Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cJiaM2G-xtinbnzCdg2V8yAdm_Q.cer
File: cJiaM2G-xtinbnzCdg2V8yAdm_Q.cer (raw, json)
Hash identifier: 8/+XOOqQ8B6h7kfeaLOf/3hIR47IqWl70ybyMcbOeHo=
Subject key identifier: 70:98:9A:33:61:BE:C6:D8:A7:6E:7C:C2:76:0D:95:F3:20:1D:9B:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A136DDDEB853ABB41EF9014DAE91358BE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 13 Oct 2026 20:04:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197324
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:dd:de:b8:53:ab:b4:1e:f9:01:4d:ae:91:35:8b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 20:04:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70989a3361bec6d8a76e7cc2760d95f3201d9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:e5:64:6b:8a:38:ad:e3:da:cd:d9:3a:5d:
27:ef:04:2d:49:bb:a3:23:64:b4:9f:99:82:f6:ee:
60:fe:d3:14:a1:af:25:af:0a:8e:75:37:1b:e3:b5:
3d:f8:89:62:e7:48:d3:c4:08:76:4a:94:e9:d3:c9:
c3:41:61:8c:ef:f8:6f:cb:8d:18:11:59:14:82:58:
ba:da:cf:4b:8e:c6:83:6e:8c:8e:84:af:e7:d9:13:
cb:d0:ce:a1:1e:c6:ac:35:ff:26:45:b4:2e:9a:fe:
db:4b:dc:1f:51:56:ee:4c:cd:46:02:36:d6:da:d3:
2f:bb:8e:3d:9f:72:f8:f4:7b:7b:e1:8a:88:45:41:
f7:12:76:de:0f:50:2a:e6:48:a9:c3:29:38:28:0d:
cf:88:42:41:30:59:2d:dd:ed:03:9f:93:bf:5e:93:
d5:69:f2:de:1c:86:79:8a:36:f1:b3:b2:82:1e:65:
7c:87:07:21:58:5f:61:8a:00:8b:65:b3:ad:23:aa:
74:ea:4e:c5:74:88:cf:5a:f8:34:c0:88:28:6f:12:
54:45:7a:89:ee:00:23:94:17:07:54:23:c7:9d:a2:
6a:71:35:31:f6:74:a3:1d:6f:31:91:cb:2a:1e:a9:
7f:f7:6b:c8:b4:8f:91:2d:ec:08:1b:82:85:45:d2:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:9A:33:61:BE:C6:D8:A7:6E:7C:C2:76:0D:95:F3:20:1D:9B:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197324
Signature Algorithm: sha256WithRSAEncryption
3b:0a:51:79:8b:e1:34:92:87:ec:6b:ee:a5:4d:4b:47:85:ac:
03:d2:a2:b1:57:aa:04:5a:c9:11:69:7e:da:cd:cc:34:1c:3c:
13:7f:06:36:c3:c5:09:eb:d2:a9:95:0c:26:33:3d:80:2d:6f:
31:20:de:14:2e:df:d5:69:3c:74:6a:b0:af:1c:0a:8d:c7:e2:
41:a3:48:eb:96:3f:87:ea:26:60:a7:44:f3:5f:16:e8:d3:e4:
f2:da:9a:35:7b:26:4f:e7:ff:e6:2a:0d:a8:cf:ae:cd:d7:15:
51:1e:ee:da:5b:bd:31:32:d1:5c:28:ec:f5:fd:e7:60:e6:fc:
24:38:05:dc:f5:75:75:fd:27:3a:55:b7:dd:49:db:06:d7:89:
09:b2:a1:a7:4e:8a:64:32:ee:4e:c7:81:57:46:17:d6:2a:43:
1e:cb:e2:d4:b3:ed:ea:05:83:0e:34:0c:9f:1b:50:a0:de:16:
92:1c:72:ee:ad:75:77:aa:4a:39:7e:8b:6d:e3:7e:d6:9d:bc:
ee:fe:1a:02:9b:e0:34:74:00:63:59:3d:6c:ae:3a:dd:20:2d:
49:cf:8a:7f:94:a8:12:0b:16:70:41:e2:67:ae:5d:2d:ca:e5:
35:12:a5:3a:6c:10:76:b8:d6:43:ae:4c:6a:f3:31:c6:f2:62:
43:96:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:03:34 2026 by rpki-client