Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
File: bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer (raw, json)
Hash identifier: 3M3UnKCiF2UfGzngm3MNZj+ELW79pGG+E61qLbzbZ+o=
Subject key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A023D1B32E341E2B24E72DA3CF9CD3B961
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Aug 2026 10:15:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16140
AS: 61236
AS: 197133
IP: 91.197.136.0/22
IP: 91.238.72.0/23
IP: 178.248.208.0/21
IP: 178.251.248.0/21
IP: 185.14.104.0/22
IP: 185.32.100.0/22
IP: 185.114.128.0/22
IP: 193.202.121.0/24
IP: 194.69.194.0/23
IP: 194.143.132.0/23
IP: 217.114.200.0/21
IP: 2a02:1740::/32
IP: 2a03:acc0::/32
IP: 2a03:d280::/32
IP: 2a06:6e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:d1:b3:2e:34:1e:2b:24:e7:2d:a3:cf:9c:d3:b9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 10:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:60:68:5f:17:e2:e7:96:54:bd:d7:a6:9d:
a8:19:70:60:dc:70:4c:6a:c6:c2:86:0a:f6:30:bf:
c1:56:0e:2a:a3:bf:bf:7b:c5:15:2d:be:97:70:bf:
16:b4:fa:24:b4:8e:4f:6b:80:71:ff:fc:cd:4f:44:
67:c0:92:35:a8:b3:be:f8:67:18:45:3f:93:e5:23:
9a:74:47:11:00:0f:93:f5:2a:12:09:51:e7:fe:97:
8d:a6:91:f5:2c:e3:a3:bc:03:54:c1:ae:f1:60:e2:
4b:8c:79:37:3e:38:be:a4:d0:3a:b3:fc:ac:a4:4e:
8b:b3:c0:02:ef:41:58:29:48:a5:cf:95:8b:c9:54:
3e:d0:6a:18:05:75:f5:e5:22:52:a1:c5:dd:c5:8d:
1e:25:8c:b2:48:2d:68:33:a8:21:71:66:05:db:78:
43:b3:f9:8a:56:31:5e:69:52:1e:4f:fc:08:54:50:
fe:4d:d3:0d:17:e1:0f:a6:0b:87:5e:1d:f3:34:76:
b7:ca:b4:3f:bd:f8:0f:1e:20:bc:e7:6e:ec:a6:7c:
dc:28:af:7f:1b:70:30:88:3a:8d:62:f9:80:8a:f7:
4c:c9:32:93:69:a3:3d:a4:31:82:03:fb:81:a6:f2:
69:ec:46:f6:7d:a1:53:4c:8d:e3:61:d2:48:c4:6f:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.136.0/22
91.238.72.0/23
178.248.208.0/21
178.251.248.0/21
185.14.104.0/22
185.32.100.0/22
185.114.128.0/22
193.202.121.0/24
194.69.194.0/23
194.143.132.0/23
217.114.200.0/21
IPv6:
2a02:1740::/32
2a03:acc0::/32
2a03:d280::/32
2a06:6e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16140
61236
197133
Signature Algorithm: sha256WithRSAEncryption
7f:33:7f:54:e3:e0:3f:c8:ac:e1:dd:76:a2:ca:dd:76:05:43:
fa:f1:cb:8c:94:fd:05:2b:8a:72:5b:44:5e:d0:01:c6:e2:a6:
70:0e:23:f6:05:21:12:7b:2c:ba:a2:5f:74:c5:20:65:2b:f7:
d1:f2:63:cb:f4:82:06:d3:37:cb:cf:be:e5:18:42:d7:c6:cf:
ae:9e:fb:28:3a:0b:7c:10:4e:1d:6f:cd:9c:c8:0e:01:8c:0c:
d7:82:06:00:15:44:e0:62:22:a2:a1:10:45:85:84:c2:0e:08:
eb:db:43:b5:8e:7e:bf:d3:97:e7:f5:45:44:e2:c2:a7:1e:88:
6b:ab:3e:5f:03:62:72:06:83:1e:b3:9b:7b:3d:e9:1b:e4:fb:
f1:32:37:3e:4f:97:8b:bb:c1:56:d0:e0:cf:4b:3f:28:c7:40:
b9:42:1c:82:18:2c:1d:5c:19:9b:3f:76:76:4d:fb:08:8b:0f:
df:ef:fa:07:cb:91:3f:ca:1b:8a:7d:3a:cf:0d:19:63:f1:59:
11:c1:7f:7f:02:67:ea:a2:3b:f6:43:d1:ac:79:b1:c7:18:77:
2b:b2:4d:0c:d9:5d:47:f8:43:a6:09:91:9c:ff:6d:18:27:61:
37:14:bd:5a:51:14:8d:b6:16:5d:98:2d:d9:c4:8a:ca:53:ec:
d4:ba:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:14 2026 by rpki-client