Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
File: KVOjAEuiCvndrUp77X-is3odwY8.cer (raw, json)
Hash identifier: 3xCCWn9Rq5PAO609xYwpMnt2mheEVQj6otwp53BnUds=
Subject key identifier: 29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D27A953F7D655B540E0EC7F3A466ADFB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 01:01:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a12:82c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:53:f7:d6:55:b5:40:e0:ec:7f:3a:46:6a:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 01:01:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:a1:d7:73:e9:27:0d:14:4a:1c:b5:d6:a7:
77:66:32:9e:74:73:6a:d9:79:f4:9a:5f:e9:c7:2e:
68:ae:c5:55:4f:71:09:3f:7e:2e:bd:5f:59:89:c3:
17:0a:ca:d2:26:d7:1b:32:34:36:94:dd:d0:57:5f:
cd:4e:71:65:eb:76:89:7c:0d:c8:55:e4:41:40:06:
98:38:45:d5:70:d8:34:65:89:a8:56:cb:d4:5d:29:
c2:39:61:34:68:4e:f7:fa:d8:1e:c6:ba:6b:9b:a1:
9c:01:0b:b0:ea:95:54:24:0f:9f:12:ae:84:3c:21:
6e:e5:1e:5d:e9:78:86:43:21:a1:78:d7:ce:f5:19:
a1:87:8e:29:66:5c:5e:ad:6e:18:f3:84:56:e7:79:
db:d4:e2:2e:64:0a:54:f3:41:67:60:67:09:64:4b:
c4:b6:48:10:54:c2:18:7d:60:1b:13:c1:e0:58:60:
82:04:56:02:57:8f:dc:c5:68:91:4b:92:be:2f:40:
9d:01:bb:31:85:e8:20:56:ef:a1:f6:84:41:a0:cf:
24:75:b4:b7:74:12:b4:1f:4a:4b:ce:75:54:ee:9c:
2f:01:ca:04:55:da:0f:4c:58:59:82:73:80:f8:bf:
b3:3e:dd:ad:8f:47:ff:41:b3:ac:5b:2f:4f:fd:7a:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:35:d1:77:f9:af:99:1b:70:36:43:b7:13:c6:07:18:1c:1d:
ec:ba:2b:0c:a7:97:2d:f2:86:4f:dc:bd:ad:23:97:59:03:e9:
19:bd:84:92:e9:0f:06:8a:b2:66:68:3e:dd:fb:23:9f:5c:68:
7a:6d:63:4d:84:d8:55:cd:c8:77:4d:de:75:cf:01:c0:cd:ff:
c2:e9:cb:63:52:30:e6:f7:87:45:6c:77:c0:79:99:09:14:57:
5a:57:ea:a5:f7:47:42:1d:86:47:73:90:d9:b9:4e:4e:41:3e:
05:aa:d0:8f:f8:db:c2:7e:e8:ea:13:71:0f:9d:3f:41:92:62:
10:5d:df:04:8c:f3:21:57:f7:36:64:8c:08:90:32:43:1c:66:
56:96:69:08:60:3f:80:60:c3:20:74:59:a9:92:06:c8:a8:fa:
3f:b4:09:0c:45:98:69:bf:e5:95:8d:83:91:a5:58:b0:cc:13:
05:b4:ef:4a:24:b7:a8:9f:8a:0d:5d:c6:62:27:00:af:0e:d9:
31:1d:c9:ab:b4:b1:8f:25:cc:47:70:8f:0a:79:25:2c:ec:b9:
33:e9:bf:2e:45:dc:38:42:c6:0a:bc:8e:29:7c:5d:2e:4d:69:
a4:9b:c7:7b:1e:e7:ac:4b:df:43:21:b3:10:2d:24:71:dd:c1:
6b:d5:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:23 2026 by rpki-client