Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RA4au150uq5AKWPRb5MrxU2mvO4.cer
File: RA4au150uq5AKWPRb5MrxU2mvO4.cer (raw, json)
Hash identifier: B5ba70DHckevo4TCor/AlKzq7gGYF79QUkZ1vmxOvKM=
Subject key identifier: 44:0E:1A:BB:5E:74:BA:AE:40:29:63:D1:6F:93:2B:C5:4D:A6:BC:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D279D64928B179FB14EA9660CF778E93B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/482277-96bb-4282-828e-4ddd02037547/1/RA4au150uq5AKWPRb5MrxU2mvO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/482277-96bb-4282-828e-4ddd02037547/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 00:48:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214371
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:9d:64:92:8b:17:9f:b1:4e:a9:66:0c:f7:78:e9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 00:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=440e1abb5e74baae402963d16f932bc54da6bcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:0c:e9:36:5b:87:c7:d2:e4:b6:6a:24:7a:
8f:fa:d4:e7:08:88:8e:1d:66:6f:9d:fe:ed:26:4c:
a4:c2:22:74:00:72:73:03:8d:11:b8:e2:44:70:50:
02:c9:ca:27:00:da:5c:b5:b5:12:10:de:9e:cd:a5:
d3:0d:b6:89:2b:e9:cf:1a:1d:60:eb:4b:28:de:9c:
e8:4f:79:a3:3d:12:85:cf:9f:3b:7d:61:8a:34:23:
cc:3c:47:eb:81:06:9e:12:9a:70:02:6f:aa:6e:68:
a0:bf:cf:28:2c:70:30:9c:1f:5f:32:0f:c2:a0:42:
11:79:f5:d7:78:2c:c7:2d:c9:c7:67:63:ba:6e:0a:
39:29:46:6b:14:22:a6:b4:59:31:a0:d5:b1:1a:7d:
0a:e9:6f:22:c9:09:95:84:c6:5c:6a:49:28:4a:b4:
24:0a:9a:b6:b4:19:b2:d7:97:1f:de:a1:d2:00:d2:
4e:0b:86:aa:68:d3:23:b8:39:11:57:c3:b9:31:c3:
3b:c9:8a:68:19:98:3e:f4:3c:4e:6a:f5:89:27:78:
22:f0:1a:e4:fc:70:1e:0b:e2:9f:8c:83:96:86:c2:
87:05:20:59:02:57:06:53:8f:41:02:4c:6d:22:a7:
1c:85:23:b4:d5:6d:1a:17:d6:a5:09:98:94:a3:00:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:1A:BB:5E:74:BA:AE:40:29:63:D1:6F:93:2B:C5:4D:A6:BC:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/482277-96bb-4282-828e-4ddd02037547/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/482277-96bb-4282-828e-4ddd02037547/1/RA4au150uq5AKWPRb5MrxU2mvO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214371
Signature Algorithm: sha256WithRSAEncryption
0e:38:83:7a:a9:63:84:2e:71:ad:76:1d:5c:06:63:5f:15:35:
fc:3c:91:57:1f:d6:d5:7d:67:39:00:cb:be:7a:01:b8:5b:a8:
59:d8:65:4d:15:27:ba:95:77:b0:96:83:64:38:c9:53:fe:76:
cb:86:a0:03:af:30:a1:53:58:21:84:5a:62:10:d0:c0:c2:51:
46:0d:da:96:3f:39:9c:22:6e:84:98:3c:80:01:35:e5:f5:e4:
63:8e:7d:f2:71:09:1d:ed:cf:bb:36:e7:62:8c:17:23:e3:01:
67:80:22:5b:4d:31:83:56:a0:d0:be:27:0d:41:d9:0e:9d:1d:
5c:f0:ba:79:f3:c4:58:fb:8a:22:f2:d1:25:a0:57:a0:41:f6:
eb:7b:30:f8:95:4d:c2:a7:d2:1a:0d:3f:44:d4:cf:35:e1:fd:
8a:7a:48:62:59:97:74:37:8f:69:78:a7:a4:9c:e8:1d:34:c5:
33:d6:53:a2:81:e6:10:67:69:bd:2c:71:20:9d:32:6d:b5:54:
ed:ba:e8:9f:53:b2:9b:c0:c4:60:fe:56:cf:17:c3:1c:0a:9f:
7e:df:9c:fe:4b:08:89:bf:2d:a0:56:b5:fb:bf:98:74:fb:b0:
f9:c0:e1:be:9e:a6:64:69:6d:35:27:b0:ea:bf:f4:98:79:f9:
2e:2b:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:28 2026 by rpki-client