Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
File: PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer (raw, json)
Hash identifier: CA0P28J6icjgv8ZFSOJtQ+Po3Q+T5xj9iqi3StKcrC4=
Subject key identifier: 3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06C8849BDE81FBAED4FEBAF1112FE8A2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 13:07:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.124.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:88:49:bd:e8:1f:ba:ed:4f:eb:af:11:12:fe:8a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 13:07:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8d44af375bfb74564c9baace5f91750199041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:25:9e:10:c9:5a:5c:2d:bb:c8:e7:2b:b4:
85:fc:6a:54:c4:3c:d2:da:7a:03:b0:16:03:2f:90:
7e:0d:8d:39:1d:f6:bb:fa:8e:97:5d:c2:dc:4f:e3:
09:db:56:b8:35:5a:70:b6:0d:8d:dd:64:3e:d8:51:
9c:a2:1b:2c:73:4a:fc:e3:97:b2:6a:3e:76:51:36:
aa:29:27:70:c1:fb:87:76:fa:b5:fd:4d:e7:94:c8:
d1:aa:3f:b6:75:e1:68:10:33:c1:16:1b:54:ca:93:
6e:a3:c9:a7:39:e9:53:be:cd:6e:ca:c5:00:ca:42:
65:b9:c1:4e:f9:96:4a:08:3c:be:0b:02:99:71:6c:
13:51:0e:60:b8:77:88:17:0a:dc:e7:59:7f:73:98:
5c:d2:9f:1c:6b:1c:45:89:16:a8:15:fa:5c:bf:20:
11:53:fe:e9:7d:47:b9:41:83:73:35:e6:56:c8:1e:
46:ee:54:70:aa:41:dc:ed:5e:88:04:e3:3b:93:18:
26:fa:d2:4d:47:90:c9:db:62:19:b6:a9:4f:8d:55:
e2:59:0e:da:3a:9c:06:37:06:69:e5:41:91:c0:64:
da:43:e6:20:1f:2a:30:74:96:0b:1f:11:ad:17:fe:
15:e5:68:ad:8d:1f:c2:54:67:2f:aa:58:bd:4f:23:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:83:83:17:a6:7d:3a:16:a6:88:e7:87:a2:82:d0:30:e7:64:
f1:57:7a:a3:43:d6:0c:0a:6d:f2:63:b7:8e:10:3b:bb:47:14:
3a:d6:e6:a6:2f:7f:9e:b0:81:68:ab:a7:41:f8:b4:5a:5f:40:
4b:3d:f4:48:76:e3:0b:87:36:ae:be:b0:63:71:d1:14:6c:93:
9b:fc:c4:31:1d:30:57:bf:11:8b:28:17:14:fb:8b:b3:89:d0:
26:13:a4:5e:68:c6:e0:71:82:87:62:64:a7:90:38:b4:1d:30:
78:4e:26:37:2e:7a:41:2c:5e:5a:5f:94:c8:d8:94:73:42:be:
f8:bb:40:e4:bd:6f:d1:15:ef:be:42:c7:07:8a:da:07:d8:ba:
15:e7:bf:1c:98:19:38:67:d6:c4:c0:cb:77:ce:3c:08:71:54:
e0:96:8a:f5:7c:72:ea:66:3f:07:88:fd:19:69:69:e3:fa:03:
d3:03:53:73:be:56:ae:f0:33:a0:a7:a5:2c:d5:42:9b:fb:ef:
fe:00:c8:28:dd:bb:a2:ef:09:2e:95:6c:81:2d:7b:35:36:34:
32:c1:16:d2:c7:c0:40:a1:7f:d6:63:f1:93:75:d7:6e:02:dc:
d2:15:8d:9d:99:1c:cb:d7:64:a0:6e:a5:7b:d0:b4:2c:ce:56:
7c:bc:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:49 2026 by rpki-client