Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
File: fdaRTKUodtKjLVzQKjCRSCIookg.cer (raw, json)
Hash identifier: 5htq6A8/xynikeKiS2/TDrI5Oq1aK6iL2RvpWQI3DNw=
Subject key identifier: 7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A10B7CBE9A2C8D9472E5BDF618D533FE09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Oct 2026 09:54:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 52125
IP: 194.247.60.0/24
IP: 195.137.218.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:7c:be:9a:2c:8d:94:72:e5:bd:f6:18:d5:33:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 09:54:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd6914ca52876d2a32d5cd02a3091482228a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:28:bd:63:11:42:bf:f8:92:3d:7a:77:e7:
7f:0c:9b:8f:73:2d:22:6e:60:7f:b4:21:78:66:05:
ec:10:f4:d3:fc:5e:1d:0f:aa:be:40:28:ef:94:de:
2d:aa:ac:11:d7:27:8e:a5:4e:13:3f:06:49:36:0e:
bc:b3:94:3e:eb:30:27:e4:90:a4:b0:b5:0f:8c:62:
cd:f8:43:2f:d1:7e:29:2d:97:5b:94:3d:56:4c:76:
b5:57:59:f6:cf:1e:22:eb:8a:ff:ef:cd:e2:4e:39:
a3:39:12:d3:37:8f:ed:1a:55:6d:64:23:eb:14:e6:
b6:a3:62:12:d1:97:3f:34:de:d4:48:3f:f2:66:c7:
fd:30:29:64:46:4b:03:26:c2:b0:83:f5:15:41:29:
a1:be:b9:89:3e:c0:ce:3a:e4:cf:2b:b1:2e:ba:2b:
e7:18:53:ed:56:f2:6d:5e:3a:94:c1:07:a6:fa:df:
5d:57:d1:11:3e:10:43:bc:df:d0:9a:ca:b3:3a:69:
d0:d5:07:ce:e2:ec:78:2b:7a:58:63:90:23:30:99:
f3:21:a9:43:d1:d8:23:7d:9c:2c:c2:c5:4c:a8:98:
1f:40:64:05:29:32:e7:aa:75:12:f7:29:43:ad:15:
f6:9a:e4:da:8a:9e:9e:2a:e7:c8:c1:12:d8:34:cd:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.60.0/24
195.137.218.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52125
Signature Algorithm: sha256WithRSAEncryption
26:4f:a0:92:6e:9a:81:f4:77:57:97:75:0b:61:ae:c6:03:c5:
df:54:3c:01:e7:da:31:a8:5a:e5:c3:6c:60:9d:f4:4f:c3:59:
0f:f7:69:c9:1d:4d:e8:f5:40:5d:35:2b:20:3f:43:92:9e:4f:
fa:b7:02:53:3f:b3:52:a2:60:43:01:94:c5:73:65:35:00:57:
a6:d7:19:a6:0b:f7:e8:20:a0:29:e3:25:f6:0e:7a:51:7a:f7:
87:23:6b:40:63:84:b5:cf:91:5e:04:be:42:14:91:e2:12:11:
2b:6d:e9:0e:9f:cc:b1:fa:d2:30:c2:8a:aa:3e:bb:96:ec:52:
55:bb:e5:7c:77:7d:09:6d:dc:6f:a1:a0:84:0f:b7:a0:b1:01:
79:58:dd:8f:a1:29:94:59:7f:9a:cd:60:32:b6:c3:34:3a:7e:
be:f8:69:60:1c:8b:5f:a8:2b:54:d4:c9:0e:a3:91:61:63:c0:
9f:eb:86:01:c9:33:90:e4:27:0e:7a:db:7b:98:6d:73:63:36:
68:e0:69:74:04:a3:da:fc:3d:11:c7:44:16:81:3b:c1:40:f9:
5f:21:d8:5c:fd:1a:5c:4c:fe:44:f3:48:40:92:5a:df:55:60:
a9:1b:17:ed:6b:c7:b7:20:7f:8b:b2:e8:14:f7:a1:97:c5:36:
f7:89:a4:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:23 2026 by rpki-client