Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3AQGUtdpiw4Fnv7AoF08-21EUIU.cer
File: 3AQGUtdpiw4Fnv7AoF08-21EUIU.cer (raw, json)
Hash identifier: VD6OXai6AG4juAY1bVVCpCsB6/+++Ct4BFirL5xJG1Q=
Subject key identifier: DC:04:06:52:D7:69:8B:0E:05:9E:FE:C0:A0:5D:3C:FB:6D:44:50:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A048D20C564D260E59BC61356BA0CB9E25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 14:42:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218835
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d2:0c:56:4d:26:0e:59:bc:61:35:6b:a0:cb:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 14:42:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc040652d7698b0e059efec0a05d3cfb6d445085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:40:aa:1c:17:5e:38:68:68:0f:e9:2d:78:
6a:69:36:ce:9d:f2:d2:16:c9:cb:f6:77:a2:98:7d:
a9:bc:3c:18:42:71:ec:1a:e7:d5:16:14:a5:68:65:
18:ef:39:52:7b:5d:ae:e5:f0:a4:94:7f:c3:37:fe:
c5:51:b8:a9:83:4a:91:1a:21:79:d5:0b:35:6c:60:
92:85:5e:51:75:85:e6:f5:e2:c5:25:12:d8:88:59:
90:7e:e7:b7:da:dc:fe:81:b2:63:0f:67:95:79:58:
48:41:74:3c:2e:1c:ed:86:59:59:42:45:2c:8d:ae:
26:d0:59:e4:1c:83:2c:ef:bd:c4:4b:7a:30:f9:f0:
00:a4:8f:24:0f:79:ab:c0:2c:b7:d5:d6:47:78:0e:
26:a4:a8:e6:5c:37:bb:73:bd:c3:9e:d6:85:8a:c9:
2f:a3:8d:c9:40:fb:1c:e6:b4:bb:44:2f:28:a0:26:
b0:ae:ad:87:9a:50:7d:f1:de:c2:7e:68:3a:d9:9c:
c4:7b:b6:f1:9f:93:e4:3b:15:8f:59:f3:08:4c:3e:
6a:ff:bb:88:8c:f3:91:38:f9:d3:6d:73:b4:c5:24:
e4:3e:1a:18:3f:bf:21:95:d5:9d:51:52:80:08:5b:
cf:ac:7e:01:4f:70:7b:57:c1:66:10:d4:f4:7b:55:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:06:52:D7:69:8B:0E:05:9E:FE:C0:A0:5D:3C:FB:6D:44:50:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218835
Signature Algorithm: sha256WithRSAEncryption
2f:16:b7:3e:ad:31:16:b9:94:66:e9:69:85:b6:35:af:e6:74:
80:71:35:e8:0c:a6:e1:14:e6:11:c3:1e:c8:0c:e5:d7:af:1e:
87:c6:61:a7:1b:a1:89:46:4f:d5:d9:6a:ab:8e:e4:4c:4e:a6:
08:08:4c:8e:35:52:b3:0d:29:5a:41:bc:f2:78:b2:b6:45:6c:
17:23:ac:06:c9:ac:3d:35:5c:91:2c:af:c3:75:be:29:a8:8e:
a7:c2:28:a8:7c:9d:bb:61:a5:71:32:ae:13:97:98:b2:71:0b:
fe:fe:19:f9:24:06:3f:be:5d:94:0b:47:6b:eb:12:c2:c7:fc:
e7:05:a7:f3:42:ac:b2:fa:36:6e:bb:70:69:de:0a:7c:2e:ec:
a4:83:34:e5:1a:9f:9d:26:33:17:95:60:b5:63:68:e4:f8:e5:
33:ec:24:e4:08:da:c3:53:cf:8d:53:1f:dc:a0:d4:d9:50:92:
61:64:b4:ed:a0:7d:f3:18:72:77:bd:f7:72:87:ec:4d:48:03:
c4:8e:5e:c3:8e:28:cc:71:a7:4d:c9:a1:c2:39:9d:4f:05:2b:
6e:26:4d:6a:ac:51:cb:69:6d:64:ba:6e:2c:00:ab:6a:1a:04:
e5:78:6e:41:83:8c:2b:13:bb:d0:3f:86:05:15:fb:02:2c:fc:
24:8b:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:39 2026 by rpki-client