Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
File: Psn7DRNVKq0E86qutY1N1OfPQPA.cer (raw, json)
Hash identifier: W+wGp1q61C8rmFG2jDRKK3OnhNG6/QbhC2A14L+hXiI=
Subject key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BBCCF9929ECC620A628207B541502872D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Jan 2026 14:01:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62166
AS: 207578
IP: 185.65.106.0/24
IP: 185.83.172.0/22
IP: 185.187.44.0/23
IP: 185.208.44.0/22
IP: 185.240.68.0/22
IP: 193.25.203.0/24
IP: 193.58.36.0/22
IP: 2a05:9d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bc:cf:99:29:ec:c6:20:a6:28:20:7b:54:15:02:87:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 14:01:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:68:fb:fa:83:c3:46:ac:c0:c2:f3:6a:57:
53:37:17:aa:a5:9c:ea:3c:9a:b1:ce:ba:a8:5f:ea:
f1:cd:cf:ce:2b:f7:d4:62:9e:3b:7d:d0:eb:12:b8:
d1:23:ca:0c:ab:a2:e3:18:c5:d6:27:7e:ed:93:84:
06:68:eb:c0:c0:af:ae:65:c7:3c:2e:2d:07:31:72:
4f:53:e1:43:cb:99:c3:6c:7b:ac:24:2c:28:d9:07:
fd:6a:e1:f8:f2:60:f9:61:f9:dd:55:8d:55:ea:16:
31:02:0d:ee:bc:29:39:5a:17:0b:dd:60:1c:61:18:
5a:bb:b2:d6:91:c1:3e:ec:6b:46:ea:44:70:84:42:
86:7a:ad:c7:d9:37:61:8c:07:28:c6:57:6f:3d:c7:
71:d8:ec:08:23:6d:80:3f:6e:14:2a:ac:68:62:6a:
69:e7:9d:b6:91:91:21:ba:1e:66:fd:c8:87:5e:61:
ef:13:16:9a:e3:7b:9f:3a:dc:c8:86:40:a3:74:8c:
aa:47:43:5a:ed:c9:4d:f8:f8:38:71:e3:d9:82:90:
a3:dc:b1:d9:75:00:fe:63:1d:f3:e9:63:ee:63:62:
4d:db:26:a2:4c:8d:93:a3:7b:01:c0:1f:a3:a2:c1:
42:2e:8d:c9:11:c8:a6:f8:ab:05:b7:0d:03:0e:0d:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.106.0/24
185.83.172.0/22
185.187.44.0/23
185.208.44.0/22
185.240.68.0/22
193.25.203.0/24
193.58.36.0/22
IPv6:
2a05:9d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62166
207578
Signature Algorithm: sha256WithRSAEncryption
64:ec:e5:b8:32:ea:f2:1f:a8:ef:f5:a5:6a:37:60:99:87:3c:
08:ff:5d:1d:a7:55:8a:0d:08:b9:0c:16:23:53:16:9d:02:8e:
3b:d7:45:37:5e:1d:86:8e:5b:86:0c:16:53:0d:b2:0f:80:6c:
fc:65:bb:10:5c:43:11:8d:9b:72:86:cd:71:98:eb:0e:45:ad:
0f:30:21:f5:96:b3:8a:6e:00:35:15:01:59:c4:0e:56:68:2d:
ad:b9:b9:24:a4:f2:8f:fa:a2:7b:ab:43:67:57:02:ac:d0:fd:
6f:2f:8b:62:e3:bc:05:08:31:31:69:86:45:ca:8d:54:45:d6:
1a:8e:7e:01:f5:9b:d7:0a:44:e9:a1:85:58:0b:09:92:93:e3:
d2:12:5b:e3:62:b7:f9:f5:ec:34:ae:1c:58:c6:25:4c:4e:66:
26:68:fb:45:7a:7d:a1:dd:79:ca:da:04:45:5e:3c:3e:93:0b:
59:89:8d:80:22:82:af:e1:74:4f:03:ba:1c:55:a3:e4:91:aa:
1f:a7:5a:61:b0:b4:4a:4a:1e:59:e3:c8:f0:d3:a3:73:7b:54:
13:66:9d:c2:44:80:09:4c:98:ba:a2:47:38:85:0c:0f:5b:81:
c7:ab:81:a5:bf:eb:44:00:27:cc:bc:b6:8d:06:c3:e3:ec:69:
ac:1d:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:35 2026 by rpki-client