9e:e3:25:80:40:a3:73:26:b0:65:
4b:cf:f8:2b:56:78:4d:26:57:a8:eb:fc:9d:53:ad:6f:b4:7c:
a8:61:01:84:7e:23:c1:b2:00:5c:d3:4c:15:b3:3e:81:d1:c7:
24:85:3b:46:2f:76:f5:da:c8:99:b8:09:0e:81:c0:9a:d9:55:
68:6d:96:29:3b:20:57:df:96:52:bb:c4:8b:0e:21:46:ce:be:
41:16:f5:88:07:35:7b:61:bc:3f:21:52:d7:3f:d0:a2:aa:11:
2b:15:d8:94
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaBTLduhWZiWJf3GGXvuKRq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODMwMTQ1ODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVjODYzOTQ4OWYxNDYzYTY4NTUzY2RjMDVkMTk2NGEwMTdhMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt80aqRBtSUehXm4FAoJDKCQ6XZB1
/fYo0STPJ5t+Lsm5L2fDOSFmSPL2btL6ARzRSL2V05YV6pkrQcADCYFWFaRiByyJ
PDIBTC0UUpsRQ0L2BXYCzaSa1+k9XPFtLeEEVtVLpkuybX/RT/FXDv3FbY3M6ctB
F5BHNNIFYcTIXu9uYcHoJkwji+6EE3g8T5zH1GXBl8PsGszNWS3MdpFIhgxPdhUw
0PUjtosimD1Nlw9w0Aovdy6DPbCwg1/3F5TzvODlMjkuPyviqBXB4oR4jEPudMvK
Ycpa026vGeVK8LpHluu5VCltYzkaRM4VadYbcvAKwKTu2CnM5sKdcVt82wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBVchjlInxRjpoVTzcBdGWSgF6GnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2FhODdj
Ny1lZGVmLTRiODQtOTE2NC0zNjhlM2ZmYjlmNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvYWE4N2M3
LWVkZWYtNGI4NC05MTY0LTM2OGUzZmZiOWY1MC8xL0ZWeUdPVWlmRkdPbWhWUE53
RjBaWktBWG9hYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbpjANBgkqhkiG9w0BAQsFAAOCAQEAdc1ADf7wuwvC
pzs+jjZ7Rg0dj8bETGW45A60ph89Pb8Gn6OX9TOYCqxywxP1z2t1a6JWktyvJKVS
Lp1f17VgH4fTGBeQljnSYal8Z6Dh6X6uLIecCLBTCuUncHJxdQ6ejMEQZtDHwYIl
8pQrymXSOsMXcAtAUxV9x672TNEMg+ie7znm1kMHlFmoqFYCeArHCH/fRP5M9Rye
4yWAQKNzJrBlS8/4K1Z4TSZXqOv8nVOtb7R8qGEBhH4jwbIAXNNMFbM+gdHHJIU7
Ri929drImbgJDoHAmtlVaG2WKTsgV9+WUrvEiw4hRs6+QRb1iAc1e2G8PyFS1z/Q
oqoRKxXYlA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:57 2026 by rpki-client