Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
File: eA-Kp9juLNFxq6aAElVCf5qr5UY.cer (raw, json)
Hash identifier: sQg+988N9tDkJ/bxYQgwp/NgPC2zAcjKbyy6qC5tvoQ=
Subject key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DB061E9FC6B48F87FC1B1336FE86FDA97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Apr 2026 14:11:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208913
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:61:e9:fc:6b:48:f8:7f:c1:b1:33:6f:e8:6f:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 14:11:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:58:db:9e:fe:7e:a9:52:35:ea:f3:00:e2:
3c:f8:2d:03:8e:f7:66:c4:65:0f:b8:d9:b5:cb:67:
0c:ad:bc:d5:57:ee:35:c1:6b:f1:6b:93:3b:4f:2b:
2f:1d:47:ce:78:50:cf:59:93:e4:58:d7:e5:16:ed:
04:4f:01:45:fa:8d:38:7a:e8:05:14:43:46:ce:52:
96:07:82:d8:39:25:c0:11:39:bc:a3:9b:91:ee:64:
ec:a7:03:86:64:6b:aa:68:ed:8d:6a:19:ea:11:fc:
1e:9a:7d:51:69:69:c0:61:d2:81:90:48:a1:b7:30:
91:1d:ab:d8:4c:90:38:96:57:3f:d9:14:cd:69:a6:
bc:a8:d5:de:9b:fd:09:b6:cd:0e:0c:21:51:6a:1c:
79:1e:c2:58:e1:3e:98:68:16:e8:2a:d9:5c:e7:14:
a6:d4:24:82:96:9e:11:a8:d2:9a:80:24:c7:99:40:
99:86:59:32:7d:a2:68:a1:11:4a:73:14:26:a2:74:
22:b9:0d:0b:34:e4:5c:75:5c:e2:5d:0c:45:b7:06:
ef:e7:0b:6f:df:59:16:ba:e8:f7:3d:4d:3e:0a:27:
d3:72:28:ad:88:17:b3:4f:3c:01:95:38:ef:33:d4:
2a:2b:fb:1b:a2:d5:dc:01:84:69:ee:0c:65:2b:c5:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208913
Signature Algorithm: sha256WithRSAEncryption
80:ba:02:61:5e:d0:69:ae:81:e1:a8:5a:ec:81:f8:9f:d6:45:
d2:9e:8f:a9:e4:d0:5d:e2:cf:aa:68:3a:b7:df:aa:9d:82:6f:
c5:c6:5d:76:3d:62:c9:e1:c2:43:0d:b8:8c:dc:1d:e4:20:b4:
c1:d1:e7:3a:41:d0:74:e8:2c:e8:97:66:fd:c1:62:0e:56:b9:
a5:d8:85:39:df:0f:02:92:b6:e1:79:bb:82:e0:ab:f2:c4:bc:
dc:92:49:66:3e:1c:2c:ba:fa:f3:76:8b:2a:4f:5c:a1:d9:af:
bb:15:3f:b0:74:45:b9:c0:63:bd:e0:9f:46:53:7f:9c:0e:65:
50:6d:26:d0:cd:d2:a0:44:9f:ed:41:e3:f2:07:aa:7d:4c:04:
c4:50:da:36:62:23:11:c9:9b:c5:b1:39:ce:3c:e9:a8:b6:98:
47:ff:24:34:d3:3a:1e:31:02:33:74:2a:2d:c6:39:e8:bf:d1:
c8:78:f4:67:2d:a6:23:7a:30:98:53:42:c2:db:9e:cf:8e:27:
9a:8e:8d:db:aa:83:94:b1:16:a5:f7:97:d5:5a:aa:cb:61:b8:
71:6c:82:03:07:6a:9f:7b:dd:61:a8:93:8f:59:4c:67:9c:58:
e3:0e:93:46:9b:27:07:c3:05:a0:d9:5e:e5:2c:07:64:a8:da:
21:e0:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:30 2026 by rpki-client