Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer (raw, json)
Hash identifier: hAjRT+A++/BnAHH9Ai39Dy8A3VUH7nebxhXLlYxCOuM=
Subject key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E3720C4C12DC979478EFC1F78797D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62142
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:37:20:c4:c1:2d:c9:79:47:8e:fc:1f:78:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:64:6c:72:cc:30:15:8d:c2:9c:55:42:e1:
27:1a:24:87:49:5c:6e:90:83:b2:7a:4d:27:4b:e2:
63:10:a7:96:7b:69:09:93:08:c8:a8:0f:d5:bf:0c:
b4:70:37:ca:5c:c8:2c:17:0a:62:6f:e2:fc:a6:f0:
83:dc:31:2d:76:ab:eb:f2:68:5e:10:56:60:5e:83:
8e:ee:d7:28:21:4c:88:ac:f6:dd:6b:d0:a1:03:80:
22:6a:80:37:5c:68:fb:63:9e:a2:27:5d:c6:b3:42:
8a:8b:06:9c:0d:24:21:25:74:b1:27:e5:87:a3:c5:
d9:15:f8:d5:b0:14:ce:b6:78:f6:91:87:46:33:b9:
f5:f2:75:ee:b0:3b:24:15:91:48:4f:30:cd:6d:2d:
fe:5e:37:c4:cc:11:35:a6:93:b9:8b:26:95:de:c6:
4c:30:5d:0c:20:09:5f:aa:ee:6b:8c:4e:2d:fb:55:
d7:96:fe:61:bb:84:99:96:be:a4:23:f2:0f:7f:52:
a2:4b:26:c2:cf:71:5b:2b:8b:3b:89:68:38:24:c3:
44:3c:46:cb:8e:19:a0:88:d3:0b:b1:2a:8e:62:e9:
e9:a3:56:f4:d1:28:1d:2a:77:3a:39:4a:a3:18:b0:
cb:71:ba:8c:6a:1c:86:0b:b3:69:6f:12:65:1d:46:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62142
Signature Algorithm: sha256WithRSAEncryption
9e:d7:ba:f9:30:dc:fb:54:f4:4e:a6:14:da:ba:a1:90:f2:3b:
4d:3a:d3:63:f4:ab:eb:06:c3:fc:b1:e2:df:73:07:da:b9:e7:
f6:61:b9:10:9a:31:0e:67:c6:36:83:fb:63:77:9e:82:5d:dc:
e7:3d:94:15:9e:5e:d9:7a:eb:a4:21:c5:63:cd:88:85:c7:e6:
e5:7a:04:6d:ed:12:d0:83:e0:88:d0:60:58:16:33:72:98:33:
0e:c1:38:aa:34:c5:03:c3:9c:e5:84:ad:cd:61:2e:3f:18:dc:
5e:6d:33:00:26:ef:78:29:76:87:d8:a3:fc:76:aa:71:bb:af:
85:db:0a:cc:23:1e:79:5a:ad:e1:64:00:dc:ef:5f:47:ec:3b:
71:04:63:54:70:cd:02:1e:88:21:0c:ce:18:91:3a:6d:97:2e:
53:bf:db:f7:c6:e0:8c:0a:19:77:85:77:94:2b:d4:b3:7d:e5:
a4:77:fb:93:41:c1:60:c0:d1:c4:fb:3d:ab:0e:bb:69:c2:b1:
12:c5:7d:7c:c0:c6:4c:59:b0:27:33:a8:48:5e:77:8f:eb:bf:
fb:41:f0:0d:c9:06:26:2f:1e:1d:7e:7b:1c:96:d3:56:03:41:
0d:b5:6f:63:e2:f1:a0:40:2b:fe:8c:78:2a:0d:81:69:1b:9b:
c8:3d:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:54 2026 by rpki-client