Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
File: rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer (raw, json)
Hash identifier: iAdcQfNSGsBYV41n5yMKVQbSUyMAkoF4smNA8GqsK+o=
Subject key identifier: AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBF1A262634CC63DE966DDD6BE529F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41037
IP: 195.95.174.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:f1:a2:62:63:4c:c6:3d:e9:66:dd:d6:be:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:a3:59:38:c6:e3:6f:f8:83:12:ca:bb:f9:
f5:f0:23:7f:cd:8f:ab:44:61:26:70:25:15:9c:d5:
cc:be:3d:4b:ce:8a:1d:ff:43:25:ef:7e:2f:a5:17:
50:30:fa:b5:27:29:28:df:56:a1:d1:4a:59:b2:91:
a3:85:52:d2:8d:1b:2f:a4:ae:ee:ab:15:8a:33:55:
4e:cc:10:93:c5:e6:12:b2:56:35:5d:0e:74:9e:1e:
c7:aa:af:30:cc:09:16:28:40:04:7c:8a:e1:5a:fb:
22:19:9b:ca:03:fb:48:b8:a1:47:b9:eb:50:9a:9f:
1a:ae:77:4e:25:f8:0d:0d:53:44:42:0e:b7:2a:6a:
63:c6:be:a6:98:67:13:3c:11:b1:35:51:08:e3:6c:
51:0a:90:71:bb:db:0f:ce:f6:74:18:a1:42:81:70:
c7:e0:cb:77:5a:50:16:79:1b:fc:eb:da:ec:d1:5c:
0e:ed:be:d7:72:f3:73:6d:5e:3f:b0:da:37:fc:48:
78:bb:a8:1c:7b:ac:e7:61:4f:7b:46:40:25:c9:4e:
07:fb:36:d7:07:d6:0e:2e:52:ad:07:ad:6f:03:fa:
ef:19:f6:78:5d:8b:84:07:ab:d7:12:56:13:50:c5:
02:68:20:ec:7e:a6:dd:8d:b9:55:79:0d:0a:be:d4:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.174.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41037
Signature Algorithm: sha256WithRSAEncryption
1d:26:23:5a:8f:27:60:52:eb:b9:cc:82:56:13:86:9c:fe:a6:
fa:85:e8:c6:21:36:22:c1:b0:2b:20:52:8f:90:6e:18:20:52:
07:d5:07:1a:4f:3e:d5:4b:44:c5:e9:1e:45:5a:82:9c:81:08:
1e:08:26:37:21:fd:d0:02:3b:0f:4a:07:da:b9:50:dd:ad:71:
92:f5:f6:a3:31:bb:d9:e1:0d:52:57:4c:1c:0b:81:67:57:81:
4a:83:3e:2e:bf:27:15:28:bd:2a:d2:db:d9:a3:df:4e:19:2b:
ce:30:74:0f:b9:e6:be:05:e5:44:71:fb:95:39:48:07:1d:b3:
0b:01:a0:07:1a:07:19:48:c0:c2:80:12:43:9a:02:4d:6f:78:
f1:f5:0d:69:c1:61:31:0e:ea:cf:ab:87:33:43:21:f4:4f:e9:
b7:b0:14:89:a5:2c:43:e2:d7:9d:3f:fd:9e:29:5c:b4:f5:ae:
ce:b6:40:b8:f4:80:0d:05:d5:1f:88:d2:70:99:96:1c:ed:a9:
99:ec:64:d4:c1:9b:3d:5c:40:83:0a:1a:67:91:fd:c1:42:d3:
67:7c:6e:30:96:43:16:8a:ad:94:cb:be:0d:55:ca:d1:e6:53:
84:05:a7:79:5c:8d:a8:3b:c6:71:64:7c:a2:c5:7f:36:e5:43:
a6:eb:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:00 2026 by rpki-client