Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
File: I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer (raw, json)
Hash identifier: k9YRwRnLnhnj1NOEOYWL098es7uyH8++zteB5xYSWEs=
Subject key identifier: 23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A05B41ABDF466A73913A993DB8A6B830FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Sep 2026 04:37:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204406
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:41:ab:df:46:6a:73:91:3a:99:3d:b8:a6:b8:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 1 04:37:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:0e:b1:94:0f:29:54:6b:5e:1b:6b:15:ff:
75:85:1e:71:60:a5:31:c1:cc:a9:5b:bf:0b:0b:75:
37:4f:1a:d7:ec:8d:4d:19:a8:c4:0e:4e:72:09:f6:
7c:cf:2e:10:eb:f0:95:4b:ba:91:c6:46:09:83:e3:
63:16:07:78:50:69:32:97:7d:0c:5f:41:c4:0e:fa:
84:f5:b3:07:45:66:c2:7e:b1:a7:c3:d1:11:4d:a1:
81:20:b5:a6:57:0d:88:a6:4b:0b:95:9b:10:bf:a0:
0b:1b:79:a2:70:28:bc:3e:54:f5:48:91:de:cf:42:
a3:95:60:54:ba:48:e4:e1:0e:c7:6a:89:4a:e9:ec:
de:47:3a:c6:9d:9c:06:c2:6a:26:b2:25:30:e4:39:
21:9b:ed:d9:8a:e3:9f:8d:91:ba:4b:c7:a3:40:93:
90:5a:68:2f:71:52:2e:22:4b:3b:92:6b:05:67:5a:
9c:05:cd:15:97:d0:f0:64:0a:c3:cb:e4:4b:f1:6d:
48:e5:9c:a6:15:5c:fc:88:d6:e9:92:88:55:16:1a:
33:a6:72:82:1e:02:e5:6f:c7:a5:7f:f4:46:da:c0:
b8:53:5e:e7:3f:c4:4d:6b:bf:07:0b:87:a7:8e:4b:
99:74:b7:d0:48:16:e3:2a:ae:46:c9:37:ef:45:05:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204406
Signature Algorithm: sha256WithRSAEncryption
23:70:61:18:75:bc:9c:ae:a5:54:79:14:d1:f3:9f:29:5d:33:
34:82:96:63:c5:49:3e:28:68:74:3d:12:42:da:24:34:cf:e7:
7f:23:f5:08:d4:88:05:70:e6:b8:17:ed:e8:7b:ab:3c:0a:cf:
f1:f4:a9:5c:b5:b5:3d:bf:f6:13:01:71:47:6e:64:96:da:30:
5e:89:60:3c:fc:3d:55:9f:fd:37:d6:b8:3f:59:f7:94:69:a7:
c7:5c:6d:6f:19:57:31:c7:90:93:3f:8f:22:45:2a:ec:e7:7c:
7b:c2:4d:e3:75:d5:63:57:38:fb:ab:70:16:21:f4:5c:80:44:
6e:3f:1b:8d:ce:27:f8:05:cf:20:11:62:27:2a:07:3a:1c:af:
be:d0:cc:78:d7:62:e2:5d:f7:2a:7c:c0:3c:fe:98:19:81:42:
e8:69:20:74:cb:53:fc:c2:8d:cb:ab:e7:10:37:ba:ba:8e:d2:
f9:cd:43:0a:b8:11:3b:08:a0:4f:67:4c:af:e1:0f:5c:4f:f4:
ce:70:44:88:e9:ef:58:62:1c:5f:95:e3:9a:20:a0:2d:dd:11:
3c:21:7e:07:2e:f5:d8:76:c9:77:d4:73:6c:18:2b:bb:53:b4:
45:a6:36:47:57:8a:88:fa:78:b3:b4:92:1f:b2:35:5f:b6:73:
91:23:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:16 2026 by rpki-client