Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
File: p-SAdoxgNhuFVLS-gm9edYOdcm4.cer (raw, json)
Hash identifier: Uya9tyiKZqwBuVPADOfAcNfLwJvyvsmzcgsieFQr6m0=
Subject key identifier: A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08FAA686191A8BBF40E856919C2171E6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 08:51:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.9.54.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:aa:68:61:91:a8:bb:f4:0e:85:69:19:c2:17:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 08:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e480768c60361b8554b4be826f5e75839d726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:56:a1:51:2b:49:ef:cf:a2:09:87:ef:7c:
df:6a:be:7d:87:35:7a:69:c3:ab:dd:7a:2c:8b:03:
15:42:a9:d6:2a:0a:a4:7c:71:ac:54:ef:f3:ce:98:
c7:d9:bc:49:3b:9a:67:33:13:cb:2e:e9:ac:8e:ef:
86:92:14:28:92:14:bf:2d:3e:08:4f:00:53:7a:1e:
9d:b1:31:71:00:33:b5:b9:c5:44:2e:d8:e2:00:36:
4b:d3:b7:39:a5:23:a9:a2:65:c5:03:81:d4:3f:01:
99:3c:3b:4b:7e:f9:35:f9:5b:0d:5e:23:b6:6e:f6:
ff:49:89:5f:50:9f:8d:48:e1:f9:67:cb:f2:4f:88:
bb:6d:8e:e5:a7:38:b1:39:12:20:cc:d8:cf:13:34:
0c:7e:a1:c1:cc:36:31:e1:a4:64:e4:d2:fe:41:1d:
f8:92:e3:f8:c8:fb:9e:58:53:1d:8d:3b:cc:6c:91:
2f:15:9f:85:3d:72:a3:1d:e3:81:9d:0e:31:85:44:
f7:49:35:e4:94:af:07:2c:70:3e:76:4c:05:f3:fd:
3a:21:10:75:3d:63:a6:d2:83:1c:80:3c:62:d4:93:
12:10:12:6e:bc:42:de:f9:e9:ab:4a:d6:e6:35:f1:
0d:3e:ce:86:d1:e1:36:2e:21:64:5f:f3:53:5a:cf:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.54.0/23
Signature Algorithm: sha256WithRSAEncryption
97:2e:4e:0f:a5:48:17:19:36:d3:e4:81:06:14:97:d7:bd:28:
b3:96:14:33:f5:ad:75:a6:4d:5e:a2:e8:15:09:66:d0:de:6e:
24:1c:5b:eb:38:88:ad:19:5d:ff:07:c4:e2:0e:b1:52:18:56:
ff:04:dc:c5:4f:a9:83:31:37:59:98:e4:66:6f:7b:ce:3d:6b:
2f:7e:8c:2c:3f:65:8c:2f:52:79:62:06:c6:40:5b:38:a8:44:
96:d7:cd:93:e7:d2:41:b4:1a:e3:81:1a:d2:4b:0d:76:7a:81:
41:68:2d:40:1a:2b:d2:b9:f1:9a:2a:f1:e0:a4:dc:bb:0b:2e:
93:1e:11:bb:95:ee:13:03:44:ac:22:01:0b:35:fb:c6:47:7e:
78:9d:c3:20:98:ac:28:1e:c9:c9:ca:5d:57:e7:99:ff:49:70:
12:97:9f:da:9a:af:35:26:a7:8e:bb:a0:3e:05:5d:70:46:1d:
fb:ff:48:90:4e:94:84:1c:78:91:df:bc:59:5e:64:bc:67:e8:
a5:6b:8e:ac:af:cd:00:51:00:08:ff:17:33:92:9c:45:e0:22:
0d:8f:d1:af:c1:cd:03:48:20:63:b0:7d:32:de:37:40:a9:ef:
3e:3a:0b:ff:e5:46:69:11:7c:bc:78:ec:ad:53:19:08:b3:0e:
95:bb:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:04:29 2026 by rpki-client