Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.cer (raw, json)
Hash identifier: ibVM0DFe5BipTCbawOMN/ZEN6Z1KZACVxfhoL8iELmY=
Subject key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C65E89BE2F3168F88664DD97ACF9C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48360
IP: 185.77.104.0/22
IP: 2a05:62c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:5e:89:be:2f:31:68:f8:86:64:dd:97:ac:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:4b:e7:c6:d6:f9:4a:98:cd:32:df:21:26:
e0:9f:90:d4:36:4b:62:c8:f3:a5:35:1d:d9:f5:57:
37:c0:dd:f0:62:0a:24:0f:9c:28:72:8f:4c:12:03:
51:55:97:e3:32:8e:6b:f6:88:7e:98:85:95:72:c0:
99:57:02:03:42:93:b9:3b:51:b8:6a:9e:6f:06:7a:
84:9f:3e:ac:9f:8f:bf:18:cc:f9:c5:5f:f0:12:13:
2f:4d:82:ad:0d:ff:fa:eb:af:91:dd:38:b6:8c:ce:
b9:b4:3d:ad:10:2a:cb:d0:c6:21:35:87:5d:1e:07:
dd:b9:d5:e5:34:16:de:d8:d2:18:a5:ee:09:18:f0:
d0:94:93:cb:ef:9c:87:1a:06:11:f2:05:2b:8d:af:
20:69:bf:bf:de:ad:3f:58:4e:fb:c1:ce:14:69:8b:
03:74:f2:f8:05:ed:22:28:7d:42:8f:cf:e6:31:3e:
be:cb:82:f2:2b:71:fd:49:eb:ed:8a:7d:53:5b:9a:
bc:30:e5:a3:87:94:a1:c7:4f:20:d2:78:0f:d0:aa:
31:e1:36:01:e5:7d:dd:92:93:2e:12:78:95:48:93:
4a:87:6d:95:2e:cd:d2:f4:af:11:0e:7d:50:e1:c5:
29:fb:09:80:c1:fa:91:b2:0e:57:43:27:3e:4d:c6:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.104.0/22
IPv6:
2a05:62c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48360
Signature Algorithm: sha256WithRSAEncryption
9f:74:b6:95:9d:74:69:40:e1:98:76:5a:b0:2d:fe:dd:65:d4:
08:ad:10:63:3a:38:0a:02:40:19:5d:f1:de:61:62:c7:d4:ac:
83:86:0e:a7:20:13:d1:1f:28:a8:15:63:b9:3a:47:63:f0:5e:
c7:57:65:2b:82:7e:4e:5b:5d:65:90:3f:10:e1:01:47:c0:76:
6e:64:d8:85:83:a6:79:59:47:e0:45:ba:d1:dc:04:02:ba:cd:
06:20:47:ff:01:76:fb:b0:7d:d8:cf:33:11:6b:f5:e6:be:35:
c6:bd:61:82:5b:bd:5b:cb:9e:c9:e2:99:44:c5:66:df:5c:df:
b5:85:6e:0a:50:2d:6e:b9:64:bd:b7:6d:5d:a8:55:42:1d:ed:
dd:be:03:ce:32:bb:21:34:48:37:7f:24:cd:be:f1:5e:d3:85:
39:e2:c0:b7:8a:99:5e:99:e6:99:eb:46:61:b4:64:15:60:c2:
1c:f9:11:d4:d3:23:9d:ab:c1:f8:a7:f9:c8:34:4d:b9:bd:83:
40:02:37:49:9f:95:64:94:8a:4a:39:7a:4d:34:2b:7f:26:5b:
88:46:6d:ba:c0:51:5b:69:01:d7:ec:4a:00:b4:35:7b:96:d1:
1a:31:16:0c:d5:8b:58:14:13:cd:03:e8:4c:21:75:91:a1:c9:
aa:e6:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:19 2026 by rpki-client