Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer (raw, json)
Hash identifier: 28xV8VH05g0IQjrLa6Tsm2kGpYGBVvAJW+6XsonVB80=
Subject key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15F350359BFB7AF8020662B5A64510
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24707
IP: 185.122.80.0/22
IP: 2a06:b200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:f3:50:35:9b:fb:7a:f8:02:06:62:b5:a6:45:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:83:57:44:3b:46:d6:0d:13:05:00:d5:ed:
ef:a1:65:0a:0c:aa:45:26:e2:8f:57:3e:84:ff:38:
13:95:e0:38:7c:d9:19:c7:c5:0d:c6:21:93:d7:a1:
1c:e5:b6:9f:44:b6:58:6f:40:53:d0:4f:45:4c:a5:
b7:fd:d3:56:b4:e7:17:c6:47:e4:10:9a:cc:e7:d0:
01:de:a8:33:38:80:4c:dd:9e:9b:21:8c:b9:7a:54:
0d:ff:cb:71:a8:dd:b0:6d:93:ed:48:70:57:0f:8f:
33:16:35:49:71:04:33:95:9e:ab:ff:d8:81:2d:3e:
03:70:de:13:f0:df:3e:a1:68:72:b6:d5:ba:ec:21:
9e:0f:82:6e:d4:25:d6:4b:e4:bd:dd:bc:61:90:e9:
5a:ec:dd:40:85:19:d7:16:0c:4e:48:1f:63:59:dc:
43:0c:88:94:b5:e4:71:6b:0f:49:56:56:23:08:22:
3c:42:51:6c:1e:91:e3:1a:c0:3a:08:dc:c6:c4:57:
d6:72:aa:75:84:38:05:61:ab:1a:54:b9:c4:91:d2:
d7:cc:e7:82:70:aa:46:38:77:cf:12:86:eb:7f:da:
6b:54:1e:32:0b:ec:de:59:86:d6:6e:31:c7:92:79:
b1:52:2c:11:a0:f8:5e:46:b8:d1:e3:99:7e:25:4c:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.80.0/22
IPv6:
2a06:b200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24707
Signature Algorithm: sha256WithRSAEncryption
1c:d3:9e:8e:09:d0:7c:ba:e3:df:d4:43:6b:d9:6b:3e:7a:f0:
28:8c:de:3d:32:c3:a4:3d:1e:23:b5:7d:29:8f:2d:fe:e1:1e:
be:33:dd:37:b8:84:ee:1a:39:10:73:72:67:98:fd:de:9b:5b:
c6:bc:75:c0:c7:b8:f8:98:96:6b:ae:ff:c9:1b:14:5c:bc:e1:
be:29:df:a0:cb:df:d8:29:a4:e8:42:6e:51:9c:11:ca:93:f4:
b5:e6:33:02:af:fd:67:c4:d1:59:a2:a2:ec:2c:c8:b9:c4:92:
fb:f6:80:7c:22:4e:d3:95:46:11:d2:ae:95:df:ce:22:f2:83:
48:b3:dc:a3:93:f8:45:da:20:61:cc:4e:ce:68:ef:14:5d:00:
1f:27:46:2c:fe:8e:a6:11:23:ae:4b:6f:8e:a3:39:d4:d1:cb:
bd:86:53:0c:65:41:c6:fe:a1:79:a0:1e:95:af:49:92:76:de:
5c:71:46:6e:1a:ae:75:ba:ea:aa:eb:17:07:a6:8d:ba:bf:e6:
de:c3:4e:ca:bc:e8:f5:2b:51:7f:ff:78:af:3b:19:36:62:f1:
4b:ff:d7:18:31:1c:f4:5e:18:c8:8c:9d:12:90:4a:a0:a9:8d:
76:1a:35:dd:f5:49:e4:d3:f1:f7:2d:7f:9a:03:60:3c:a9:67:
a9:f4:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:02:38 2026 by rpki-client