Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/sRAOsXAaSL-l2Nb6p_9Q9LOpia4.cer
File: sRAOsXAaSL-l2Nb6p_9Q9LOpia4.cer (raw, json)
Hash identifier: WlTaK5YowqAGLaIDhlluC+7vI/ju93VmSBnOpYrRe0I=
Subject key identifier: B1:10:0E:B1:70:1A:48:BF:A5:D8:D6:FA:A7:FF:50:F4:B3:A9:89:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A12876EAF0EA14AFD63AB34CF64138F1C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/7531c0-4316-456d-8e1a-9f5b184700b6/1/sRAOsXAaSL-l2Nb6p_9Q9LOpia4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/7531c0-4316-456d-8e1a-9f5b184700b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 11 Oct 2026 00:57:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218444
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:76:ea:f0:ea:14:af:d6:3a:b3:4c:f6:41:38:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 00:57:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1100eb1701a48bfa5d8d6faa7ff50f4b3a989ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:30:2d:a7:59:a3:eb:7f:cf:8d:1c:08:98:
7d:e7:3c:f7:6b:e8:57:77:79:77:50:05:ee:fe:48:
ea:da:b5:21:66:25:b9:4d:db:ae:52:53:2b:01:2a:
bc:cf:ce:fa:76:bc:f9:75:52:f3:6c:d0:00:65:76:
86:38:52:13:1e:52:7d:51:41:8e:27:ac:c9:70:fa:
cf:99:e0:18:04:e2:ce:50:a6:a1:50:36:39:1e:2e:
55:13:85:a9:d1:ea:6a:75:bd:d2:1e:61:0e:2f:13:
48:67:0b:4a:95:c2:6e:b8:47:f3:7a:b1:f5:51:3c:
e9:24:99:2a:09:f4:0e:6e:8e:83:f4:18:62:54:b8:
e2:69:f2:4f:9a:c7:56:7f:83:77:e6:b4:1e:8c:64:
4b:f1:19:22:23:e7:c7:1a:a0:d1:e9:d0:01:b2:6d:
78:09:d9:27:a0:70:68:a0:b6:ff:e7:90:7d:75:cd:
0d:40:05:b3:b4:45:c8:96:74:b6:bd:59:f5:2e:b9:
f9:50:d8:89:64:06:0d:46:cf:5a:c8:ae:38:66:95:
b9:0b:ca:15:04:8e:72:7d:15:19:2a:5e:b9:59:62:
b7:3a:0b:8a:57:6e:8f:4e:06:e7:19:fa:86:40:a9:
0b:25:f2:d3:ae:04:3b:af:2f:21:cf:11:a2:b9:be:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:0E:B1:70:1A:48:BF:A5:D8:D6:FA:A7:FF:50:F4:B3:A9:89:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7531c0-4316-456d-8e1a-9f5b184700b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7531c0-4316-456d-8e1a-9f5b184700b6/1/sRAOsXAaSL-l2Nb6p_9Q9LOpia4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218444
Signature Algorithm: sha256WithRSAEncryption
35:f0:e5:e8:0d:1c:b3:d3:f4:b6:6a:d1:d3:83:89:1f:43:69:
2e:d4:3e:ff:8d:1c:d4:b0:d8:0d:91:7d:b1:fd:ef:56:11:cf:
6a:c9:36:a4:1c:f2:23:f8:02:2e:4b:94:5d:80:61:7c:b7:9f:
1e:c3:af:ed:a5:36:33:df:de:11:22:a1:ca:31:05:38:8f:c9:
df:b6:c8:e3:f7:f9:cf:83:df:af:ca:f9:77:6e:56:4d:49:e7:
18:3b:e8:05:0c:29:51:b9:ce:92:02:28:1a:b1:fb:af:06:6d:
13:d4:45:7c:fd:fc:3d:e9:6b:05:82:e8:85:0e:72:3a:6e:91:
03:eb:e7:e0:6b:d7:ca:7b:6d:9a:4d:b6:11:1c:76:30:32:e3:
30:4d:54:2a:8f:77:6a:32:b9:ff:64:a5:41:cd:9f:b4:59:91:
4b:b3:14:33:e4:53:1f:5d:5c:34:15:a2:71:06:88:c0:29:5b:
f4:1b:21:74:0f:33:11:2c:9c:25:3d:63:ce:32:7e:19:5f:07:
ce:eb:be:7d:12:d9:01:ba:0c:19:3d:6e:f4:d2:fc:53:3c:cb:
24:db:17:a0:6e:4d:d8:64:c6:58:41:74:7a:20:be:c4:3e:b7:
53:ea:d5:3c:17:e6:97:cf:50:cc:fc:90:ff:d7:b2:85:d4:a0:
75:c5:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:53:29 2026 by rpki-client