Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
File: FgRY0VSRbymXf4fKbcozCaRPzzk.cer (raw, json)
Hash identifier: UNLcStC7sYZKd5iueAClOmzzQi4OI6YcxWP2gm3uNKw=
Subject key identifier: 16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13D6D54B78C902D69DB7117951A05C44B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Oct 2026 02:38:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218507
IP: 2001:678:137c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:6d:54:b7:8c:90:2d:69:db:71:17:95:1a:05:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 02:38:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=160458d154916f29977f87ca6dca3309a44fcf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:23:93:e0:f2:83:73:27:c9:73:c2:67:37:
8c:00:08:79:ad:9c:e9:f7:cb:70:44:d1:0d:17:ba:
52:84:3c:4f:2e:3c:57:82:82:a8:3b:31:01:8e:87:
27:1e:77:46:b9:be:17:a0:7e:f9:4d:c5:ba:f1:7c:
d1:7d:b1:e3:b2:d7:62:d2:61:33:6a:94:96:3a:e5:
c9:71:69:9b:30:ed:33:d6:e8:85:44:70:07:d0:60:
66:a5:2a:e8:49:f9:11:23:6c:1b:13:04:38:ab:a2:
13:4a:12:93:93:a7:74:58:11:1e:8e:30:92:b3:54:
43:f5:e1:df:8d:49:ef:be:8b:49:e6:9b:b9:ce:74:
cc:c8:dd:6a:85:11:24:3c:52:c7:e1:84:d5:13:f0:
bb:46:69:ce:22:e0:bd:87:a1:9a:a1:9f:56:55:bc:
a9:c3:2d:7f:44:84:19:a4:03:7e:9c:8a:34:59:95:
c5:2f:d6:8f:64:08:47:d9:43:ea:41:90:b8:e8:ed:
7f:8d:3e:8f:f2:bf:3e:5f:08:bf:0a:6e:c3:df:31:
25:df:21:06:15:d5:b8:eb:c7:9a:68:04:23:e8:ab:
fb:09:93:90:d7:be:ac:85:53:84:5e:74:49:fd:93:
6b:8f:b9:33:9b:fb:c8:ae:e4:f2:49:93:43:b9:ee:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:137c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218507
Signature Algorithm: sha256WithRSAEncryption
62:a2:e1:1e:28:e2:c6:af:47:19:55:ed:cc:c6:bd:82:be:a0:
15:d3:7b:33:a9:48:f0:de:76:af:61:36:43:93:79:dc:97:b5:
c4:27:5c:76:ef:31:9f:55:10:15:0a:dc:f4:cc:41:5f:47:3a:
4e:c5:d3:01:68:65:ba:72:34:0e:2f:d6:87:74:81:d1:5c:3c:
aa:57:90:37:9d:93:b4:2c:dc:af:3d:2a:28:6a:dc:4c:18:79:
8c:f5:e6:54:7c:b4:c9:b0:4b:7f:cd:81:f4:75:94:c9:7a:56:
83:10:42:8f:c1:9c:8c:a9:11:81:75:4c:32:1a:af:fb:70:3a:
f5:2e:76:98:6b:d9:57:fa:b7:f4:2f:94:65:a1:48:dd:f7:b9:
cd:5d:38:96:50:50:a4:ef:d3:56:8e:4a:c6:4f:6a:b9:4c:7b:
cf:fb:2c:ba:d4:02:19:f2:c8:ac:24:33:6b:f0:fc:e9:01:ae:
60:a8:55:3b:b7:e3:cb:ee:28:a3:b8:3b:50:04:8b:a5:7a:42:
4e:9b:76:f2:0b:70:c1:75:b7:a0:16:ab:4a:9b:b5:96:23:a4:
c0:3a:e1:af:46:e0:fe:c2:6c:9f:80:f7:25:f0:5f:5b:64:ce:
77:08:18:e2:03:ea:68:27:2e:42:cc:0c:f1:a9:45:a6:76:92:
c8:99:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:13:54 2026 by rpki-client