Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer
File: cgFNnBVH2ir3gIyiI8zehKJ5OLU.cer (raw, json)
Hash identifier: sls/APi/9bQHax8tNZMrDUfT5c/1hUDWNfIZJjUfLr4=
Subject key identifier: 72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1315359297DD2C23A559D92D85C63486D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 18:15:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219067
IP: 202.170.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:53:59:29:7d:d2:c2:3a:55:9d:92:d8:5c:63:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 18:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72014d9c1547da2af7808ca223ccde84a27938b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:26:93:c4:2d:26:7b:13:a7:13:84:4f:a9:
4c:0a:68:49:92:a6:b7:ea:90:29:b2:a2:d5:2d:4f:
38:f3:45:a2:7a:ea:0f:a8:bb:b5:59:6d:86:2b:b1:
c3:d1:ac:ae:49:e4:11:40:b0:e7:cf:6f:a0:ba:4c:
20:2e:4d:3d:06:9e:98:fd:c2:9e:b5:54:33:b0:7c:
13:52:55:ac:50:67:6f:9e:db:1c:88:91:0c:83:6d:
37:53:92:7e:3c:43:8f:2b:11:8c:fe:35:7d:e1:58:
56:af:62:4f:cf:6e:53:a4:71:2a:96:e4:d6:46:c3:
9e:a8:b1:77:f8:90:48:ca:aa:4c:ef:09:ae:d3:6b:
c5:ae:35:eb:1c:e2:30:a8:63:61:2c:0f:fa:31:72:
c0:85:fe:70:66:1d:2f:76:54:a8:8c:78:06:21:c1:
27:a4:52:ec:e2:97:18:bb:83:aa:e9:fb:7f:c6:95:
c0:72:c8:03:d1:64:f2:64:0a:de:c7:40:34:e2:24:
62:87:c4:84:e0:57:35:aa:00:10:27:2d:a3:05:7c:
7b:15:b9:d4:6e:ef:38:3b:92:81:c3:e0:cd:0a:69:
75:3f:29:c9:f9:8f:aa:0e:c2:ae:bc:df:ee:de:54:
37:38:5c:49:ab:22:4b:d9:e7:2b:0f:c1:b2:8f:6e:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:4D:9C:15:47:DA:2A:F7:80:8C:A2:23:CC:DE:84:A2:79:38:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8565ca-e10b-4232-8047-f3f901821d48/1/cgFNnBVH2ir3gIyiI8zehKJ5OLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.170.75.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219067
Signature Algorithm: sha256WithRSAEncryption
43:c1:de:50:eb:59:e8:40:77:72:d7:8e:1b:9f:e6:69:ad:0c:
4a:84:8e:19:9a:4b:39:70:25:4b:73:87:f6:18:ab:55:85:f3:
47:0b:91:4c:f0:f1:b8:db:ec:9e:6a:a6:d4:9f:74:e3:d9:18:
f5:1c:88:b8:1e:fd:b9:bd:99:34:38:1e:ea:f2:22:01:47:f8:
66:3f:8c:e8:c3:f2:98:f9:ed:f0:04:0d:32:c6:19:fd:5b:eb:
da:6d:ce:26:85:9f:cc:d0:2c:bd:3c:65:ef:45:e3:f4:57:d5:
fa:a9:dc:56:e8:ff:33:2f:48:dc:04:2a:46:3b:9e:90:cd:c5:
fc:1c:77:53:98:9c:97:7f:49:4f:85:e2:17:46:ff:7c:39:47:
08:9c:51:67:cc:38:59:47:94:a1:75:8f:6c:cf:d4:72:ff:ad:
9b:97:f5:b0:30:6c:97:4c:e0:03:2a:37:7c:b7:3e:7c:8c:25:
ab:ca:5f:16:ff:0a:3d:7b:58:de:af:06:7a:82:f5:09:3c:73:
95:25:7c:14:60:8c:72:d6:7d:7b:cd:1d:4c:55:44:12:1f:87:
7a:d3:04:f8:5f:06:1b:0c:bb:dd:33:7f:36:e9:78:65:ca:b3:
13:3c:bb:4d:95:90:aa:c2:93:ea:25:f5:00:2b:77:78:ef:40:
3a:8e:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:36:28 2026 by rpki-client