Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
File: xAtul79gE80uTaA_q_iOuM7SKTU.cer (raw, json)
Hash identifier: rhpJTkia9Lgu7J0/io3x6F/rdmTegQ6AksvY3/dg2V4=
Subject key identifier: C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13453CC499166CC4B14A26280F89DD124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Oct 2026 08:14:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 159.200.209.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:53:cc:49:91:66:cc:4b:14:a2:62:80:f8:9d:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 08:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c40b6e97bf6013cd2e4da03fabf88eb8ced22935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:85:d1:05:56:9d:28:6e:32:9e:aa:e3:78:
70:62:86:0c:cc:d1:0b:96:df:88:b0:5f:ff:af:91:
d8:cf:4d:3a:98:f4:d2:21:1d:2c:0f:00:8b:91:87:
c2:b9:bd:00:06:49:07:81:82:6c:a0:5f:84:4d:71:
c7:87:88:7d:17:bf:73:c4:c0:18:52:ea:27:cb:74:
1c:f1:c8:38:83:a6:ca:b8:06:bf:8a:00:8d:e5:d7:
31:c1:b2:23:2e:7d:3c:a2:86:a3:57:e9:d7:3f:b1:
10:3c:c7:7a:b0:44:24:ae:cc:7c:99:49:f0:8b:c5:
95:fc:23:eb:a2:c4:9d:7a:40:b0:13:f3:7d:a1:8a:
6b:da:1c:7d:e7:5b:32:e0:c0:06:3c:e6:4e:29:f6:
1a:25:6a:80:f8:b7:af:be:1c:6d:ce:09:41:6d:84:
56:3e:4e:87:a9:db:9f:a2:d6:df:53:63:ff:3f:c4:
d6:2e:9e:db:3a:9a:72:c9:a4:e5:46:71:2a:ef:09:
b0:f1:d0:c4:28:a8:e3:18:69:1a:6e:2f:41:69:c4:
7e:7e:ef:df:46:c3:8c:89:40:ae:31:4d:a5:4f:28:
9e:91:ca:ff:52:56:cf:d4:ab:b0:f6:0f:52:0c:ef:
d9:74:66:af:05:6d:38:13:7d:37:7c:64:b9:7d:47:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4d:89:96:bc:3f:54:70:03:3d:77:fb:42:32:ff:33:54:63:
e3:4b:58:b7:d0:76:74:cc:6d:eb:9e:6a:8e:af:8d:44:6f:88:
ba:cf:b9:1b:d6:af:c8:ab:bb:24:cc:50:1e:1b:4a:42:87:9c:
03:cb:4e:f1:c3:f2:2a:76:5a:e7:0a:b3:af:60:c0:9e:92:4f:
95:00:e8:c3:91:68:bd:82:34:f1:86:5e:39:4e:2b:d5:7d:7c:
be:74:c6:d6:c9:6a:85:bd:ff:86:66:af:3b:2f:ed:3d:92:1f:
d5:6c:49:52:cd:a3:22:05:80:4a:0a:8c:9c:67:86:55:8c:73:
aa:5f:aa:44:a3:1b:e0:75:c4:ef:5b:e6:ef:14:3a:e7:9a:e1:
b0:6a:9f:bb:f1:c5:66:c1:5f:7e:a6:87:5e:82:70:e1:22:62:
3e:8e:53:bb:e7:f9:57:9d:92:ec:10:2c:fb:ab:5f:48:cf:ed:
60:0c:d2:4b:13:27:ff:bc:9a:23:47:2b:39:bd:d8:44:50:4d:
c4:fa:f6:2e:61:8a:dd:f8:d4:fb:52:d8:8c:75:d6:7f:06:7c:
86:42:24:5f:b1:68:84:e1:b1:4b:0b:4f:1c:42:10:03:c4:e2:
b0:63:29:82:37:86:b4:2c:ac:26:89:91:7e:28:47:4a:c6:46:
a3:35:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:00:54 2026 by rpki-client