Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
File: ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer (raw, json)
Hash identifier: quYaAfSTpay8+ro4uwpaf/rNqo39oRNF+zRRo0JkXTY=
Subject key identifier: 11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA7BA1D432E944F5B10FA91CC78296
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204731
IP: 185.241.224.0/22
IP: 2a0c:b380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:7b:a1:d4:32:e9:44:f5:b1:0f:a9:1c:c7:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=113c673a25f75c8de0c860f469183a709a171e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:58:42:9d:c5:11:1b:80:05:ad:af:23:39:
a3:82:cd:2c:1d:56:d0:92:78:04:7d:16:b0:9b:5c:
d7:ca:db:73:3f:74:89:a5:70:ba:33:4d:1c:41:df:
32:ce:d0:ff:ec:38:79:24:50:fc:ad:6f:da:8b:72:
d0:f6:25:4f:54:a4:30:26:82:ff:08:db:17:1a:ca:
69:bf:10:ef:a8:fd:33:b3:59:b5:fb:3f:aa:cb:b6:
53:5b:42:37:d4:a6:04:f3:4e:7b:59:cc:6c:db:6f:
f1:a8:2f:00:d1:ab:69:cc:5e:7a:16:a5:2b:3f:76:
cd:bc:aa:19:48:d0:7d:27:dd:86:ce:58:b5:b7:00:
65:23:e2:43:ed:9b:de:12:18:5f:b4:c9:4b:5a:d0:
ab:d3:c0:4a:8e:67:87:15:29:4f:b9:75:d5:42:a9:
be:7e:22:eb:44:b7:f4:53:00:9d:45:fe:7a:cb:0e:
52:ef:ea:25:85:c2:1e:54:a2:c5:e7:54:58:52:5b:
0a:f6:46:a6:3d:d7:18:98:65:27:32:bd:39:a6:c7:
d1:9d:3a:c7:c7:85:f3:0d:ab:1f:c8:6d:a8:1c:f0:
3b:6f:86:ae:b1:14:6f:a6:d0:19:1e:01:48:30:92:
d3:ba:32:fb:f1:79:45:40:c6:a5:ed:70:3c:10:bd:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.224.0/22
IPv6:
2a0c:b380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204731
Signature Algorithm: sha256WithRSAEncryption
af:7c:17:75:7e:b2:10:7f:40:03:0b:2a:a3:37:92:0b:aa:3a:
5a:1b:43:05:b0:33:d6:00:33:c1:7e:98:14:86:6f:4a:b8:80:
e6:58:63:36:9d:c3:48:b3:4f:13:1a:e3:23:62:f4:45:47:5c:
c8:80:7f:95:77:f4:7d:a0:8a:8a:44:b6:65:aa:17:0a:23:dd:
1c:95:36:45:ea:31:59:fd:5a:b8:73:dc:56:37:89:48:3e:f0:
59:75:0c:7e:1c:1c:5f:3b:cc:54:cc:dc:26:c8:34:4f:4d:4b:
59:ae:90:37:31:f6:10:58:2f:72:8b:be:2c:59:ee:6c:7f:85:
2c:6f:4c:61:d6:b7:ed:2e:bc:ce:6d:1e:16:83:a6:37:7f:b1:
45:7b:a1:f6:b7:5e:d5:c9:01:3c:15:93:5f:7f:c3:0a:b9:44:
12:b8:52:37:63:2a:76:d1:b5:76:19:46:bf:1c:12:f3:bf:ba:
d2:bb:4b:2d:34:1d:9b:58:24:57:60:3a:c0:01:35:b2:8f:6c:
18:d3:df:f5:d3:59:ab:aa:78:52:53:e1:cf:37:00:f5:bf:df:
b7:51:19:16:49:59:62:c7:5f:2f:4f:11:6d:bd:ab:8b:e5:dd:
a5:70:5c:f7:b9:58:98:07:33:d5:45:07:bf:e0:4d:2d:86:ba:
19:74:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:15 2026 by rpki-client