Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.cer (raw, json)
Hash identifier: /gIZBzQ8o5v+E0x3WOeDtacLXIhoSA1/i7AoYn7+14Q=
Subject key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C74C24C06D18B3769865EDCCA533CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58138
IP: 91.239.32.0/23
IP: 185.43.80.0/22
IP: 2a04:9040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:4c:24:c0:6d:18:b3:76:98:65:ed:cc:a5:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f1:d4:1e:7e:ef:45:24:5d:ca:86:f5:17:
38:9a:ea:3d:06:39:b3:ad:b8:05:4f:d2:34:3a:6a:
8b:4e:c1:e3:8a:cc:c1:45:06:8c:5d:a1:32:89:93:
58:29:41:6d:50:03:b7:93:35:f4:1a:3f:be:40:f7:
9f:e7:85:88:9e:10:1c:dd:57:a9:a9:fe:2f:e0:54:
56:d3:27:da:88:be:68:d2:30:ff:e0:84:18:c5:15:
d8:f0:e1:96:23:14:aa:bf:d8:48:46:12:1b:ac:a5:
07:e0:d8:9c:f7:dd:5f:15:af:b5:67:ab:2a:18:9c:
8f:7d:40:1e:d4:9f:cb:06:d2:1f:74:9a:e5:29:17:
60:f5:b8:26:35:75:d4:5e:6f:f4:46:3d:61:4e:98:
ac:3d:77:15:fd:fd:46:ce:79:9a:ed:33:74:2f:af:
34:55:50:16:17:ce:b1:e2:3b:9b:de:cb:71:dc:de:
f3:ff:e2:d1:87:04:9d:0d:7a:ca:18:fd:bb:98:70:
9e:4a:f9:a3:75:10:40:9a:09:ff:5e:d9:4a:37:b1:
28:ba:0b:da:4f:dd:d0:3c:5d:11:a1:83:15:d9:34:
e7:e2:31:99:99:c1:e5:86:fd:b4:60:26:cb:03:57:
ba:09:d6:01:c1:0c:cf:56:a0:46:fd:38:2b:12:8e:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.32.0/23
185.43.80.0/22
IPv6:
2a04:9040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58138
Signature Algorithm: sha256WithRSAEncryption
00:49:f6:63:43:83:74:b4:46:04:63:06:7a:0d:ad:d3:43:73:
23:74:d2:37:50:07:0f:93:2f:bd:02:d8:41:e8:99:48:0f:f8:
26:eb:d6:d1:9b:37:7f:30:2c:15:7c:be:88:a4:0e:ad:3f:6f:
34:50:b7:b3:0f:4f:4e:6e:6b:a7:bf:55:d3:50:79:62:33:f4:
6b:7f:3c:f7:de:4f:83:03:25:f2:46:97:2c:cb:e4:ab:8e:86:
f6:03:a6:55:ac:09:0e:9d:ab:af:52:fa:f3:65:07:af:d1:e5:
0f:33:1f:fe:1f:1a:c7:54:87:9e:7c:bb:ea:f8:ce:ac:0e:43:
9d:f4:50:b4:ce:94:20:e7:b2:1c:03:0f:0b:15:d0:32:0d:d4:
f2:5e:63:d2:06:90:c8:4a:a6:59:8e:84:f4:30:b9:7a:d5:8d:
9d:ee:7e:f2:54:6a:15:7e:07:00:58:66:8d:2b:23:86:3e:2b:
98:d0:f7:fc:88:2d:73:ec:e3:23:49:9e:c6:d9:36:75:4e:5f:
ec:07:2f:06:04:38:2f:af:10:9f:fd:51:22:d3:73:02:01:b2:
e1:05:ff:a8:92:da:1a:d5:da:7c:73:3d:e6:62:37:26:9c:81:
4b:4b:cc:19:c9:72:57:99:89:c9:d0:50:8b:7c:0b:09:e9:67:
8c:42:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:39 2026 by rpki-client