Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
File: PzTUjYQaUqQifUn6PvhbpavyIkg.cer (raw, json)
Hash identifier: 9J5svi57HZ5lrtdqAHrSc0vl050oeT5i8KqZI2j90bM=
Subject key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B791029389F8C080AEDACD03ACD9E8232
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207318
IP: 185.139.6.0/24
IP: 2a11:d580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:29:38:9f:8c:08:0a:ed:ac:d0:3a:cd:9e:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:ca:e6:da:a5:bf:81:09:a0:68:a5:17:44:
56:b9:27:2c:33:6a:ea:bc:c7:43:c6:5c:b3:e5:63:
2f:9f:9b:1f:99:a2:b3:21:51:7a:61:93:3f:6b:22:
b1:fa:40:99:d2:c8:4f:77:82:87:ba:46:3a:b7:9b:
c9:61:0c:da:74:01:d4:3d:b7:91:2c:0e:1e:69:64:
b2:b9:d5:8d:47:c4:0e:21:2b:19:d1:9c:e0:83:27:
93:d1:c9:b9:38:2c:e0:f2:55:33:7c:a7:48:8f:10:
c2:3e:2f:3d:a6:36:a5:92:ba:fb:08:53:1e:2b:0c:
d7:38:0b:85:23:85:b7:73:f5:14:dc:60:92:78:7e:
41:6d:20:e6:81:07:db:bb:5f:55:8b:71:e4:31:46:
24:ce:5f:74:c5:e3:42:68:ca:bd:fc:51:66:1a:1c:
86:c0:fa:9d:c9:07:ed:82:7e:6d:bc:7a:a7:e3:b2:
7e:a5:5a:c9:5d:82:10:54:66:db:ad:59:a6:46:ed:
2c:bb:dd:7a:e7:b5:75:60:35:a9:a8:fb:29:1b:e5:
e6:53:82:c2:5d:d4:94:95:f5:4f:e5:77:c7:00:d5:
cc:11:5c:f6:05:df:28:fc:62:97:c2:30:a0:fa:33:
73:ca:f0:26:f7:56:bc:73:19:01:a9:b8:11:4c:db:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.6.0/24
IPv6:
2a11:d580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207318
Signature Algorithm: sha256WithRSAEncryption
79:7f:a1:35:46:e4:61:be:87:df:b2:5a:eb:c8:a5:57:c8:f2:
70:b7:58:41:c4:76:d7:51:7a:d5:49:8b:a8:95:f0:59:d7:e9:
01:55:2e:1e:6c:11:9c:25:c2:61:20:40:e4:a4:a0:2f:7f:0c:
d6:a4:36:4f:8c:98:9f:0d:37:3c:97:e9:3f:f4:ea:f6:15:f8:
00:5a:81:51:a8:fc:68:a7:74:5b:e9:de:dc:41:18:56:73:d5:
43:f1:20:cc:cd:55:16:6e:c8:19:bb:73:47:19:01:e9:8e:05:
56:8e:15:d8:d3:2d:22:90:1d:ee:d7:e9:78:a9:f3:cf:1a:32:
09:0b:b6:ad:8c:86:74:39:d5:32:53:36:88:2c:85:f8:17:c3:
bd:24:97:5e:e9:e7:65:f2:68:2e:98:f3:ac:98:09:da:8b:05:
89:48:55:3f:fb:90:b1:16:7d:7c:59:27:0a:b6:26:e6:63:9a:
cc:23:f8:17:34:3c:14:88:c3:4b:c4:0a:12:80:fa:3b:02:46:
bc:93:03:7a:da:2d:c6:ad:2c:08:23:dc:97:3b:b2:72:da:07:
21:ae:54:90:59:35:dd:e1:4d:6b:73:8a:db:1f:5d:f0:36:6b:
41:8f:07:d6:f2:c7:ff:91:7a:91:ac:fa:91:f4:21:8b:a1:c6:
c0:d3:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:19 2026 by rpki-client