Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
File: PRH7pD9XqwRF5UL87suHaBZXzPM.cer (raw, json)
Hash identifier: 8PZvY1hZCbk7O4Kq4DvEBch6128FuLtZjl0XOOM9Uk0=
Subject key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0812660B0AED98A62309AE3DB984D7B9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 13:12:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62026
IP: 178.211.156.0/24
IP: 2a12:f380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:26:60:b0:ae:d9:8a:62:30:9a:e3:db:98:4d:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 13:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:2c:18:35:d1:e4:82:0f:5e:16:7c:84:23:
04:88:f2:a3:fd:a1:1f:9a:15:c6:32:13:7a:95:ac:
b6:87:12:44:f4:5a:2b:5e:1f:38:fb:68:58:0b:2a:
d0:a0:c5:b3:45:f5:a8:f0:db:14:de:de:c0:52:41:
28:ff:39:88:4a:ee:f5:18:fa:16:7f:a9:99:10:c7:
a2:a5:03:55:be:2c:37:95:9c:7e:5e:2d:d7:11:d8:
e6:1f:4b:0e:3f:65:6f:6c:78:72:cc:b5:c7:98:9c:
c8:e7:d7:35:cc:de:5c:d6:24:ec:c8:46:14:f5:24:
59:fd:89:26:15:ef:2c:15:5f:a2:2a:e7:6e:82:a7:
04:ad:09:d9:d1:8e:ed:29:8c:13:28:49:12:66:f7:
e8:31:57:69:86:00:0a:03:dc:65:bc:b3:06:41:59:
bf:f9:d5:eb:21:46:c4:a5:c4:69:a3:48:25:57:3b:
ab:24:b6:a7:e6:69:36:2b:b5:3c:11:e5:92:b4:5e:
ec:5e:66:79:43:b2:5a:da:4b:f5:11:f2:d3:7e:5a:
d4:0a:83:21:b5:02:55:aa:9b:16:36:06:bb:a0:07:
de:b3:e2:84:e8:16:5c:e1:ac:67:d9:6c:dd:95:bc:
5f:01:60:98:17:3b:c4:3a:47:30:2e:90:82:6d:43:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.156.0/24
IPv6:
2a12:f380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62026
Signature Algorithm: sha256WithRSAEncryption
12:37:c2:01:21:34:b2:56:e9:2b:88:9e:0d:71:e4:bc:85:ef:
17:e9:c8:e5:de:b8:51:e3:50:03:49:5e:98:38:ba:ae:b9:ca:
b1:b9:b2:19:c3:12:5b:e8:84:fc:1d:3f:16:ae:ff:82:e5:9b:
71:43:fb:ba:70:23:91:6f:d4:fd:c0:51:ff:87:da:b0:67:0c:
36:72:2a:43:9d:a2:52:1e:50:8f:44:1d:e2:4d:9e:45:50:5e:
8c:1f:03:e9:34:e8:1c:a9:dc:46:97:9c:55:b4:b0:17:59:35:
9d:5a:e4:91:97:97:8e:e0:6e:b8:9a:e9:48:27:b5:be:22:c0:
1d:c6:6b:89:ea:76:ba:00:ba:6e:38:19:32:bb:a4:c3:cb:d3:
90:4b:32:f5:94:b0:55:35:4b:4f:53:f5:24:ea:70:12:42:5e:
55:36:90:72:5d:2d:06:fe:2e:68:bd:57:db:45:e4:82:41:6f:
fd:c2:bb:68:f3:96:66:0a:59:db:21:ec:9d:d6:8e:3f:5e:5d:
4b:60:28:4e:1e:1a:42:4f:be:dc:62:e1:79:32:d9:1e:ec:7d:
6a:c2:6c:29:9f:22:c5:d3:a2:75:54:b0:21:cb:c1:96:35:9f:
94:52:23:bb:78:09:ce:13:c3:5d:e0:61:f3:b3:e4:e3:23:10:
24:70:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:22:11 2026 by rpki-client