Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
File: 39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer (raw, json)
Hash identifier: Gwc6pSmktEtZByPtYu7nTPyscrxjEW1hV7cqYl0OFpc=
Subject key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBD5B5927477C621FC461D26BCC2CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 28849
IP: 185.15.156.0/22
IP: 217.23.112.0/20
IP: 2a03:c740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:d5:b5:92:74:77:c6:21:fc:46:1d:26:bc:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:89:c0:99:2d:a5:de:38:f2:48:b5:d2:e2:
19:eb:5d:94:9e:33:d4:3e:f8:c2:d3:e2:74:d7:9a:
62:6f:55:63:ca:1f:d8:37:10:12:8b:76:77:83:4f:
15:d3:6e:51:3d:bc:6f:85:df:08:52:16:75:8b:74:
db:90:10:0b:c2:ae:f9:29:a7:de:1f:6a:4b:aa:67:
53:b4:e9:50:a4:64:59:c5:72:65:91:19:4c:3a:97:
14:28:34:d5:a1:b1:7e:bc:47:60:1a:d1:1e:5f:13:
05:26:88:e4:d8:46:34:d0:3c:9c:e0:4c:1e:7e:65:
cf:9a:e0:04:48:86:e5:3d:bc:b6:de:3d:6d:c1:41:
83:ec:0a:c7:5a:97:c8:fd:07:ce:09:19:e6:0b:ac:
fe:49:82:0c:99:9b:f3:90:e3:ab:cd:36:18:6d:49:
5e:a2:35:b3:4b:79:21:0c:51:f4:fc:f8:9e:f8:3e:
27:dd:61:88:1a:48:f8:ea:1b:de:74:c7:c9:35:f2:
dd:5b:07:41:5d:f9:2c:56:72:2e:2a:8f:26:50:16:
5c:54:3d:48:2b:dd:d0:05:c9:c1:cc:3d:77:14:14:
bc:c2:54:c5:5d:83:74:be:af:e7:ab:0c:ea:00:a6:
3e:8a:98:7a:d3:0c:7c:eb:79:bb:7e:d7:1a:7f:9b:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/22
217.23.112.0/20
IPv6:
2a03:c740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28849
Signature Algorithm: sha256WithRSAEncryption
9c:3d:f2:32:a4:62:dd:0b:42:d6:91:52:02:bd:f6:22:c4:ae:
7c:64:86:c2:c5:77:ad:57:3c:be:c2:59:14:61:98:7f:a0:b8:
e1:1a:8b:73:b9:67:d4:b0:da:74:2c:a5:48:cd:69:7e:de:68:
a6:80:67:5f:7e:04:f1:b9:d7:47:1f:18:1a:cd:97:80:ab:e8:
7c:70:13:22:a2:dc:4a:84:d1:97:91:ff:de:fb:b0:6e:cd:97:
29:a9:fa:18:17:94:4e:2a:94:ee:d9:11:11:b3:46:2a:5f:77:
2c:76:33:a3:a5:cd:7d:52:08:66:bd:06:5e:86:9a:cf:df:94:
9a:d0:df:6a:16:bb:0c:3c:3c:9f:16:cb:f1:2b:d2:8e:66:f9:
39:c7:1b:b6:9b:69:44:ff:10:0f:56:e4:42:dd:a6:1b:94:c7:
1f:5a:31:52:22:3f:90:83:dc:69:09:dd:f7:e7:5e:ce:b7:1d:
e8:41:84:36:e8:19:4d:c1:2c:33:fc:d7:74:41:3b:7c:69:05:
81:5b:a2:6c:da:49:66:0a:44:86:18:40:41:cf:6e:9d:e7:db:
1a:40:68:d3:1d:c8:f3:c7:13:8e:93:e6:ce:aa:42:62:71:9f:
49:24:c9:93:40:d7:e4:9b:9e:62:2e:fe:00:07:10:fd:3e:f5:
e0:95:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:04 2026 by rpki-client