Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
File: ngYAPFcVh0_asOMVcigO-OTkeYw.cer (raw, json)
Hash identifier: 1q3lHkffJ9imR4Riwd9pZ2MWlEDG3gn6f9IhUsUMaS8=
Subject key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0660F35FCA59E2FCB6F8C8D35EACEA5A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 06:57:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218773
IP: 2a0d:ae40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:0f:35:fc:a5:9e:2f:cb:6f:8c:8d:35:ea:ce:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 06:57:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:41:82:9e:4c:47:58:d1:59:f7:8c:73:e5:
c7:ed:10:21:22:2f:37:a4:a1:f7:6f:8f:fc:5c:8f:
ee:6d:5a:bc:89:47:2d:b1:1a:99:ae:0e:f7:f8:11:
06:8a:47:64:29:ca:0d:f8:93:b6:00:31:76:de:e1:
45:3f:1a:82:2e:35:24:a0:79:c8:45:4d:52:f9:66:
a7:3a:7c:32:de:3f:29:52:2d:10:3f:90:bb:18:df:
fc:dc:7c:3e:cb:57:cb:b3:95:b4:59:d2:90:9a:a5:
1d:4b:f4:4d:8c:33:19:9a:e0:03:3a:74:b5:7d:a7:
19:76:57:62:2d:35:b6:34:37:7d:b8:38:df:92:8b:
d9:4c:88:2f:d1:5b:37:a8:8a:20:3d:9a:26:78:9a:
26:34:25:2f:4e:15:d1:80:47:f4:9e:68:d3:a1:e5:
df:f1:97:12:31:27:a0:dd:97:2b:8b:ce:43:e0:b3:
7c:12:b2:c2:c2:3e:18:21:b8:67:3c:7a:68:e8:d0:
70:8c:56:3c:de:87:9c:dd:88:52:eb:87:25:5d:f5:
a5:97:ba:16:93:fb:8d:b2:3a:8a:12:e9:cf:56:ed:
96:62:a1:4d:6a:f4:0f:e0:e0:66:c6:6b:c7:1c:0d:
9e:ee:fa:47:52:04:00:cf:30:1a:e9:bc:86:0e:46:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218773
Signature Algorithm: sha256WithRSAEncryption
7c:73:96:46:60:7a:14:22:d3:30:56:f9:1a:aa:aa:45:6f:da:
ad:7f:10:22:6e:eb:7c:cc:e0:40:90:78:9a:ce:4c:32:c5:dc:
c3:cd:71:69:dd:8a:80:cf:e8:62:b0:71:d9:40:32:25:b6:28:
09:43:02:ba:ed:68:fd:58:ce:12:12:bb:29:3f:2c:9b:04:a5:
ac:c0:f2:c9:dd:be:a4:35:bb:cf:27:c3:4d:6b:f4:d1:6e:da:
98:0f:df:e5:1d:06:86:6e:b6:0d:21:d3:a5:4e:a2:ad:65:30:
a0:8c:21:ca:5f:67:fc:7b:40:34:b9:14:6f:c1:43:37:e9:37:
c2:86:27:9b:05:51:ee:a3:77:a6:c7:f0:aa:fa:94:13:2a:98:
cb:03:66:d0:00:73:d5:ab:88:b2:43:5c:db:ff:7e:9d:79:6d:
78:a8:cc:f9:ef:bb:44:75:9d:4b:b8:1d:9c:ec:3a:0a:a3:47:
c6:c1:84:74:c2:33:ea:0e:57:18:e3:99:8c:d0:6f:91:17:40:
fa:18:d0:43:f7:2f:ca:ed:c7:a3:09:7d:59:c0:02:8b:49:88:
84:0e:32:9a:62:c7:3e:ca:a5:03:df:8f:fd:54:bd:ea:b9:0e:
8e:4c:b7:91:54:0a:15:b1:b0:39:eb:83:78:44:d8:fa:42:fd:
07:f4:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:33 2026 by rpki-client