Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
File: KVOjAEuiCvndrUp77X-is3odwY8.cer (raw, json)
Hash identifier: BsEwp63w56Tc+OwAPlUpJ8/SDkZbZ3/RA7y9sEjExrk=
Subject key identifier: 29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E87DDF8E2C6D57AA8767665296DCFF8B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 10:25:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211665
IP: 2a12:82c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:dd:f8:e2:c6:d5:7a:a8:76:76:65:29:6d:cf:f8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 10:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:a1:d7:73:e9:27:0d:14:4a:1c:b5:d6:a7:
77:66:32:9e:74:73:6a:d9:79:f4:9a:5f:e9:c7:2e:
68:ae:c5:55:4f:71:09:3f:7e:2e:bd:5f:59:89:c3:
17:0a:ca:d2:26:d7:1b:32:34:36:94:dd:d0:57:5f:
cd:4e:71:65:eb:76:89:7c:0d:c8:55:e4:41:40:06:
98:38:45:d5:70:d8:34:65:89:a8:56:cb:d4:5d:29:
c2:39:61:34:68:4e:f7:fa:d8:1e:c6:ba:6b:9b:a1:
9c:01:0b:b0:ea:95:54:24:0f:9f:12:ae:84:3c:21:
6e:e5:1e:5d:e9:78:86:43:21:a1:78:d7:ce:f5:19:
a1:87:8e:29:66:5c:5e:ad:6e:18:f3:84:56:e7:79:
db:d4:e2:2e:64:0a:54:f3:41:67:60:67:09:64:4b:
c4:b6:48:10:54:c2:18:7d:60:1b:13:c1:e0:58:60:
82:04:56:02:57:8f:dc:c5:68:91:4b:92:be:2f:40:
9d:01:bb:31:85:e8:20:56:ef:a1:f6:84:41:a0:cf:
24:75:b4:b7:74:12:b4:1f:4a:4b:ce:75:54:ee:9c:
2f:01:ca:04:55:da:0f:4c:58:59:82:73:80:f8:bf:
b3:3e:dd:ad:8f:47:ff:41:b3:ac:5b:2f:4f:fd:7a:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:82c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211665
Signature Algorithm: sha256WithRSAEncryption
4d:08:d9:f8:3e:5c:d6:a7:ae:0a:e9:d7:6c:41:87:33:61:2a:
15:28:33:a5:ad:f4:57:8d:bb:31:d0:7f:3b:ff:38:0f:dd:1a:
28:5e:bf:99:6b:c4:8c:d8:db:1d:3a:4f:25:74:18:9b:5f:a3:
79:32:14:aa:f3:68:38:77:f9:0b:06:22:be:05:a0:c7:d6:d3:
8f:21:ab:21:e1:03:7b:90:2a:1c:17:93:da:ce:0c:75:ee:7a:
22:7e:db:9d:ba:b4:a5:d8:83:90:09:61:75:98:a5:1c:b0:65:
ac:a6:93:aa:c8:16:e7:38:71:b4:5b:18:27:77:80:73:7a:09:
2f:0a:81:cc:dd:1a:38:89:97:24:3e:fd:aa:fe:40:33:08:6e:
a3:34:b2:b7:ba:de:30:4b:3f:0c:be:0b:e5:05:35:0a:c4:5c:
c9:b1:cf:39:eb:e5:96:88:77:9e:c8:24:2d:89:c2:97:bf:60:
6f:34:6b:fc:d8:97:fa:15:73:e3:de:bb:c7:2f:df:85:ac:92:
6c:15:70:4a:10:9d:b4:bb:f4:47:23:a1:44:be:92:30:69:a2:
73:b9:21:51:5a:00:59:91:c4:16:e7:5f:27:2b:d8:0d:7a:f0:
c6:03:c6:c0:5a:2d:5f:51:a0:48:89:75:a9:d5:bd:8d:bd:2e:
f6:b9:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:52:41 2026 by rpki-client