Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
File: sRI3DKJgErTR0BVM73IwvYmluV0.cer (raw, json)
Hash identifier: 0HXFen3N3v8NkgF2eeiG8l1mFxfWsCUnNMvepGncZmU=
Subject key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CA79AF5AE9F8B1E9CEB8F970D9512618E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Mar 2026 04:14:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202163
IP: 2a07:bb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:9a:f5:ae:9f:8b:1e:9c:eb:8f:97:0d:95:12:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 04:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:87:05:5a:4a:c3:2d:84:34:ae:00:27:a4:
a4:15:5c:be:e2:dd:fb:a3:bc:b8:42:bd:b4:c8:24:
fb:aa:12:40:51:f1:0a:d7:c1:b5:38:a8:b6:dd:f3:
20:84:f0:ae:86:42:3f:ad:7d:bf:cb:cc:76:05:39:
d6:d4:55:bf:68:e2:c9:1a:cf:7b:53:12:28:6d:c8:
7a:18:56:bd:52:2b:db:bf:5f:2d:e3:b4:05:16:0d:
19:4d:71:64:5f:cd:99:df:dc:b4:db:c8:10:45:48:
80:1e:e2:89:fd:b4:7c:39:4f:1d:6c:86:af:ec:d6:
be:c5:4d:69:74:35:93:5b:bf:16:66:51:3a:58:1f:
60:ab:6c:c6:30:91:ba:7d:a9:56:c1:cd:be:d8:39:
cc:12:e9:56:99:f4:bc:2c:bc:7a:e7:b0:a4:bc:e8:
39:09:af:ec:33:77:e4:33:a4:83:3d:5b:df:7e:13:
47:d3:5b:55:ab:d5:ac:0a:96:e9:a8:6f:7b:07:47:
fd:17:a6:a0:28:ef:a0:ed:ad:7e:2e:61:64:70:16:
5d:4f:6d:db:01:f1:c5:ca:5b:5a:00:bb:e6:fe:f1:
6e:d2:8f:ab:df:a3:b6:35:66:ac:b3:f2:65:cd:f0:
f9:9c:1a:16:23:10:ff:f9:dd:d9:b7:a4:71:80:68:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:bb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202163
Signature Algorithm: sha256WithRSAEncryption
86:09:b5:1a:fc:82:00:5e:fa:0c:1e:2d:f6:30:5d:16:41:1a:
af:db:19:53:17:f2:82:6d:22:72:35:5b:c7:3c:1d:12:da:68:
b1:99:15:8a:50:59:76:47:22:6e:f0:9a:bf:33:1d:cc:84:0c:
0b:b3:ae:1b:f8:a5:fd:fa:95:4b:d1:23:70:37:65:9b:1a:5e:
85:f1:6b:24:23:a6:cf:dd:d2:18:4a:de:24:1e:7c:2f:db:7d:
ec:a4:5e:b0:c6:b5:f6:c4:e3:99:a0:54:1a:7f:7d:ea:4f:75:
86:fb:eb:e5:ba:87:c6:85:43:fd:1a:22:21:80:b1:15:8c:71:
08:e7:7e:08:91:9e:32:e3:f4:d0:6f:2a:ff:c9:5c:66:66:49:
71:61:b1:88:17:be:11:7d:6c:d8:ae:f3:d7:d0:92:48:e2:cf:
5c:05:d5:f0:3f:69:2b:a2:cc:37:11:0f:a2:12:3b:4b:b7:42:
a9:cd:e5:30:e9:3b:2b:4e:78:71:e7:4e:e5:48:c8:a6:2b:36:
8a:77:7d:fc:3c:d6:74:7e:92:43:4c:7c:57:ee:79:3c:aa:e3:
b9:15:05:d5:86:97:28:25:85:27:4e:6e:b0:d4:f6:81:d3:3a:
ae:b6:da:57:df:4a:90:62:88:38:54:ad:40:b4:9d:1b:bb:8d:
a5:44:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:54 2026 by rpki-client