Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.cer (raw, json)
Hash identifier: jUP08eliJpqzNb/HFzderiAwZ55d/8/JPrQRLQ65/GY=
Subject key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F13AA667A532636EF56F76640FD2CB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:19:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.250.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:aa:66:7a:53:26:36:ef:56:f7:66:40:fd:2c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:d9:80:44:f8:70:53:8d:ef:c3:f8:87:79:
62:d5:d5:69:93:2b:c9:03:6f:1b:3d:58:85:26:11:
36:28:56:5d:f9:fc:a2:28:14:9e:f6:d1:d8:59:17:
5a:d3:c8:85:eb:c5:97:44:ac:c9:96:12:41:d9:ef:
8e:4f:7a:06:1d:41:d6:58:c0:0c:06:40:9d:82:21:
ac:f9:0b:60:02:41:09:be:09:63:21:3f:fd:b3:68:
94:a5:7a:6c:ad:30:48:cc:f7:9e:34:63:f7:80:79:
a8:fb:53:e7:32:15:3c:11:3e:72:c2:61:75:2a:2d:
2a:a2:2f:27:42:24:b2:8e:bf:a9:c3:d0:77:21:fb:
59:b7:11:7b:d4:ae:e9:67:f5:9f:d6:a6:44:6a:78:
23:64:09:81:4e:9c:5c:72:41:6f:13:b0:28:c9:23:
94:2d:7e:fe:a0:73:4f:75:50:40:c5:2d:ef:87:1f:
21:d1:0a:c2:8b:1f:8b:09:b7:76:1a:b7:59:ca:5d:
9d:d9:cc:5f:ff:11:70:10:84:76:88:f5:83:c6:21:
8d:9f:d6:44:f2:15:84:08:fc:ce:2b:b6:d3:aa:7c:
6b:6b:43:7c:50:b5:84:50:04:53:29:c1:41:ed:dc:
9b:45:bc:49:89:d5:65:6c:24:c7:75:7c:f7:4d:7e:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:af:09:db:37:c5:f9:59:9a:ff:3d:85:9c:eb:0f:0d:cf:a3:
f7:8a:5b:59:57:c1:05:ab:2d:1c:fc:96:53:02:1b:cf:cc:4a:
61:c4:e0:b1:3a:1d:9f:76:f8:3b:09:44:17:df:18:3c:76:f3:
d6:7d:ea:be:4b:69:57:f0:fd:a0:e8:02:53:47:4a:08:6d:73:
b9:ba:33:cb:d8:da:3d:61:6e:36:fe:6e:ee:bf:3c:66:a9:ed:
4a:e6:b5:7e:27:88:29:36:dc:60:a7:74:1a:6b:1e:13:e9:88:
08:aa:c4:5d:00:9f:1d:dc:00:10:f8:a3:8c:45:d8:56:82:9b:
3a:f2:77:f9:56:b4:e3:4d:7d:ed:72:7a:2a:e5:97:37:26:e9:
be:34:74:9d:68:98:a8:35:a1:7c:59:1b:86:fd:66:52:6d:a7:
4e:f2:63:a2:9b:13:d5:03:39:ca:b1:53:e2:4f:80:bc:33:47:
38:49:93:f6:c2:9d:41:0b:98:07:51:9e:6d:fb:a4:40:10:f1:
d7:95:aa:14:a4:7c:11:da:0e:aa:6d:1a:da:a0:ef:59:51:11:
c8:f6:97:de:eb:ec:10:91:44:40:23:d3:67:3f:fb:18:b9:c4:
22:72:6d:c1:19:76:4d:92:ad:7e:e3:3f:c7:54:92:d0:a5:5b:
a5:4e:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:09:58 2026 by rpki-client