Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
File: PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer (raw, json)
Hash identifier: +4QlEJStMm1g7eLWV5CW3WORWfAIMc0dpeqDmbCpOH0=
Subject key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5ADC3FA1140660D504076C79D2B7A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35492
IP: 78.41.112.0/21
IP: 185.194.20.0/22
IP: 193.238.156.0/22
IP: 2a02:60::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:dc:3f:a1:14:06:60:d5:04:07:6c:79:d2:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:9b:52:c0:01:56:c8:04:0c:03:12:28:e4:
28:a3:08:31:41:65:e3:e6:51:c0:6e:4a:96:41:b4:
0e:52:46:cf:d2:a8:1e:e5:92:26:6a:f6:3d:38:ff:
61:66:88:3a:0b:ab:c9:2b:b5:28:e6:9c:cc:f6:6f:
9d:c7:2c:c0:7f:6d:09:32:8f:af:2e:cd:a0:a9:cf:
7b:e8:39:33:23:6d:90:3f:2e:7a:6a:97:bb:b7:72:
da:fc:5c:b3:94:c9:23:4a:44:06:73:fc:1c:6e:d1:
ec:00:60:75:dd:78:63:0a:b8:69:6e:af:0a:b2:75:
20:d1:a8:b5:0f:b3:b4:4e:eb:67:df:ff:ef:ba:70:
a4:13:f3:20:18:56:61:93:05:da:b0:26:cd:1b:66:
73:09:c8:51:b3:ba:1d:a3:91:13:97:b9:0b:dd:f8:
51:db:d6:ec:77:c3:db:64:db:a0:9a:e5:a6:2b:53:
ed:e4:09:f8:41:c6:65:f0:93:5b:38:68:56:00:1b:
11:23:64:ba:ca:4e:4c:c0:56:0d:82:98:c0:d2:e8:
bf:0c:0e:d7:a2:99:9c:50:0a:53:d9:af:47:dd:eb:
0f:37:aa:62:d8:31:e3:c3:e1:31:f1:44:1f:6a:b5:
56:d7:0d:b7:36:76:59:2f:90:88:dc:a2:88:a9:bf:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.112.0/21
185.194.20.0/22
193.238.156.0/22
IPv6:
2a02:60::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35492
Signature Algorithm: sha256WithRSAEncryption
24:bf:ad:16:dc:8d:e2:a1:c0:1c:cd:2a:bd:17:b2:6a:b8:d0:
bc:17:69:db:c8:51:b3:e7:c7:a0:af:bb:35:53:9d:43:36:e9:
b2:a3:9a:4f:f8:3b:f2:cb:5a:45:5b:0d:b2:6d:52:9f:1c:1d:
1a:71:de:f5:71:c5:b7:81:44:33:ec:bd:43:ad:c1:43:59:98:
44:dd:06:c8:56:d0:c4:41:bd:73:87:31:df:57:f3:b5:70:34:
28:a1:7b:c9:4e:28:c2:95:47:62:70:81:9a:f6:7a:a4:e0:5a:
ba:22:9c:1e:43:b1:b0:cd:5a:58:cf:6f:e1:cc:c9:bb:fd:12:
fd:61:19:1f:99:18:fa:b4:52:11:e1:b9:1d:1c:f9:3d:9a:4f:
86:15:48:64:4a:9a:48:f0:9d:ad:37:97:f9:3e:ad:17:e1:09:
17:a3:aa:5e:2b:e8:0d:2b:85:10:f6:a9:06:1c:4c:ef:b4:68:
12:2b:ab:ee:07:f6:6f:a1:d2:3d:77:8a:07:c1:31:1f:bb:07:
fb:b0:6f:3b:33:db:21:35:ec:8e:f4:aa:bd:f6:1b:5a:72:c1:
ce:ea:25:0a:ac:41:6a:0c:aa:62:30:8f:df:b8:2c:29:18:c5:
3c:50:af:3a:fc:d3:db:21:62:a4:4e:64:97:e1:c2:d7:2e:a9:
dc:a8:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:57:06 2026 by rpki-client