Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
File: usAxCR9p01cBFvDdGgm-IPPdWEQ.cer (raw, json)
Hash identifier: 8hdbA0ngplX+N0TFTPeFII0P+dg4DfIy0iOw+lQJ8bU=
Subject key identifier: BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A162B6E80AB34EBD961B749C8DD38582B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Oct 2026 08:25:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218369
IP: 2001:67c:2888::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:b6:e8:0a:b3:4e:bd:96:1b:74:9c:8d:d3:85:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 08:25:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac031091f69d3570116f0dd1a09be20f3dd5844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:e7:18:83:69:9b:0c:a2:42:22:77:0e:0f:
e1:f3:0b:ec:71:5f:f7:1e:be:19:0c:f9:83:2d:4e:
b3:a7:fe:f6:41:5f:6d:30:6f:f7:5a:fd:56:0d:7d:
37:2e:44:a1:e8:c1:69:cb:21:48:56:3f:6e:aa:46:
bb:f5:9c:40:ea:23:8d:b6:50:28:89:06:8f:0f:7e:
98:dd:09:f2:a6:ca:3e:3e:34:b0:52:7b:8e:96:94:
96:8b:2c:9e:11:4d:f6:ae:9a:1d:e0:a5:9c:77:fb:
e6:c6:07:d9:5b:6e:b3:d4:ed:fb:8c:0f:3e:a5:ed:
a4:b5:81:bc:99:af:b2:36:21:12:f8:97:29:a5:2f:
40:6b:ec:01:d0:38:04:9e:8e:53:b8:f4:2f:9d:c3:
73:f6:2e:33:21:d5:9e:e2:7f:07:f5:5b:ab:26:1b:
b4:99:05:6b:6f:cd:0b:ba:ea:09:1f:d4:48:33:7a:
38:4d:e9:c3:b4:83:e1:04:88:f7:be:cf:3e:1e:82:
92:86:96:0b:7b:03:7c:e2:c0:6e:53:a3:8c:18:98:
6c:d9:92:ea:5a:a0:1b:86:d4:71:f5:ac:85:d5:9a:
10:9a:05:65:b5:9a:6a:b0:72:2e:f9:f8:4d:f7:82:
53:99:74:95:90:bd:15:71:f5:68:70:91:23:71:bb:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2888::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218369
Signature Algorithm: sha256WithRSAEncryption
a0:8c:85:ed:c9:fc:01:01:d7:ea:17:11:09:fd:cf:59:bd:48:
b2:e8:9b:56:e6:9c:2c:a5:43:fc:9d:b8:3e:0d:94:5d:7b:d6:
83:5b:8f:41:6f:96:0a:eb:6c:b2:6d:99:c8:e3:2f:c4:13:b0:
9c:76:c4:92:00:13:fa:78:e7:ab:d3:a2:27:b0:00:1c:db:d7:
d1:68:04:dd:eb:40:fa:3a:5a:4c:91:a6:51:67:46:99:1f:f9:
f4:8b:bf:64:b8:33:ab:c5:0e:1c:9c:7c:b8:99:d8:1b:1c:7c:
4c:d4:86:a0:68:fb:f5:c3:0e:e2:15:2b:ad:4c:9a:50:6f:e9:
e8:05:0a:70:b1:b7:d6:43:66:ec:dd:27:47:43:ab:4c:1d:67:
7c:fc:88:be:58:62:6a:36:0d:a9:50:18:e6:9c:51:50:e1:6d:
d0:6d:73:36:b1:93:67:ea:65:1c:3a:34:6b:32:dd:49:4e:5a:
5e:44:b8:ee:b7:43:cd:cf:80:f8:fb:62:06:68:b7:46:11:15:
d2:99:5d:16:58:ce:a1:2e:15:b8:14:d1:27:76:d2:ee:76:36:
57:2e:c2:c9:c0:75:21:3e:d4:9c:1c:96:f6:a0:65:e2:1a:f3:
6b:bc:f5:c2:07:41:f1:5f:5f:af:4a:a1:0a:41:b0:06:b4:6c:
e2:29:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:51 2026 by rpki-client