Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer (raw, json)
Hash identifier: azzpoDXrOyAlc4u4juUL4ogt624SkO5flwV4P2Ean1M=
Subject key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B783529CBEE457CA45D2D5CCE18B0B5B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.200.86.0/23
IP: 194.0.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:29:cb:ee:45:7c:a4:5d:2d:5c:ce:18:b0:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:f2:60:7a:6a:02:dc:12:b7:89:c7:30:e3:
57:d0:5a:de:02:e0:af:d7:77:45:27:6c:a7:05:80:
73:20:fd:d8:86:d2:fe:87:f7:e8:1c:a5:9f:22:89:
55:7e:04:2e:f4:e4:9b:1a:68:6f:1e:03:c3:79:54:
87:b7:ec:b1:94:65:0d:63:83:59:07:51:38:52:e2:
a2:bd:d5:8f:f8:d6:0b:ef:b1:bb:7b:80:56:c0:97:
a8:71:d4:55:b7:21:0a:25:2c:3a:ce:31:51:0b:51:
b0:5a:b5:a3:4c:6b:f7:a2:b1:b8:e9:f8:d0:d8:80:
26:a1:9c:55:9a:dd:e9:bf:58:da:12:34:44:63:f9:
e1:90:9b:47:61:28:96:e4:7f:7c:95:8e:fe:66:2f:
26:c5:6f:b2:67:13:20:2b:df:a0:5b:29:d6:88:f4:
f1:cf:d8:2c:cf:4b:7e:68:8c:63:4c:a2:27:09:02:
7f:51:bd:f1:fd:77:4f:32:83:af:46:5b:84:4c:51:
6a:a5:d3:27:45:9a:7e:87:96:5d:ef:e4:92:b1:27:
7b:99:39:c1:bb:31:f8:ea:54:4f:14:65:24:c9:68:
41:e8:fd:c6:4f:a3:bf:c8:22:d8:fd:1c:d5:fd:3c:
df:06:44:e5:fa:fa:aa:cf:fa:f4:21:a4:f4:dc:68:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.86.0/23
194.0.246.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ec:bd:ab:87:32:ac:ce:4d:ac:3a:c3:03:4b:6c:fc:11:3e:
a4:c7:7b:e4:2e:d1:d8:f4:d0:28:a2:fe:46:81:4d:0e:5a:8b:
97:61:c4:72:1b:6c:33:9a:52:ac:85:91:ff:ec:c0:36:f2:4c:
13:92:90:1a:96:13:71:79:3e:fc:7f:dd:10:16:79:8a:4f:8e:
83:4e:83:54:f3:a0:d4:fd:73:17:6c:20:08:89:f8:5f:9f:9c:
32:17:b8:63:fa:b6:66:fd:af:85:29:d8:a7:34:64:b7:1e:ea:
50:13:c6:75:69:7a:12:8c:2c:75:89:5a:c6:56:a7:4c:a9:d3:
91:9d:e9:c4:85:32:3b:85:a1:d2:25:24:a3:5f:70:97:85:ff:
96:16:9b:2a:41:0c:c7:d8:44:90:1b:05:86:ed:69:35:fb:be:
ce:7d:9e:20:79:39:cd:fa:44:39:e6:57:79:01:50:d0:a6:29:
88:18:a1:2b:31:d6:43:f0:40:59:e4:dd:14:e1:0c:1a:90:1e:
85:c8:71:35:f3:80:3c:30:8e:26:9b:b7:8d:e5:53:df:a1:ed:
40:95:51:47:84:4f:7d:46:4f:50:af:ee:43:cb:5f:97:38:d9:
65:54:01:3d:2a:98:8b:06:ed:6f:9c:ad:32:04:52:51:51:e9:
ce:35:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:15 2026 by rpki-client