Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer (raw, json)
Hash identifier: HSkEwUfWyfwUtkOaMLYgiTiR//bRnwugz4xTASghgmI=
Subject key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEDA0BA13FFD0E56664C885DD931A9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204810
IP: 185.239.56.0/22
IP: 2a0c:4b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:a0:ba:13:ff:d0:e5:66:64:c8:85:dd:93:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:7e:04:82:ce:e2:35:ba:2e:a6:1a:c7:01:
ae:d9:7a:1e:9e:dd:b9:71:55:07:de:f9:9d:b5:8d:
05:ef:ab:38:a4:95:40:e5:60:2a:93:35:c7:77:18:
f8:ed:df:49:75:18:7d:93:15:e7:38:c0:e9:9b:b2:
10:c7:56:84:c5:45:7f:1e:db:af:5d:db:49:dc:3c:
a3:f5:96:ff:b9:16:62:9a:81:6c:d0:9d:02:5b:e5:
9e:12:61:9b:bc:a9:13:8b:4b:5d:ed:59:6a:77:99:
d9:c4:47:2f:13:6a:e7:ec:ad:08:34:8c:e5:91:7f:
9a:2f:d3:fd:a2:06:f4:36:ff:ac:ab:d7:e4:65:c9:
e9:8b:6b:f2:48:16:bb:4b:e2:14:c6:62:6e:74:10:
ac:55:f1:42:52:cc:19:89:39:33:76:ab:82:a8:74:
2f:ff:bf:c7:54:c5:d4:e6:36:e0:62:83:9e:9c:03:
b2:8b:cf:83:71:02:d3:6a:76:ec:5b:26:89:a5:83:
1c:54:7d:c9:b2:86:39:d6:cd:0b:90:cf:a0:49:66:
52:c2:ed:d4:33:50:c9:70:a2:c1:78:6b:76:fb:fb:
32:6f:bf:cb:e6:98:98:8a:5a:c5:11:ca:ee:0d:fc:
86:c7:2d:cb:1d:79:b4:60:53:00:e4:a2:2e:16:42:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.56.0/22
IPv6:
2a0c:4b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204810
Signature Algorithm: sha256WithRSAEncryption
04:d1:75:a1:4f:8f:45:1a:01:e6:47:61:06:e0:7b:db:27:40:
a1:60:17:e0:d4:f6:fa:4d:3d:77:43:65:1d:80:32:87:c4:f1:
f5:1c:ab:30:54:ec:16:de:7c:94:ff:59:7f:02:d4:e7:29:a9:
18:cf:42:34:49:2f:95:1d:33:e0:c1:da:25:65:85:20:fe:b7:
9c:aa:83:67:21:d5:17:15:7a:b0:96:95:be:30:f2:6b:70:3c:
c2:7c:f1:c5:91:0c:31:1e:91:51:fe:d6:26:e9:a0:94:0b:9d:
7c:ae:1a:64:e6:37:93:a7:a6:91:12:42:70:20:c9:63:a2:54:
40:70:df:68:7d:f9:a7:f3:25:33:fd:87:e9:f9:35:ed:5c:49:
95:41:2e:f1:af:74:23:83:df:47:82:e8:77:d3:c9:cf:8b:9f:
03:f0:fc:ef:88:bb:72:e0:3c:0d:6f:07:9f:1a:57:fd:fe:2c:
d8:15:11:43:ff:99:56:8c:e9:1f:b5:41:61:14:da:c2:ac:a2:
33:76:2c:f5:f8:04:85:11:a5:69:14:ce:4e:83:d8:1d:23:87:
a8:29:86:75:7a:c6:2a:dc:8a:47:cc:15:e8:15:0f:0e:b7:82:
08:bc:c2:fa:e3:a2:f7:3c:ce:0d:34:37:56:66:c3:08:e5:ce:
48:79:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:54 2026 by rpki-client