Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
File: rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer (raw, json)
Hash identifier: zf3qUAulb9ojR7t/eD5cZsaXQlNQoae8acdqx0gHcBM=
Subject key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D8C9A584907A94D8CE3B4738E38B08124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Apr 2026 15:26:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43320
IP: 91.197.16.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:9a:58:49:07:a9:4d:8c:e3:b4:73:8e:38:b0:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 15:26:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:34:1b:e5:2a:c8:a6:d0:b6:aa:76:5f:d5:
39:1c:f1:a4:fb:47:0a:d6:d2:47:ee:37:69:d6:ee:
82:f0:2f:13:d9:c8:47:62:4f:45:5b:2e:0f:de:a1:
26:eb:23:0b:e4:3c:9c:35:7e:c0:4e:b5:b8:e5:28:
53:c7:93:c8:b0:4f:ec:24:0b:a6:a3:6d:8a:8d:d6:
69:9b:10:c7:87:9c:bb:2c:b9:ff:c3:19:3c:1f:3c:
54:b5:c5:31:68:bf:96:52:51:29:7f:f5:a7:74:b4:
b8:4a:a3:de:b8:7f:d7:6d:08:02:67:3f:de:f0:64:
f5:06:2d:4d:fc:f3:ab:ac:4c:d8:a6:e7:46:55:93:
d0:db:6d:49:e4:bd:47:db:83:bc:66:ff:f7:26:0e:
3c:f0:1f:9a:1f:d2:ba:69:59:96:5f:b5:ae:ac:e6:
0b:3a:be:35:1d:d2:7c:e9:69:c9:cc:f8:43:b1:5b:
db:74:c1:b6:02:d5:80:bd:34:7f:fb:12:c0:d5:3f:
5c:49:b2:2c:fe:ea:1e:40:fc:05:a0:31:da:41:1f:
6f:b1:0b:8e:d6:d8:f6:e8:73:25:c9:53:1e:74:d1:
3b:bc:82:8f:1a:33:f4:40:9a:85:9b:61:df:08:7e:
c3:ed:fc:52:77:b8:d8:e9:ce:e9:25:24:e1:38:94:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.16.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43320
Signature Algorithm: sha256WithRSAEncryption
5a:ee:8f:91:52:c8:b2:52:6f:f0:60:71:46:31:bf:a4:cb:dd:
fc:1b:f7:6b:51:4c:13:fb:5b:e5:a6:52:36:5c:ff:90:e1:9e:
81:25:64:63:aa:26:ef:14:12:a4:8e:e0:6a:74:a8:13:48:96:
53:1c:08:b1:3e:17:f1:68:fa:d6:b9:da:57:2a:9f:e4:a6:ab:
f7:18:03:b9:7d:34:22:4c:9f:a0:d1:97:40:bf:d4:be:bf:9d:
45:dd:2b:89:4e:ed:a5:36:ce:63:47:e5:46:51:6d:e0:7d:45:
2c:8e:9b:b3:0f:28:22:e5:04:c6:03:e4:bb:2c:9a:af:6e:c6:
54:f6:9b:f9:41:e8:c0:a6:f7:ae:92:ee:e6:72:8e:4b:ae:7b:
bd:49:12:b8:da:2d:87:d1:51:41:98:06:49:16:10:a8:5d:51:
6f:88:3e:80:12:9c:69:61:b5:48:26:10:98:88:f6:f4:a5:85:
71:fc:d9:81:36:c6:4d:60:f8:c8:e0:e9:0b:a5:18:5b:00:db:
79:85:56:73:52:b8:4c:5b:cf:66:3c:06:82:8f:cf:ae:d5:ee:
9f:b5:77:b3:59:e1:3d:24:97:8f:05:77:50:bb:c3:11:9f:3e:
dd:17:b6:78:7b:02:5a:3a:73:c1:70:36:bb:24:b8:54:7f:8b:
ef:89:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:44:21 2026 by rpki-client