Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
File: DuKWtgwDjNxr_vTAYLFAYWTshow.cer (raw, json)
Hash identifier: tXeZAiHD/8btSCyWJTvVwrby3tZ4inIiJeFRPsNULVI=
Subject key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE203876901C8072235A10BE18CE9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202503
IP: 193.111.52.0/22
IP: 2a04:4ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:20:38:76:90:1c:80:72:23:5a:10:be:18:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:62:fb:3a:6a:61:ee:3d:6e:3d:bc:fd:1e:
20:4b:4b:bc:27:5b:ef:97:bf:36:b3:a1:d0:3c:39:
c9:97:41:76:e4:01:5a:b4:08:bc:e0:41:fd:eb:59:
45:87:7f:3b:63:8f:36:eb:50:1d:09:4b:e0:fe:71:
a8:00:9a:cf:11:df:b5:f4:3d:fe:47:3e:27:9c:a4:
da:85:42:7a:1f:db:bf:33:4c:e4:a5:33:65:40:84:
6b:93:37:1f:5f:04:45:95:db:28:b1:1a:21:67:c9:
6c:d2:48:4f:e2:27:6d:3e:7b:87:fe:88:c9:af:eb:
38:da:9f:36:72:97:43:f4:f5:b7:d0:bd:e1:dc:b9:
23:34:fb:bb:9c:fe:10:6d:c3:12:16:be:fd:27:6a:
73:4f:19:44:68:6b:b1:df:66:40:60:f8:79:7c:66:
cd:ce:70:ae:60:dc:d4:d9:7f:0c:e3:7c:d4:93:7e:
3c:6c:77:59:c5:75:59:3b:57:02:38:5e:e7:9c:9e:
08:0f:fa:ec:a7:ec:8f:41:a7:d1:13:4f:cc:2f:d6:
ba:ab:a1:6d:26:fb:17:7e:fa:55:6d:41:51:b8:56:
13:32:95:0d:67:02:d3:bb:4f:81:34:d9:df:5a:83:
02:bd:af:b0:42:72:92:d4:bd:39:e5:34:4a:d2:0e:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.52.0/22
IPv6:
2a04:4ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202503
Signature Algorithm: sha256WithRSAEncryption
6e:ab:d5:51:28:c8:cd:b9:3b:5d:e2:03:8b:37:70:be:c4:a1:
ec:99:07:bd:24:70:0c:0b:37:15:5f:2a:44:64:e0:d8:32:22:
e0:5f:fe:15:da:9c:16:c8:2f:9e:a9:58:88:be:9c:e2:64:06:
22:de:65:39:e2:32:85:68:25:1d:cb:4e:e5:cd:e5:27:52:6c:
15:21:50:63:35:84:d4:f5:a3:70:28:d2:8b:04:64:b1:a4:e2:
ba:40:58:e5:cc:bf:1f:31:6f:62:22:da:42:fb:00:2b:54:b4:
ab:12:18:55:2d:21:51:c8:e3:23:1b:97:96:07:e4:cf:4f:6c:
27:62:2a:17:9a:04:b8:06:1a:59:5c:01:54:af:0c:63:e1:f5:
ae:a1:1e:7e:4b:18:a1:22:84:34:fb:d3:d1:83:1d:8c:13:9d:
e8:15:a6:05:ed:19:f3:e6:44:a9:fa:28:84:b7:ba:1a:84:3b:
05:c5:c2:61:dd:8e:2c:f5:94:a8:de:15:81:8c:69:b6:ac:92:
19:86:03:67:07:94:c2:6b:6f:58:b8:8f:b2:38:e4:ea:0e:a1:
52:38:d0:9f:c0:2f:5e:e0:23:53:b6:a5:b9:d4:55:28:18:f2:
6b:58:7e:c9:0b:6f:b2:c7:5b:54:39:61:3b:fb:96:dd:7c:01:
35:78:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:55 2026 by rpki-client