Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
File: 3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer (raw, json)
Hash identifier: JhtiBI61dRCAZK9UmiRLv5/dYFb8YFHmRA5WMsoGqaw=
Subject key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A3ADDF62DF14AB06B51C8F9A82124E508
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
caRepository: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 31 Oct 2025 15:23:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60900
AS: 199177
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:dd:f6:2d:f1:4a:b0:6b:51:c8:f9:a8:21:24:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 15:23:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:42:4d:6f:d8:09:86:04:41:22:6d:c3:4a:
7d:31:d0:aa:02:6d:a2:08:7c:7e:3f:81:47:70:87:
d2:9c:66:b8:67:02:ab:07:9d:10:cb:e8:8a:85:b9:
47:87:d2:6e:9d:7c:46:a0:0f:af:c2:5e:59:85:00:
45:49:15:4c:34:75:7d:48:62:97:3f:5c:ff:b0:1c:
21:18:02:70:12:31:e6:b7:da:6c:22:68:09:54:c2:
8e:91:04:c0:fe:17:07:ef:cd:20:71:ee:22:ad:0c:
6a:7e:0d:d0:b5:77:a4:e4:b6:90:14:4c:d2:36:00:
84:9f:fb:24:f9:98:39:95:3a:f7:0a:5d:a3:7c:56:
e7:b3:d7:18:12:df:0d:c2:97:d4:c2:d5:2a:b3:0a:
ab:64:ce:da:17:3b:91:62:de:97:ba:f2:95:ee:40:
22:58:9b:2e:18:7f:84:0b:c7:a4:4e:69:b8:29:64:
b4:ca:75:70:57:f9:21:d4:ba:27:39:9e:8f:e0:4b:
18:76:65:cb:98:c0:45:7f:0d:e4:a7:34:7e:8e:67:
82:24:9d:a0:3c:df:46:4f:68:b1:72:cd:c6:3b:5b:
1a:f0:a4:65:a2:43:7c:cd:54:be:7d:22:f0:76:26:
10:35:91:1e:b6:f6:b1:2d:07:25:34:31:30:93:ba:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60900
199177
Signature Algorithm: sha256WithRSAEncryption
3b:f1:a3:cc:a1:14:16:90:af:57:f0:4e:b6:4d:38:c7:18:ef:
08:12:f5:a1:57:2d:4f:ba:ee:f3:92:e9:ae:8f:a6:77:34:fb:
ef:69:65:ec:2f:54:c9:84:40:fa:0c:99:a5:ce:d5:5e:7b:5a:
9f:cd:66:41:b9:44:30:3c:8f:89:5f:b6:be:53:6c:50:83:46:
99:c7:91:d4:b3:ac:42:cd:7a:38:3f:0d:aa:48:ae:73:42:af:
f7:c6:4f:a1:d8:83:10:26:5f:03:ee:02:7e:91:bd:46:84:0f:
29:ed:0d:d9:e1:0d:1f:78:ed:e0:e7:e2:b6:9d:d7:aa:f2:8c:
9d:96:6f:76:bf:bc:23:9e:ef:99:af:b9:af:9f:06:cb:92:88:
cc:ca:be:ce:e0:c7:0b:22:7d:ad:f3:74:ed:bb:ce:c7:a8:d6:
3b:a6:6c:c3:30:65:df:31:82:e6:1b:a1:e6:2b:ca:3e:b5:6f:
c1:15:97:f9:d0:9e:67:a0:60:fd:47:b2:59:15:2c:cb:c4:42:
69:93:83:88:a8:5d:b4:01:68:d2:a5:f7:23:3b:1f:f4:d3:80:
c3:00:bd:07:78:21:96:3e:0c:a5:90:41:9d:70:19:3b:37:10:
31:7f:5c:03:a5:e0:d0:7b:67:fd:86:8a:fc:08:d5:4c:31:a1:
73:3a:e2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:17 2025 by rpki-client