Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
File: 16J_q51LflvYY0XnEmyRmHVILgQ.cer (raw, json)
Hash identifier: rD7dN4Qs7Rp/lNxYOrJVM++Vo4SwGt8ELU2FNxo2lFk=
Subject key identifier: D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1294616A79F3CBEA4A78F8A68216172D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 Oct 2026 04:43:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218471
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:46:16:a7:9f:3c:be:a4:a7:8f:8a:68:21:61:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 04:43:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7a27fab9d4b7e5bd86345e7126c919875482e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:34:15:6d:51:da:eb:7b:f1:78:38:34:3c:
29:5f:a3:3e:85:7a:3c:a1:e8:f8:9f:6d:6c:7d:9f:
7f:f3:aa:0c:21:a2:fa:c2:5d:1c:36:73:e3:23:9d:
43:22:13:c1:22:3a:5f:16:62:60:4a:12:f6:9c:a4:
7d:57:6c:82:ad:0f:d8:11:c7:72:00:de:d2:ab:6f:
2a:d8:0c:57:7a:97:d6:67:d1:f1:42:7e:bb:35:47:
8e:52:e6:36:d6:83:82:41:e0:ae:07:8e:0a:26:76:
7e:8e:fe:b1:be:f9:b7:61:8f:60:2b:11:df:64:9c:
7d:12:27:74:d0:80:74:65:5e:05:51:6a:0b:b0:d9:
d7:42:f2:aa:88:db:b7:02:09:4f:c3:07:93:45:58:
4f:5d:47:8c:3b:89:98:c1:89:a9:29:90:e9:26:37:
31:d5:3f:e3:f9:cf:f6:8a:6e:28:de:c1:d7:a4:5c:
24:87:d1:57:f3:13:b2:ba:d7:68:da:76:e1:a1:6c:
1d:32:0f:c3:0f:36:12:c2:db:c5:0f:82:24:55:d9:
63:1a:1a:b0:49:4c:e5:00:bf:4b:ce:bb:d0:8d:e2:
9e:20:33:5d:5f:21:7c:ee:2e:ee:2d:bf:5e:27:11:
0e:d3:d3:3d:83:53:1c:82:39:a1:0d:2f:44:e9:ae:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218471
Signature Algorithm: sha256WithRSAEncryption
34:d8:4a:ee:ff:f7:f8:68:64:f5:56:69:6b:1a:1c:34:1a:1d:
a1:6d:46:8f:f6:01:41:e0:8b:e7:d5:98:f4:45:26:36:26:1f:
b4:ac:6e:ff:ec:fb:78:27:ef:9f:c8:c4:3f:52:d5:86:58:cb:
1d:4b:3b:06:79:e5:8f:85:5f:e5:19:cb:bc:f0:8d:68:15:bf:
6a:6c:ab:78:9d:75:83:14:33:83:17:a7:34:db:41:98:e3:54:
c2:0a:61:19:49:c7:39:61:28:63:70:30:57:89:43:55:12:61:
a8:7e:fb:60:07:93:f5:42:bf:76:e6:37:cc:fc:b8:6e:15:ac:
c9:b2:c0:92:4b:df:ff:0d:39:c6:c9:ee:24:1f:39:a6:34:ec:
ce:09:68:a5:66:19:53:db:f0:b1:61:83:13:a5:52:60:b7:51:
80:b3:f8:92:85:22:0a:8b:2d:b1:55:0b:39:4f:19:f2:12:05:
7a:06:4a:9e:76:e4:09:71:8d:db:49:8b:95:be:2e:c5:52:e6:
72:62:fb:a9:b9:ff:9b:01:b6:82:ef:e5:30:5f:52:b1:70:c7:
dc:4d:96:91:10:a5:cd:86:01:a4:53:7e:60:47:a0:0f:41:5a:
09:cb:53:aa:e4:df:ae:0f:38:b8:3b:32:7b:5d:f0:ff:83:10:
95:9e:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:10 2026 by rpki-client