Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
File: 3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer (raw, json)
Hash identifier: xilHgAhU4l14d9rs/soQJAcYPforhKeiPmMpCFgdT/k=
Subject key identifier: DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F79C21D73DB3E6396783F9E1D00C3B6C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 19 Jul 2026 09:43:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209444
IP: 213.217.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:c2:1d:73:db:3e:63:96:78:3f:9e:1d:00:c3:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 19 09:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:a2:f2:76:2a:c3:89:60:7f:96:58:e0:76:
9a:b8:19:f4:f7:5e:7a:4d:53:af:81:cf:1a:59:bd:
73:9d:cd:cc:1a:ae:2f:00:93:01:de:de:ab:71:6c:
1f:a0:1f:53:64:9e:bd:92:ec:70:cb:88:01:38:f9:
dc:cc:66:6c:94:7e:51:1f:5a:42:a8:a1:d8:9b:f6:
a6:e9:22:3c:e5:01:0c:b3:97:49:14:a9:f2:e5:b5:
57:aa:38:e8:92:f8:6e:d9:6d:62:0c:39:ab:23:37:
04:17:60:16:3e:02:36:c3:40:df:32:60:ba:44:94:
bb:91:3e:f7:31:0b:b9:84:c7:73:e6:5c:14:1a:57:
d4:6d:2d:43:db:23:42:06:f9:a9:24:0f:72:86:01:
be:24:8a:e6:97:a4:31:cc:70:5b:94:c5:3f:67:c1:
98:25:f9:ef:e1:3b:93:08:c8:34:c6:1c:1f:fe:6f:
07:d1:8c:7c:f2:fa:a4:f2:23:01:43:19:91:f0:be:
7b:14:18:f9:3c:44:6d:78:1e:f7:ac:0e:93:a8:e2:
76:cf:11:b0:39:07:90:fe:28:83:04:7e:c4:87:75:
19:66:73:cc:8f:93:eb:39:b9:12:ae:24:96:c9:cd:
a8:31:d4:29:41:4b:43:d8:0a:cc:05:36:0a:20:4a:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209444
Signature Algorithm: sha256WithRSAEncryption
4d:66:a2:1f:48:fe:a2:a0:1f:cf:3a:fb:4f:9f:fb:a3:8d:e3:
a8:58:31:aa:8f:10:01:4f:c4:8f:70:27:ee:82:4b:4b:6b:7b:
dd:05:ee:e1:30:e5:12:8a:6e:49:4f:33:b7:ea:8d:72:bd:3c:
91:2f:fc:7d:13:30:9c:78:8d:30:d9:4a:4c:c7:6c:f0:a9:bc:
66:f6:f2:62:e7:0b:8c:42:df:a0:be:9b:19:97:b8:8f:85:8a:
eb:74:c4:8e:ce:d4:7c:65:c4:b1:44:49:7d:66:30:03:13:bb:
e1:39:ad:c1:e6:56:33:f9:07:46:b2:91:92:c8:17:64:eb:73:
42:49:9b:64:74:3a:8d:4f:db:a4:86:f7:46:eb:5f:8b:d7:64:
42:89:32:8e:59:f9:c1:fc:7b:ff:46:15:30:ec:e6:f9:38:31:
82:60:63:37:50:a2:ff:23:78:11:8b:f9:b5:30:c3:49:b6:f9:
b6:2f:73:80:fc:8e:ae:1d:21:98:ec:64:fd:69:af:b0:06:7e:
c2:3a:74:b1:ec:01:bd:a3:f9:34:68:ac:61:9f:cc:01:75:da:
9b:93:f9:e6:4d:0a:64:a7:75:8a:dd:b3:38:47:a0:5a:20:9e:
46:61:1d:da:8c:dd:50:93:a4:61:4e:24:c7:14:42:e7:57:e3:
89:6d:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:32 2026 by rpki-client