Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3yRVzx9FFcmFdIT5MGZikDc25I.cer
File: b3yRVzx9FFcmFdIT5MGZikDc25I.cer (raw, json)
Hash identifier: 5F8B8ZB9PwKmpdGJNGrenvWfoTmI+kUEKaPqSj6fOmQ=
Subject key identifier: 6F:7C:91:57:3C:7D:14:57:26:15:D2:13:E4:C1:99:8A:40:DC:DB:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D003B2D821237E005F5908BB53087FA6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Mar 2026 09:16:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202066
IP: 185.62.228.0/24
IP: 2a13:b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:3b:2d:82:12:37:e0:05:f5:90:8b:b5:30:87:fa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 09:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f7c91573c7d14572615d213e4c1998a40dcdb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:dd:cb:4d:9c:b7:b5:0e:b9:83:0b:24:fa:
7a:21:c3:92:90:3d:e1:9f:8b:53:5c:df:93:91:b3:
11:53:07:2b:7c:c8:a6:72:36:68:7a:35:ef:08:e6:
fd:d7:3f:12:3a:85:09:86:05:b0:68:ad:01:a9:cf:
73:24:90:69:32:a2:e8:23:cb:0d:d9:23:98:4a:82:
55:86:2f:a9:fe:df:76:cb:e0:20:dd:c9:cd:a8:54:
e6:18:6e:3f:e1:86:25:b6:37:0d:a2:cb:b2:2e:cf:
32:df:66:98:21:99:fc:6e:fd:15:a2:34:8f:5e:ee:
a6:3a:fe:c5:04:85:81:72:75:3d:4f:f6:2c:7a:2e:
cc:ee:72:64:8b:15:14:49:29:97:65:7b:6b:72:a9:
60:d4:23:af:a1:8b:9f:77:22:72:ac:48:a3:56:c7:
f8:eb:d5:81:a9:fc:a3:ac:9f:9c:83:6a:4f:57:6c:
75:3a:a3:6a:eb:ab:c7:e4:86:13:a5:6c:f3:1c:51:
83:26:22:98:bf:e6:59:2d:b3:5e:02:e3:76:e1:69:
b8:af:31:49:b0:2d:c7:56:46:f2:ee:7a:0d:a1:99:
6c:0a:f7:93:f7:0f:3f:f8:4b:ab:dd:df:11:b6:fa:
80:77:a1:69:8c:3d:a2:73:71:17:ee:59:4f:a6:61:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:91:57:3C:7D:14:57:26:15:D2:13:E4:C1:99:8A:40:DC:DB:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.228.0/24
IPv6:
2a13:b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202066
Signature Algorithm: sha256WithRSAEncryption
9d:52:b7:b8:68:b1:79:e8:c0:dd:c9:53:1b:7b:95:1d:85:7b:
bc:dd:c2:4e:ff:50:f9:65:96:5c:8f:11:5c:5f:18:94:06:8b:
9f:b9:88:ce:94:b8:fc:8c:9c:a5:c4:1b:05:1b:cf:6b:a2:7a:
a8:fb:6d:ba:76:0f:f4:42:e4:19:a0:f1:d3:1a:11:c0:9a:d4:
c2:0d:b1:46:c3:6d:7f:a4:e3:b1:55:d4:1b:ad:dc:cd:8b:ec:
e5:99:0d:f6:3c:0b:21:06:9e:30:ac:74:fa:37:06:4d:79:6f:
85:a1:1b:16:7d:47:f3:89:07:c7:85:20:d3:80:70:39:f4:f7:
a7:7d:45:31:19:1c:c3:d2:2d:87:ac:82:aa:e0:e3:80:78:72:
3d:6f:76:33:57:6f:e8:1d:52:74:19:51:2c:8c:32:3d:c0:93:
01:f8:b2:41:6d:ae:60:87:54:e6:84:9b:20:24:b1:6f:7f:3f:
6c:3f:01:42:b8:82:4a:eb:7d:7e:85:e2:40:61:01:55:90:8f:
a2:30:47:d9:e5:39:f6:7a:c9:4e:9d:5e:87:d0:f9:7d:cf:7c:
10:5a:57:c2:1f:ab:58:b9:ff:94:8e:5f:6e:55:ea:8b:6e:d2:
cb:03:37:21:9c:29:e4:e9:90:88:83:d8:5c:fd:ae:31:f9:27:
a7:24:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:44 2026 by rpki-client