Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
File: Re1ZewY6Xadli0iMsbbD-bIQlPM.cer (raw, json)
Hash identifier: Njf3+88canY/U6fpi7MosvKh3SezIc8RIUyDbSwyoG0=
Subject key identifier: 45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DC136877A43A8C7BF8A69CEDFA1F990BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Apr 2026 20:37:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200027
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:36:87:7a:43:a8:c7:bf:8a:69:ce:df:a1:f9:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 20:37:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:87:85:ff:be:48:5d:3c:15:24:42:f2:fa:
79:cf:51:e0:42:02:22:bd:68:18:b7:a9:d2:d8:6e:
f6:96:2d:f1:be:3f:f2:10:85:3e:1e:b1:e0:ad:43:
c6:ab:a5:92:01:93:72:29:5a:dd:2b:83:b9:91:fe:
2f:bf:0c:96:30:d4:e9:9f:38:06:57:7d:f3:46:ab:
db:61:e2:47:54:c6:6c:99:89:f5:aa:6f:ca:bf:ad:
17:3c:fb:14:e6:aa:d5:07:00:65:f5:e9:c4:9a:0e:
6b:79:a4:71:12:12:0c:0c:10:e4:9e:df:9f:ed:fa:
c9:a3:d5:c7:61:cb:b3:22:ba:fd:3e:db:54:bf:bf:
dc:1f:dd:5f:15:f3:63:fa:d0:9b:db:0b:84:34:f5:
76:2d:f4:d0:d7:f0:84:1a:33:ff:89:ce:96:4b:9a:
e3:bb:88:65:62:b9:8c:46:e3:e1:c9:e5:00:b4:48:
26:c3:d4:f0:09:01:cf:6e:93:c7:07:84:34:2b:c3:
8b:26:9a:ef:74:c4:be:52:85:27:71:c8:12:c6:dd:
6c:00:26:e7:32:58:0b:59:76:54:43:a1:33:28:eb:
90:24:34:f0:ef:5b:23:5d:d5:cc:66:09:25:a3:cc:
98:02:2c:a1:ba:5b:2c:b8:a3:af:5a:bd:d3:d9:68:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200027
Signature Algorithm: sha256WithRSAEncryption
23:f2:4c:d3:8b:4e:41:88:14:50:6f:47:5c:6d:8d:71:82:ac:
4e:3a:56:af:3c:cf:d2:15:25:15:4b:dc:91:64:6b:23:b6:ab:
3f:11:d9:48:27:61:30:8a:1a:a0:7e:31:e7:24:d7:d3:7c:5b:
c8:cf:b8:80:47:ea:cb:8e:b5:48:11:7b:2c:0c:e8:8a:40:6e:
99:da:21:30:32:35:93:5b:29:6f:b2:b0:c7:63:ee:fc:ad:06:
2d:ef:d3:c2:16:b9:cd:45:f3:ac:32:4e:54:98:80:f0:da:5a:
1d:3f:8e:86:9d:f4:8c:70:4c:02:5f:ef:60:eb:a3:95:d6:ef:
7b:77:e4:be:93:af:d6:73:a7:73:e7:89:08:c3:22:e1:81:e6:
47:1a:04:77:d7:67:2a:e5:93:1b:cc:5b:e8:30:77:ee:37:2e:
31:0b:9a:bb:b7:59:4d:5a:32:b4:ac:33:74:85:d8:34:d1:50:
eb:ed:d7:f7:86:39:fe:c3:26:b6:f3:1e:36:d5:40:ee:a5:14:
a0:a3:a5:82:39:c4:07:47:20:80:df:99:f9:75:2b:10:0d:d4:
60:2a:23:69:79:fd:2e:16:28:8b:26:e8:cf:07:b3:a7:be:96:
fa:a8:76:cd:09:4e:99:c6:b6:2f:2d:ea:13:e8:32:b5:d3:a2:
b8:ba:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:22 2026 by rpki-client