Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
File: vsyDDX6awiJWrnzvd8WB2Eolsu0.cer (raw, json)
Hash identifier: RS9EA0EpI324K/Qx5CDq4WV1RBkoaHJBfzReSWCdlaI=
Subject key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A05D55C11372BBBA667A50F5BEE6FD0A72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 01 Sep 2026 14:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 11967
AS: 63286
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:55:c1:13:72:bb:ba:66:7a:50:f5:be:e6:fd:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 1 14:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:f2:8d:61:75:c4:a7:04:4b:52:cd:c9:ce:
6c:33:35:66:3f:bc:b3:c0:87:1c:32:8c:9b:c1:a9:
d3:8f:50:c9:b6:f9:c3:35:43:3b:11:8b:c1:1e:b7:
39:d5:73:95:bf:74:b6:c4:61:7f:49:f7:c6:bc:d5:
24:a5:56:31:97:58:d9:45:7f:31:d9:64:7b:b0:37:
7e:02:18:d2:3c:ae:6a:69:ee:47:cc:22:a8:d8:0e:
8b:d0:d6:5e:dd:6c:42:38:f1:bf:18:13:1f:70:be:
9f:dc:94:38:91:10:81:0c:fe:75:a4:97:f4:53:72:
63:25:70:fe:1f:68:4f:e6:cf:6b:aa:66:9d:53:3c:
0c:bc:e5:d7:2b:2f:c6:75:c1:7e:c2:12:1c:87:ca:
6c:13:3e:1b:73:cb:d4:a1:b3:ca:10:10:cf:f2:0e:
8f:bb:40:8f:aa:e9:56:51:d6:62:05:77:42:08:c9:
0b:e1:3b:8c:6e:e9:d3:8f:11:ed:46:a5:3c:f1:25:
e7:5b:82:ee:06:9f:a9:de:1e:b0:fd:f7:d2:b8:62:
8b:37:be:bc:05:f7:8a:40:8c:0e:08:81:33:9c:3b:
1f:77:67:5c:8f:61:c8:28:e8:d3:4e:3f:8a:17:e8:
d6:6b:c1:aa:21:a7:ea:0e:12:6f:16:75:5d:54:fd:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11967
63286
Signature Algorithm: sha256WithRSAEncryption
62:5f:01:6b:a3:ea:3c:1f:d9:cb:86:2a:1e:1b:a9:0e:3c:87:
37:f4:b2:6d:8b:d5:43:ec:c5:df:79:a0:67:9f:b9:8d:86:98:
4b:c1:fe:68:dc:3c:b8:f4:f5:b1:bb:62:6c:80:16:14:d2:3b:
3c:76:7a:75:f7:20:b1:8a:37:3e:6a:74:ab:33:0b:6d:60:61:
fc:6c:26:b6:48:97:33:a5:62:c4:08:b9:5d:13:2d:f1:76:6b:
0c:8d:a0:3e:47:b8:73:a7:89:eb:3e:d0:9b:a1:96:44:57:12:
0b:de:86:4d:cc:e9:b8:60:3c:30:49:b8:33:04:d0:07:97:96:
6f:f1:ac:d4:c2:22:e0:ac:51:a7:96:33:a4:8e:83:f7:08:61:
25:61:b9:52:da:5c:e9:17:06:1f:55:8e:19:82:95:4d:b5:ce:
bf:d9:2a:50:43:21:68:79:60:26:ba:85:ab:db:61:cf:dc:e9:
a1:bc:1c:54:4b:e6:f2:72:59:e4:ee:bc:d5:56:cf:28:c4:15:
87:b4:78:9b:62:b5:77:36:11:58:bb:4e:78:87:1f:cf:d9:6b:
6d:4a:e2:37:f5:1c:81:b1:e9:05:03:64:fa:30:f7:02:37:5c:
4a:b2:42:ae:8b:7e:36:7e:15:89:25:c7:74:d2:bc:6f:d2:13:
d1:9c:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:38:41 2026 by rpki-client