Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
File:                     moDsOJXDspmkXSaYzTqnyfESGtw.cer (raw, json)
Hash identifier:          Nc6NWK/ZPFX2dizZcD9jlvwqueEi9O+ABpjq76ohfU8=
Subject key identifier:   9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18FB519FD535BCDA972FD31F884829F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:42:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44823
                          IP: 193.16.152.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:fb:51:9f:d5:35:bc:da:97:2f:d3:1f:88:48:29:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:42:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a80ec3895c3b299a45d2698cd3aa7c9f1121adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:c3:6b:08:33:1c:ac:b0:58:9a:2b:24:ee:
                    ab:47:02:25:ba:a8:e1:ba:b7:58:04:b9:c1:91:07:
                    bd:c4:3e:75:1f:6e:33:88:0b:65:c9:4f:13:80:12:
                    4a:47:50:09:9d:3b:50:ef:13:d4:5f:c9:0c:93:e0:
                    de:71:e6:ce:87:15:f4:16:1f:03:d9:5c:33:9a:01:
                    02:48:82:95:63:32:60:78:40:bb:64:a0:ba:75:e1:
                    08:17:15:70:f0:1f:6e:75:ec:bc:1a:23:78:3d:1f:
                    2d:d4:64:e0:e9:63:02:55:04:24:ab:d9:d4:00:5c:
                    cc:7a:1d:bf:a0:60:45:48:45:94:53:d7:7f:65:9e:
                    bd:35:72:b5:fb:10:9d:3b:1b:22:26:f3:c5:4a:64:
                    bd:45:e3:2f:42:32:60:41:95:d1:83:dc:15:3c:55:
                    42:42:4d:6b:53:9d:2c:68:84:67:a5:1d:9e:4c:31:
                    fb:bc:f2:37:cf:c2:26:b0:d0:b1:a2:24:59:85:9f:
                    25:00:af:de:46:2e:ef:44:88:47:72:a5:66:92:e0:
                    4c:95:2f:28:05:91:b8:a6:e2:3b:98:9f:f6:21:6e:
                    b2:0f:19:0f:07:47:5e:a0:70:f0:83:ee:27:3e:7d:
                    66:08:b4:16:e6:4f:61:02:21:f5:5c:fa:ca:f8:d4:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.16.152.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44823

    Signature Algorithm: sha256WithRSAEncryption
         87:22:42:14:fa:48:34:21:16:83:dc:75:f7:0a:3b:8c:b4:c7:
         a6:47:82:c7:b6:39:89:1d:cd:c2:d7:4f:7e:8d:34:2f:89:8e:
         ab:ac:c5:54:8f:a7:ce:db:2f:8d:0a:95:89:e8:9d:0b:b3:2e:
         03:4a:dd:07:e1:23:8f:e8:64:fd:68:23:ba:13:c9:6f:69:b5:
         f5:30:85:2b:21:cc:63:d4:96:76:c8:d4:eb:b7:aa:b8:16:1b:
         8b:30:b1:85:a9:9c:e4:90:72:4e:e0:bd:2a:52:33:74:fe:d2:
         b1:9d:51:fe:ba:3e:24:b4:d4:1e:be:7c:08:d5:bc:8b:a2:03:
         5a:5c:7a:ab:54:05:01:a6:93:36:6a:fa:f7:f1:3d:82:bd:31:
         b6:94:bf:8d:a8:60:e0:68:5e:86:d9:cf:32:8b:a1:73:9f:28:
         a4:15:c0:cf:24:02:4f:67:ab:ac:0d:c8:35:c4:9a:71:21:41:
         d2:98:c2:e7:86:1e:05:91:2a:e1:4f:8b:a1:40:8d:19:d0:6c:
         be:86:3a:31:ac:d3:62:9c:f9:7a:b0:80:95:90:cc:d3:85:bf:
         a3:5c:ba:77:76:5c:6b:7d:3d:d8:86:9e:55:a2:4a:86:8d:98:
         57:b8:17:64:8e:06:e7:93:ef:65:6a:91:1b:96:52:ec:ff:da:
         aa:9d:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:58:14 2026 by rpki-client