Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
File: elLczqzzaKBoeIk1Vdd02YlfWVo.cer (raw, json)
Hash identifier: 6xNOeA4gHCE+IJksm7P2jxhkon2190e9egic3mZKjnI=
Subject key identifier: 7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08DFA57D9CF4B252281B9F99E360D286C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 00:59:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218832
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fa:57:d9:cf:4b:25:22:81:b9:f9:9e:36:0d:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 00:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a52dcceacf368a06878893555d774d9895f595a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:d7:a2:bd:85:28:24:7b:1b:f7:01:1e:1a:
25:0a:ad:fa:3f:0a:4e:09:9e:a7:3e:37:a2:07:0e:
4d:d5:36:07:87:d1:a0:f2:11:13:3d:70:81:93:b9:
41:99:75:5a:b6:6a:72:9d:39:06:1c:c7:fc:3d:2f:
01:b0:ee:71:73:63:cf:14:03:af:ee:8a:3b:a8:03:
b0:ee:8a:30:57:a1:50:ad:93:db:81:d9:af:10:c3:
11:10:c2:66:1d:aa:ea:b4:a0:70:e2:ad:84:68:37:
6c:b6:1d:ef:0f:65:ff:9e:8a:93:4a:0f:04:18:c7:
0a:6b:6c:76:c2:c5:d2:ee:02:84:f0:51:47:86:f0:
5e:97:71:26:be:0b:9f:4b:71:78:a4:f5:cb:8b:3b:
c0:ee:85:64:92:33:e8:42:a5:3f:f7:ae:38:f3:7d:
c6:56:e7:e3:9e:66:9a:f5:e7:ef:bd:5e:af:4b:d7:
61:1e:30:5f:88:2f:97:4a:1d:19:d3:b1:65:bf:61:
e6:e2:4f:13:6c:fd:ef:c8:10:72:e3:a5:53:aa:e3:
57:80:c5:16:fd:23:c2:4f:e3:98:9f:86:ea:dc:e5:
a2:f4:03:45:88:9c:ea:5f:11:53:27:1d:2f:63:76:
3c:f3:32:5e:6c:b0:f4:0e:dd:0f:87:c3:3f:b8:05:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218832
Signature Algorithm: sha256WithRSAEncryption
4a:3e:75:9e:d0:e7:f3:42:0d:c0:28:af:2f:43:82:a1:b4:3f:
bb:f0:18:ee:2f:02:08:d2:b8:28:84:c8:8c:53:80:b0:35:fc:
85:e8:e4:eb:cf:d9:f1:9d:c4:a9:f3:39:1f:31:a0:8c:e6:ac:
8b:4c:02:c5:e1:f6:68:2c:63:e2:ee:4d:66:09:a9:64:d6:f7:
4a:e3:48:de:b8:82:b0:75:76:16:55:96:05:ac:87:61:ed:01:
62:28:22:c9:e9:a7:33:7e:ca:22:a8:c0:cd:9d:cc:8d:dd:c4:
ca:6d:77:9d:c3:31:4e:67:5f:ce:0f:93:d1:b3:b5:d2:67:ef:
ca:58:e7:22:ca:08:11:55:44:e9:35:18:6d:ca:77:03:46:36:
cc:e1:bf:d4:30:fb:9f:2e:23:8d:08:ee:9e:1d:8c:7d:13:95:
fd:58:14:d3:30:cc:e4:96:1a:48:6c:cf:7f:af:0a:60:50:15:
dd:ea:c1:1b:71:6d:44:a1:c5:ff:ea:b2:1d:6d:05:14:c6:7c:
25:4e:70:2a:5f:cd:92:f8:88:d8:e3:3e:39:56:d7:53:b9:fb:
15:4a:69:2c:c4:b8:45:73:c1:7e:36:91:1d:7a:2d:ef:8f:bb:
b9:b5:69:7f:81:68:0b:76:4f:65:a9:15:ea:dc:02:6b:e6:0b:
2c:91:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:51:42 2026 by rpki-client