Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
File: u3HLFRNewAaxNjWzaqWjBEa1IxA.cer (raw, json)
Hash identifier: cwB6rNungr7J3RlOhx/19ZqQFK0QHBCSfOZne1q99Fc=
Subject key identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE662ACD133ADB228D7D80795E5898F68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 08:49:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200130
AS: 211066
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:62:ac:d1:33:ad:b2:28:d7:d8:07:95:e5:89:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 08:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb71cb15135ec006b13635b36aa5a30446b52310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:ad:ee:90:ac:44:6b:31:de:07:34:55:ab:
f4:dc:de:1d:32:ed:12:2a:71:e6:b8:17:e7:9e:2b:
74:f6:c2:b9:60:32:34:53:f1:be:4b:2a:24:f1:a1:
10:77:69:84:7c:b1:f5:c0:38:64:01:a9:67:8f:dc:
64:43:52:33:d5:ea:3e:fa:17:21:75:97:23:16:18:
e3:96:11:6f:c3:5c:62:de:a7:06:36:40:3d:f0:4e:
ec:55:5c:bb:a4:34:54:7c:27:22:62:bd:78:fa:a4:
68:18:4d:02:c9:43:76:62:4f:56:eb:27:5b:4f:59:
69:1f:13:1f:7d:02:71:fd:4b:a3:03:09:8f:ad:bf:
11:68:c0:db:64:c9:1c:26:be:70:b8:28:9b:dd:e7:
df:76:de:c7:da:72:23:83:c3:03:7c:42:2e:28:61:
65:dd:6c:9c:c1:ac:ee:37:40:5d:28:a7:c4:6b:f5:
de:58:82:e8:c2:45:d1:f0:8d:4c:cc:f5:bf:49:fa:
b1:7f:eb:23:59:bb:86:2d:2d:6a:5c:0d:c4:d3:b8:
8e:fd:73:18:82:f6:9a:fe:8f:22:8d:16:ce:c1:2e:
05:57:79:af:69:47:7b:24:82:af:b1:30:ef:6c:83:
f2:b9:06:4e:62:93:a5:b6:ac:76:f9:e2:42:41:68:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200130
211066
Signature Algorithm: sha256WithRSAEncryption
25:5a:69:bb:3b:d8:2d:2e:f8:5b:a6:f7:f5:61:5f:9f:82:32:
9b:b0:41:93:f6:f4:a3:2e:f5:fc:23:85:0a:0b:68:fc:aa:90:
8c:c8:b4:7a:ea:c5:13:f4:d5:df:c5:12:b4:24:46:e8:44:94:
a5:c5:5e:0e:83:c4:47:88:c2:45:e6:6b:44:8c:20:17:64:06:
fd:e1:d5:b5:d1:55:2c:81:aa:c1:17:e7:fa:98:53:4b:de:dd:
10:80:98:a3:e7:70:10:6c:dd:4e:f8:f7:c3:b4:e7:cc:8e:c5:
07:7d:7d:22:62:8d:29:93:a5:9f:74:fc:fa:00:18:0e:0d:32:
e6:ac:22:25:a5:e6:c2:1b:87:f6:b4:7b:f8:e4:a3:20:4f:54:
12:37:c6:45:1e:ed:f5:b9:02:06:11:d3:57:fb:6a:d8:7f:60:
c0:01:c8:03:4a:a3:3f:1d:ff:25:a9:9b:ba:19:d5:8f:68:78:
7f:5c:10:d7:34:b4:0f:27:c5:11:8c:ae:57:5d:64:ff:3d:0a:
02:38:84:97:ff:15:d2:a9:e5:7f:5c:49:cd:fa:b9:17:dd:2b:
c0:ac:bb:fe:d5:51:45:a0:c3:32:c5:4d:f4:ab:64:8e:2a:48:
95:23:23:a6:eb:e6:82:33:51:d1:77:e4:86:fd:20:c4:cb:f8:
31:dd:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:58 2026 by rpki-client