Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.cer (raw, json)
Hash identifier: KPlOs8N2fTvq2OucoRlBCA0VQMwcrRVJlKwv44qBUIw=
Subject key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D719238667E1ED2DB69478A06AD8739B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Apr 2026 09:28:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211040
IP: 195.190.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:92:38:66:7e:1e:d2:db:69:47:8a:06:ad:87:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 09:28:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:85:65:c8:ec:69:24:f9:d6:03:3e:8e:b7:
f6:e0:b5:b2:35:83:77:0f:fe:a8:fb:cc:7c:4b:5e:
88:76:c9:95:ad:41:c4:d2:5b:77:0d:8b:9f:62:b2:
84:32:08:46:8c:f3:ac:7a:2d:6d:62:38:b1:3d:c5:
85:7f:f0:ca:17:44:a3:0a:04:c6:99:aa:1b:40:11:
e8:b6:4c:6e:30:41:f9:a2:e5:26:b1:93:29:ed:70:
02:5a:f8:4a:25:6d:cb:9c:e8:46:60:46:51:ed:6b:
33:8c:ff:6b:46:a9:e6:3e:7e:15:00:49:dd:9a:63:
0a:38:3e:71:e1:2c:9a:3d:55:62:10:2c:54:ab:de:
1e:02:04:54:b4:1d:e9:7f:90:a4:7f:e6:3c:9f:34:
6b:24:35:10:b7:5d:ab:33:3e:02:f5:69:6a:2b:d5:
c3:5c:bd:fe:f6:6b:41:7c:bd:95:ed:37:55:b0:ed:
35:33:d3:3e:39:28:69:12:18:92:41:a1:b5:5c:d6:
f3:f8:37:14:88:5c:ea:73:c1:83:75:98:3d:d0:e1:
76:c2:f4:3a:54:cf:84:62:00:56:23:c4:a1:21:38:
fc:9c:1c:29:cd:77:08:2f:20:dc:2f:e3:4f:c2:e7:
ef:2e:b3:1d:94:82:71:ee:5f:6d:9c:55:07:2b:0e:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211040
Signature Algorithm: sha256WithRSAEncryption
45:63:95:3d:43:6e:20:90:fa:c5:da:ed:99:c6:49:de:ed:61:
ed:db:ab:19:97:3b:70:fd:e4:79:a7:69:09:1f:d9:3f:ed:83:
e6:5c:84:40:40:46:9a:7e:76:8f:3b:e3:5c:ee:73:28:dd:c0:
88:2c:45:00:0b:7b:e4:69:3a:e3:3b:4b:49:33:ba:01:c8:15:
ad:6f:84:9b:9b:e4:70:9a:53:2d:bc:6e:23:40:2e:d4:50:44:
c4:89:41:72:26:9d:bf:10:e9:68:d5:b6:b0:e2:bd:ce:91:5b:
79:67:d6:f4:d0:d0:92:3b:99:15:b8:30:1b:8e:2e:78:24:e4:
bf:a7:d4:60:3a:66:7b:0f:c6:44:b4:2b:4a:ae:5a:87:99:b6:
cd:2b:a4:05:c9:f3:e5:ba:3d:b3:d8:65:c3:b7:66:69:fc:44:
ff:bf:95:44:bf:01:ef:7e:f2:5a:d1:3f:1b:0c:d2:90:81:53:
18:5d:c8:2b:04:bc:fa:b7:b7:d4:ac:ea:02:ba:6a:7e:1e:05:
94:93:aa:65:75:59:e5:56:52:48:de:f8:b5:38:bb:2c:a7:3b:
e2:a2:f2:30:ee:0b:a5:a2:a0:c8:ec:d0:14:c2:7e:ad:6d:03:
c5:12:6f:ac:8b:82:2c:f8:71:8c:da:d4:68:24:dd:ac:a4:97:
ab:f3:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:18 2026 by rpki-client