Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.cer (raw, json)
Hash identifier: ohcf/qkbohK2p4N2gOe01g4ryQPqNXpETHi8BA2EiSc=
Subject key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC410499566E4F97084CAA2AA8E2FC84B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 16:52:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201934
IP: 194.12.32.0/20
IP: 2001:67c:658::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:10:49:95:66:e4:f9:70:84:ca:a2:aa:8e:2f:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 16:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:19:ec:d6:cf:66:60:2f:ab:4d:90:29:55:
f3:95:65:b4:98:30:2f:87:50:f5:b1:94:24:59:18:
6b:fb:5a:d9:10:c0:6f:6c:23:01:16:88:f3:f7:f4:
79:29:f2:fa:a9:72:fe:15:ad:5b:79:23:fc:70:82:
67:67:b7:3f:41:3d:62:f0:68:cc:b4:f6:ed:94:f2:
bb:c1:2b:84:00:65:d3:e0:7e:0f:7c:5e:3e:e7:95:
4c:33:c6:55:54:3b:05:22:b7:35:73:75:5f:4a:d9:
5d:b9:d7:be:30:b1:54:54:03:ec:91:80:f2:58:7d:
39:d1:cb:c4:cc:9d:35:f3:26:0f:95:65:a3:8e:34:
02:3d:63:d8:4f:f7:7c:0f:22:37:50:95:d6:2c:8a:
88:b1:cc:d8:40:17:f6:26:c0:cd:34:40:68:5b:9b:
9f:0c:1a:6e:bb:ad:5f:d7:1f:d5:fc:ad:5a:c5:b9:
c0:6e:28:f2:a5:fb:7a:8c:a4:44:e2:42:f7:1f:0e:
f7:41:41:84:2a:2b:98:82:1c:cc:2a:d0:d8:ab:16:
af:85:08:2c:dc:df:8a:0b:34:cb:bb:71:3b:bd:63:
c3:f8:42:81:ab:6b:40:66:9f:3b:de:78:72:53:c2:
df:8a:61:dc:f3:35:99:f8:67:5a:b6:41:77:70:b2:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.32.0/20
IPv6:
2001:67c:658::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201934
Signature Algorithm: sha256WithRSAEncryption
9b:28:50:b0:81:39:db:a6:1c:9a:67:7e:c0:0a:e3:82:ff:8e:
79:30:64:54:05:0a:d9:9a:59:4c:da:a8:40:d0:e7:71:a2:ee:
c9:6d:c9:d9:7d:c3:1a:fc:db:7c:75:5f:e3:2e:76:a1:bf:52:
25:34:df:84:33:d4:07:d3:86:8d:6d:07:8d:0b:b9:a8:6f:29:
f4:5b:b5:8d:e2:7a:2c:06:4e:7d:ed:d7:da:c6:f0:05:60:e7:
ec:06:93:eb:49:a3:e6:6e:79:fb:ba:0f:af:4a:bb:4a:61:d1:
c3:6e:5c:14:e4:c6:d5:27:cf:e2:3e:08:d6:29:4c:a2:a5:b0:
1b:ca:1a:09:c4:bd:81:87:db:c3:77:f7:02:3b:46:4d:31:5d:
0e:2c:3e:4d:cc:ff:c4:81:fd:58:fb:c5:26:c5:2a:99:fc:21:
60:87:90:0b:6c:e5:12:8e:46:4f:c8:41:e6:15:fb:6b:64:08:
11:71:f9:63:bf:f1:37:a1:91:a0:d6:9d:8e:4f:a9:72:99:cf:
d5:dc:89:f1:43:86:a1:66:d1:d4:36:d0:fd:0d:61:cf:6f:3b:
cb:16:d9:a0:3f:f4:16:35:9a:e4:dc:a1:03:79:f1:c4:e7:f0:
ca:3c:f0:46:91:af:ca:7f:31:77:27:d2:f4:ae:6d:7d:a7:f6:
ee:99:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:02 2026 by rpki-client