Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
File: 5J2vqVrcGabkVJloGNtWa8rkCKo.cer (raw, json)
Hash identifier: PuT++qZI9IVrEIaF/hZ5axNH8UVQpP90YefC2MPBtGs=
Subject key identifier: E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13BEB5C210BFAC13BE6A17EAEE97A7E23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Oct 2026 19:37:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218402
IP: 2001:678:1384::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:eb:5c:21:0b:fa:c1:3b:e6:a1:7e:ae:e9:7a:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 19:37:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e49dafa95adc19a6e454996818db566bcae408aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:ea:9e:b1:b3:68:48:f4:f0:0a:38:6e:2f:
d0:ce:30:14:f3:3a:4c:c4:b9:4c:93:59:52:1d:df:
8e:0d:88:f9:ef:17:57:99:d0:ec:8a:4d:f7:f4:c3:
d8:ec:18:a6:08:3d:28:5c:7b:ba:db:62:96:4c:a8:
7c:62:b3:f9:db:aa:5c:c0:76:5b:1c:a8:5b:f0:76:
a3:85:a3:10:a1:1b:1a:5b:79:12:64:ea:e3:4a:cf:
d3:69:30:db:97:fb:6e:11:d6:83:3c:28:5d:05:d7:
ff:7f:2c:c5:31:3f:d1:d1:d3:bf:2d:09:b6:17:3b:
09:05:43:d5:57:29:d1:40:94:92:25:15:d4:50:22:
5b:9f:0d:ca:03:5b:37:fc:de:3c:59:5c:dd:4e:7e:
62:5a:54:d0:0e:fc:c2:80:7d:45:97:70:51:c2:36:
53:19:0d:8b:f3:5c:98:d3:59:bc:aa:c4:a3:b7:37:
c0:ec:07:5b:4a:ad:c6:40:d7:a5:72:fd:8f:d0:dd:
65:c2:4f:a0:a3:61:57:36:68:00:ed:b5:07:90:f4:
51:f6:6d:da:53:f6:87:f9:60:58:a6:a9:ee:a7:d7:
b1:7b:7e:c5:09:a7:d8:55:ac:4b:92:b9:8a:23:a9:
6e:e1:b0:6e:8c:47:a0:42:af:75:bb:98:90:5c:09:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1384::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218402
Signature Algorithm: sha256WithRSAEncryption
6a:67:63:d7:75:00:b6:4d:e7:cc:4e:7e:05:b4:ac:0b:10:05:
7b:a8:b8:b9:6b:30:2b:4d:65:53:ad:47:64:04:d9:cc:0b:07:
9e:de:5a:5b:5b:b4:b9:63:c4:da:86:6e:2d:cd:44:d2:6d:cd:
63:83:8d:65:aa:87:1e:16:9a:30:83:4d:2d:7e:e5:1e:14:a4:
f4:ee:b5:26:0c:5b:a0:76:7b:cd:af:ef:61:08:89:1e:5e:b4:
87:3d:58:27:ec:6e:9e:20:df:89:37:45:b6:80:b9:8f:f7:30:
59:c8:ac:25:9e:00:a2:95:a7:e7:93:54:e1:61:ca:c9:9c:4c:
7d:38:30:d6:66:a9:4f:84:a4:93:c6:1d:9e:c2:84:5d:ef:5a:
70:2c:cf:02:c2:fb:5b:a7:69:4e:0b:f0:84:48:97:d1:f1:6b:
a4:a3:c3:7f:46:f4:60:42:61:d7:b4:9d:6a:30:29:88:dd:b1:
c1:0d:3c:f4:19:dd:66:e1:5e:18:a2:a0:5b:b4:0d:d0:a2:84:
1f:c5:1a:f2:17:f2:57:3c:60:b6:f6:4d:27:f1:09:8e:bd:7a:
3c:4f:fd:e0:38:df:f8:c6:2e:86:5b:a4:79:b9:8c:db:95:4e:
13:97:f2:1e:65:31:25:9f:c2:32:66:3a:74:af:a8:72:15:42:
74:88:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:44 2026 by rpki-client