Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
File: rA0wFTdh0H-kaUvsfrZ63E6blNY.cer (raw, json)
Hash identifier: X7RY86YgqEUmB4k2mQCplU4Y8EeqUC6QUEErncKbFEk=
Subject key identifier: AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F91A3B85C4764AA38E8F93F1D63468
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35500
IP: 193.47.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:1a:3b:85:c4:76:4a:a3:8e:8f:93:f1:d6:34:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac0d30153761d07fa4694bec7eb67adc4e9b94d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:49:8e:1a:63:f0:45:47:e0:fb:51:07:5a:
b4:80:3f:45:37:b7:03:c4:be:84:f6:1d:4d:70:2c:
8e:79:b2:4d:ec:4d:7b:48:be:be:48:7d:3c:f6:df:
48:dd:09:61:4f:e6:9f:91:b8:14:24:4f:91:62:84:
b5:fe:15:82:88:04:82:cb:5d:4f:02:cd:df:3e:86:
06:7f:3a:97:66:a2:7d:47:4d:8f:a5:d0:cd:b9:0a:
aa:88:de:30:12:fa:59:ce:54:1f:3e:05:19:a5:47:
7f:4b:26:29:c5:be:90:e9:2d:96:d5:9d:8b:42:8b:
0b:15:6f:93:c2:c9:f5:95:25:75:13:d5:49:1c:fe:
9b:c5:09:d9:a6:0e:6c:d5:93:fa:6c:4c:9c:b6:9d:
04:c2:f9:33:e0:69:0e:06:9a:40:1a:85:88:a2:fe:
a9:c3:f8:41:da:ff:79:32:89:b9:ea:45:17:06:c1:
bf:e2:48:22:e3:8c:27:54:ce:e4:a4:3e:83:7a:84:
9e:6c:1c:14:39:b7:34:9b:6c:01:4d:5b:b0:c5:f4:
be:73:5c:83:31:80:49:8b:fc:f5:f2:42:7c:58:ee:
a6:e7:06:99:ab:e1:e2:5c:40:e4:6a:3f:51:1f:b4:
cf:9a:84:62:6d:99:f1:d3:bc:79:19:a0:69:b1:5f:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.143.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35500
Signature Algorithm: sha256WithRSAEncryption
a2:43:d7:64:29:ba:1f:48:a8:ea:11:05:85:22:87:46:a3:65:
31:e3:82:18:b8:d2:6a:51:3c:31:5e:2c:23:e3:b8:db:18:c1:
46:0b:77:0b:d8:ad:d0:c4:2e:a5:25:e6:ca:6f:f5:97:55:30:
ec:95:10:17:34:7a:6b:02:9c:fa:a1:4f:dd:d6:e1:38:e8:88:
c0:97:af:bb:c5:72:5a:e6:48:14:0a:20:4c:62:bf:d1:8b:cd:
9e:98:da:72:82:b1:96:42:a8:54:b1:b4:19:7f:9a:34:de:6d:
2d:d7:ec:47:96:42:61:e2:58:16:61:c4:2e:45:7b:43:88:fe:
ee:a4:08:d1:37:c7:55:a9:9a:dd:e1:06:31:74:04:1a:09:4a:
ab:fc:c7:c9:e7:a4:08:6c:bf:38:c9:35:e8:5b:35:f7:7f:90:
a8:bd:cb:e1:c1:6e:18:9d:9d:cb:df:91:01:e3:bc:2e:e3:7e:
ac:ba:b3:2b:30:16:68:ba:77:b0:8d:f7:96:d9:b6:92:eb:ee:
5b:d0:9f:db:86:a6:e1:48:ee:3f:17:dd:4a:09:05:1f:d4:c8:
c9:05:62:67:f2:21:36:a3:bc:b9:07:25:55:80:ff:21:ca:aa:
46:ee:3a:68:a8:19:d6:74:1a:37:15:60:c5:36:3a:13:82:22:
5c:2b:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:16 2026 by rpki-client