Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
File: l04fjAqkvQNL6t2zOJvXNspEPsA.cer (raw, json)
Hash identifier: I34D9u3Ek597CiJO8Bl7VBRdQnAqHa7OKHsqLIvDIVE=
Subject key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01B96595376197DC8B715230C61AFEDB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Aug 2026 19:53:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199742
AS: 219064
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:96:59:53:76:19:7d:c8:b7:15:23:0c:61:af:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 19:53:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:5d:72:f5:9b:fc:4b:2c:d3:14:65:6e:25:
ef:9e:c7:9a:38:04:c1:68:3b:19:b9:8f:ca:cd:5a:
07:b1:f5:b4:72:4f:e3:42:68:88:ec:04:56:21:ac:
b7:e4:f6:3e:c0:6c:94:cc:33:e1:3c:02:5d:2f:ca:
b0:95:b1:e1:7d:a9:2a:8b:06:a7:45:8e:2f:e1:46:
d2:ff:3b:87:eb:58:43:85:de:ee:14:a4:57:a5:0b:
b0:80:70:1b:f2:ae:f2:ed:8f:fb:0c:b4:a6:17:9e:
b8:1c:e0:22:f3:38:69:54:9c:e5:08:6f:bd:a5:29:
6b:d1:ea:2d:00:4b:a8:eb:f5:f8:0b:f5:91:59:d1:
1f:46:61:b3:a2:08:da:1b:5e:f0:78:58:88:df:02:
1e:8d:17:a8:ff:9e:0e:b4:5c:4e:e7:cf:04:67:e5:
3f:9f:64:e7:9b:1c:58:dc:80:8f:19:a3:aa:be:29:
6a:9d:36:dd:87:5e:9c:ac:1e:e6:1c:90:e0:20:05:
9d:0a:1b:b6:f1:68:f1:1b:64:5e:ab:37:87:2b:df:
ab:54:84:f8:8e:1c:b8:c1:c2:6f:23:23:63:af:9a:
34:f5:cc:88:1f:31:ee:8a:5f:20:09:ec:ae:b3:6e:
70:44:38:92:b2:9b:f7:05:b5:14:9f:d1:1e:be:3a:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
219064
Signature Algorithm: sha256WithRSAEncryption
62:4c:0e:11:2e:1f:39:d4:82:91:c0:82:f4:1b:a6:67:35:24:
87:fd:c0:17:d3:37:6c:52:ee:c8:e7:a9:4a:70:d0:16:ce:c3:
d2:17:20:25:e7:aa:0d:a1:07:1a:d2:5d:2f:60:35:f6:c8:5e:
22:8d:45:f0:f1:36:b2:f2:0f:b0:59:6f:b4:fd:8c:85:6f:bb:
9b:12:62:de:b9:b2:04:21:e2:78:f6:7a:51:91:f8:05:a4:d0:
ad:ba:15:15:7b:a9:2e:15:87:4b:eb:2c:b7:8c:19:ec:e2:d8:
18:b1:cf:d5:f8:44:9b:84:49:4c:ce:7d:b4:c5:21:b9:c8:d0:
df:31:02:1d:95:a2:10:a0:0f:c9:55:28:ba:21:1d:e0:fa:64:
e4:83:d3:c1:2d:17:b7:d3:3c:59:50:7d:9e:6e:d9:83:f5:5c:
f9:ab:b1:e5:c4:16:a0:b4:05:ea:5f:a9:86:cd:9c:44:36:b2:
23:ce:9b:45:38:7b:42:cf:07:6b:60:e7:e9:1a:2f:22:44:e3:
e9:a1:84:2b:5e:17:93:8b:5c:fe:46:eb:64:cb:49:5c:fb:f8:
a0:d0:44:d9:9d:7f:f6:0a:45:e3:21:65:10:62:04:d1:95:8b:
38:69:ba:32:30:29:ca:f8:19:a0:13:f8:87:39:76:6f:a3:89:
7e:95:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:51:44 2026 by rpki-client