Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer (raw, json)
Hash identifier: 1ufRMWcQ3IlRFsdgVqAvrtmq+gbMSmQBdW1re377WF4=
Subject key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8CCD7EA2706CF93F3427ABEC7B8B056F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 09:25:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 64446
AS: 207197
IP: 185.155.192.0/22
IP: 194.93.8.0/22
IP: 2a07:9580::/29
IP: 2a09:1f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:cd:7e:a2:70:6c:f9:3f:34:27:ab:ec:7b:8b:05:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 09:25:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:c1:99:92:1b:b9:74:b3:67:1f:95:aa:ad:
42:72:bf:21:4a:74:21:7f:a2:fb:2a:a5:f5:96:62:
f8:a7:f2:8e:54:6c:ab:2a:c1:2c:ae:ce:e1:c8:2e:
2f:57:2e:74:1e:62:bb:dd:9f:47:f1:87:59:f5:6a:
8c:56:52:b7:61:ee:7b:6a:5b:0f:bd:83:e2:ba:93:
9c:4e:3a:a9:cc:33:81:87:a1:34:08:ce:2f:78:4f:
4d:4b:07:c0:fe:e8:a6:a0:1b:5e:4e:e5:da:18:cf:
48:65:8d:c6:4d:75:85:3c:5b:d2:40:6a:a7:ea:c6:
22:d5:01:48:68:36:0a:5a:61:6a:25:c2:bc:25:95:
0a:6e:2b:20:a9:c3:4f:a2:e0:85:9e:4c:c6:66:1c:
47:17:ca:0b:b9:00:a4:b0:78:24:e5:42:52:a3:72:
4e:f4:52:a9:93:7c:95:09:1c:01:86:65:7d:54:c6:
19:06:d3:63:7e:84:59:42:f8:7d:81:ef:ba:e3:b0:
6d:b4:d4:8d:56:69:ce:f5:44:a5:43:dc:01:05:86:
2b:17:e0:11:51:1f:fc:18:89:74:3e:a8:6f:47:7c:
7f:da:1e:0e:b0:e2:2a:39:57:3d:c6:26:01:c3:45:
f1:2f:7f:ca:9c:ad:92:ef:85:50:e9:c1:f9:38:41:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.192.0/22
194.93.8.0/22
IPv6:
2a07:9580::/29
2a09:1f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64446
207197
Signature Algorithm: sha256WithRSAEncryption
46:75:54:7f:31:4b:bd:6e:61:f4:56:b5:aa:2b:b7:04:37:e1:
cf:2d:a2:7d:8b:2b:67:04:a6:06:0b:3b:0f:78:59:f2:7a:76:
94:74:6e:76:d4:ec:a1:2a:68:79:f4:c8:82:18:44:ec:0c:6f:
f1:b1:7b:95:22:fd:e4:e3:c3:1c:a6:a8:1f:4a:ee:dd:da:52:
46:b5:f8:09:cc:d3:fc:bc:6e:85:d2:57:25:bc:6a:a1:12:31:
68:0c:27:ec:d5:1b:25:e9:2d:e6:6d:4f:c8:bd:2b:93:a1:22:
04:ce:73:da:d7:7d:dd:a5:a6:db:bd:af:06:f7:0c:ed:69:68:
6b:a8:c9:a5:b8:80:d3:87:61:c7:71:36:2b:5a:65:cb:81:83:
0b:5a:2f:30:a6:ac:e3:cc:6a:f7:10:63:78:be:e5:5b:ad:8a:
36:39:fb:b3:c1:e1:2b:c9:5c:5f:4e:14:35:f5:df:3c:d9:0c:
fc:cc:3f:1b:a5:e6:dd:a5:df:7f:79:ac:00:92:9a:cc:a1:02:
dc:7b:15:19:a2:1e:92:9e:cd:0f:97:34:c8:d9:56:32:0a:ad:
f2:8e:1a:ce:0b:b6:36:7a:e4:77:a2:5e:17:37:68:6b:f9:84:
dc:49:a6:09:4a:6d:aa:b1:96:8f:9b:47:51:c6:2c:bf:0d:86:
40:8c:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:51 2026 by rpki-client