Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
File: 33WbWvPabJ3wM7DemYlwpOeWVdA.cer (raw, json)
Hash identifier: bwIb5Yapx8YpW72MJX7Z++qMgemvnqB+58DPyg9xCkQ=
Subject key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A09FC4F06404033B4215CF1F104325D34F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/fe3737fb-095d-444c-92f4-3f7221fb544c/notification.xml
Certificate not before: Mon 14 Sep 2026 11:54:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214101
IP: 51.0.0.0/19
IP: 51.0.128.0/17
IP: 51.72.0.0 -- 51.74.255.255
IP: 51.172.0.0/15
IP: 51.224.0.0/15
IP: 83.118.240.0/20
IP: 193.202.192.0/19
IP: 2001:3fc0::/29
IP: 2a0e:9780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:c4:f0:64:04:03:3b:42:15:cf:1f:10:43:25:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 11:54:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:eb:6a:a8:ec:c8:73:ff:40:53:10:66:a7:
3e:38:85:46:41:99:33:30:91:26:41:11:f6:38:f6:
54:ca:90:9d:5f:e3:9b:0c:5a:17:98:94:65:ba:4f:
e2:1b:a8:68:94:59:ae:60:af:f0:80:ba:d5:ed:4c:
b5:a9:a6:e8:8f:4a:c1:1a:0f:bd:c5:f6:d2:7c:c5:
c6:bb:96:78:4c:a9:da:da:68:1b:92:31:6a:cc:2a:
b5:21:27:30:ac:4b:0a:05:d0:e9:43:99:b5:c7:4a:
a5:3c:aa:74:16:f5:1f:d2:3d:13:72:fa:9f:35:74:
fa:16:92:ee:c5:76:88:09:f2:da:7e:17:24:69:bf:
75:9f:ee:09:ce:e6:43:9f:ae:ac:5e:98:7b:0e:64:
f2:a1:50:2e:bd:75:f1:3f:5d:e9:36:a3:f8:5a:69:
90:f4:8f:ec:09:49:d5:06:4d:b9:ef:a8:18:11:b3:
18:37:7a:73:a6:fe:36:3d:af:69:2b:0a:9b:b7:76:
b3:bd:d6:e2:b7:ac:4c:45:19:b1:1d:2f:b6:e1:6f:
41:07:1b:86:01:75:64:2b:ff:e2:2d:df:b7:ed:72:
3b:a5:7a:d1:23:1c:02:d7:05:fe:b8:c2:dc:2d:0d:
8e:16:37:b5:5e:d7:63:d2:a6:21:96:e8:6a:e3:eb:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/fe3737fb-095d-444c-92f4-3f7221fb544c/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/19
51.0.128.0/17
51.72.0.0-51.74.255.255
51.172.0.0/15
51.224.0.0/15
83.118.240.0/20
193.202.192.0/19
IPv6:
2001:3fc0::/29
2a0e:9780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214101
Signature Algorithm: sha256WithRSAEncryption
41:7d:bb:57:99:a3:34:69:6d:f5:a9:64:c3:f4:7b:3b:e4:f3:
d7:4c:14:6e:f5:dc:0d:81:9a:06:31:d1:6a:97:fc:e7:44:08:
b2:2b:24:0c:29:c0:54:78:d8:05:8e:7f:5c:ba:f7:2d:0b:16:
09:30:c1:43:18:f1:29:e8:9d:1d:7d:32:69:58:c6:05:c8:ae:
45:a7:6b:ce:59:fa:af:da:9a:0c:09:31:3b:0a:0d:24:0f:63:
60:6a:28:67:25:41:c1:d5:fb:54:16:b3:5c:f1:f7:2b:27:a0:
fc:fb:e5:36:0d:e1:e7:5d:03:d7:e2:85:dc:00:ea:5a:a6:43:
c0:ad:bb:8c:78:96:d5:08:04:9b:db:53:61:f6:7b:5f:63:a7:
48:f0:2a:83:a5:42:6d:e4:6f:49:d4:8c:f8:61:5d:a5:d9:29:
a9:6b:e2:6c:0a:54:d7:1c:37:64:e5:d1:bd:ce:40:e9:01:71:
fd:83:e2:5d:83:bc:8b:0c:41:0f:60:11:dc:55:f4:ca:df:4f:
e7:9d:fb:ee:e6:86:02:99:ee:dd:f6:93:cc:fc:b8:a2:de:56:
e6:b0:34:14:1e:09:78:5e:e6:e5:8c:f1:7a:82:9b:b2:b4:01:
ff:66:cb:3b:40:ba:10:aa:7d:3d:8a:91:f9:74:0d:a6:01:df:
87:11:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:46:13 2026 by rpki-client