Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
File: ZHEgPcvtauti27eYy_pam14JnE4.cer (raw, json)
Hash identifier: UtAavDyhZcMCY8ADU07ldY2whQ2cUxeRnXLONZ3bQvc=
Subject key identifier: 64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A42352CE08DC33501DD0D61E38A0F614
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 08:16:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213972
IP: 2a01:fac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:23:52:ce:08:dc:33:50:1d:d0:d6:1e:38:a0:f6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 08:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6471203dcbed6aeb62dbb798cbfa5a9b5e099c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:b3:f3:4e:ef:d9:28:83:92:f4:e5:93:7b:
09:70:cf:e3:4f:c3:c7:9c:41:32:99:4b:10:bb:c3:
a8:97:8d:1e:fa:35:a9:ff:b3:63:8f:d0:9e:31:8e:
45:7e:06:28:35:12:b8:e3:59:f1:87:18:f4:5f:db:
34:f1:7d:d8:ca:84:94:98:82:34:24:95:bb:3c:87:
1e:49:53:ba:bb:98:6e:f5:5d:fb:ef:a4:5c:04:af:
59:f3:30:c4:14:dd:28:9a:dc:7d:3a:69:47:2b:bb:
e3:cf:71:8f:b7:ab:ec:a9:48:b9:91:15:09:a9:00:
f8:b3:c9:04:14:58:2f:d7:89:f8:29:59:d0:1f:d6:
a5:82:62:c7:de:a6:9e:81:cb:67:4a:68:ec:a7:7d:
c2:73:5c:68:93:48:04:47:91:04:3d:2c:a0:cb:d4:
2b:4a:66:87:56:8a:8f:1c:c2:88:87:98:0c:80:f4:
31:c6:bd:97:f0:41:c9:1d:21:cd:84:8f:26:2b:80:
45:dd:ba:6f:8a:d3:e6:c0:12:49:37:83:f7:18:12:
f3:16:3c:2b:3d:4f:a1:2c:4e:41:5d:bb:de:da:66:
5c:94:21:65:93:9c:b0:c8:6d:f4:84:c4:e7:fb:c9:
a2:09:da:2e:4e:7e:93:72:fd:85:e7:4b:6b:1a:83:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213972
Signature Algorithm: sha256WithRSAEncryption
a4:07:2b:bf:93:c2:64:97:a8:3f:12:3c:f3:68:2a:66:98:5c:
ce:0a:a7:9e:bf:31:55:fb:14:48:87:cf:3d:95:af:0c:72:bc:
39:e8:6b:73:d6:84:8e:5b:c3:20:a6:dc:45:ee:3e:bf:fa:65:
ca:fd:c8:b9:96:66:8c:af:7d:98:e9:f6:06:ac:7a:fc:fb:d5:
17:26:70:3a:ee:15:64:e4:8a:17:61:0b:94:9e:57:e4:14:9b:
f9:9b:e9:1c:c5:48:95:15:95:a8:1a:f8:71:cb:9b:c6:7b:e1:
dc:cd:dc:dd:47:65:cd:78:cc:cc:e0:fc:92:01:f6:dc:7d:fd:
53:de:7d:7f:6f:31:85:55:7f:65:79:bf:a0:f7:7e:fd:bc:55:
67:94:74:45:a0:af:4d:ff:6c:c2:26:9e:6c:f6:cd:c1:19:3c:
43:82:04:9b:eb:5d:a3:37:e1:1c:06:5c:8f:aa:e6:66:33:60:
ad:d5:26:44:e2:3b:f2:9c:a6:9b:0d:e0:30:69:b7:21:ea:60:
86:48:10:2f:8c:d7:86:6f:f7:6d:1b:b3:5b:68:36:29:ee:7e:
b6:9f:4f:62:09:43:2a:4a:df:86:ba:6b:16:41:e7:e2:dc:45:
16:3b:17:d1:97:f8:41:de:da:4b:f9:26:a2:ee:d7:ab:98:b7:
cc:07:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 11:21:07 2026 by rpki-client