Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.cer (raw, json)
Hash identifier: gx5J8VcDfMWZsmmZjjKfgIHV2enBEjj1SVIUZtGkgRo=
Subject key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED2F113F1E159A04B028B19920817B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50330
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:2f:11:3f:1e:15:9a:04:b0:28:b1:99:20:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:52:e8:03:08:de:b1:28:2f:28:d5:45:2e:
26:37:a3:36:1a:05:9e:e4:22:eb:5f:33:32:04:9a:
d1:26:aa:fd:47:c0:48:dc:c2:4f:18:61:9d:2a:70:
c5:16:62:af:bc:f1:91:7c:2d:4a:03:b4:fc:00:3a:
dc:92:a6:68:c3:04:29:46:d5:ca:d2:87:01:21:dc:
9b:e4:41:34:cf:c9:b4:c1:45:3c:3e:88:6a:3d:0f:
cb:83:8d:7e:8a:c2:66:8e:ce:f3:61:d3:dc:27:a5:
01:44:47:e0:a5:57:73:b7:35:4d:fb:bd:cb:33:60:
07:64:f7:7e:7e:13:b1:ae:18:1f:bb:f4:aa:a1:52:
2c:1f:9b:cf:dc:f9:59:69:ec:f3:f9:db:1e:d5:cc:
2a:d1:e4:c5:e0:31:10:41:21:74:e6:5c:03:3c:bd:
15:c7:40:5f:51:0b:03:4f:63:70:f0:ca:93:06:49:
da:f8:c5:2c:c8:0e:b9:9b:f6:4a:04:be:79:89:43:
b6:33:46:7e:11:be:1c:dc:27:e5:50:3b:77:7f:72:
50:78:62:b0:f2:db:cd:70:ce:36:76:9d:6a:01:b6:
04:24:be:1a:92:fa:71:80:62:9f:86:3e:98:2c:16:
27:9d:c1:3d:74:72:f0:aa:29:0d:69:53:a9:28:43:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50330
Signature Algorithm: sha256WithRSAEncryption
4e:e6:c3:2b:4e:12:f1:40:5e:ef:14:50:a8:df:52:62:c4:59:
18:f4:32:09:71:71:9a:71:b9:27:d2:f6:31:a4:41:bc:bb:48:
96:98:3d:ff:83:60:bc:38:83:a2:eb:ce:a1:aa:26:e9:4f:3f:
8d:4e:f3:04:9d:d1:42:ef:5a:71:04:26:6a:00:af:5b:6a:80:
76:d0:16:d5:02:e1:15:6c:9f:c7:38:19:0f:78:38:5e:e6:fa:
f4:d9:0c:14:fb:13:ed:b9:3e:c7:99:c9:fa:4f:ff:e7:0b:1d:
e3:fa:06:02:3c:a2:18:bf:c8:e0:e3:78:34:86:16:e5:11:18:
41:90:fc:58:d7:98:f2:5f:91:04:a4:95:47:56:9b:6f:27:06:
db:91:76:2f:4e:63:95:a9:1c:09:04:b6:28:e9:1e:7f:af:36:
c5:58:88:b3:68:62:d2:42:de:36:39:38:86:60:c9:30:72:46:
09:13:b6:cf:99:7f:8e:63:10:08:c5:9a:b0:09:31:6e:6d:a7:
8c:34:a9:21:21:7b:a5:d8:5e:06:e0:26:1b:40:83:aa:f2:28:
b5:69:13:28:95:b5:f7:9b:73:d0:bd:59:10:a3:83:48:69:ba:
f9:b5:c0:59:b6:74:e6:69:e0:c3:44:09:49:6f:54:68:0f:c1:
2f:ba:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:34 2026 by rpki-client