Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.cer (raw, json)
Hash identifier: IK9TUg+Piiy2g0jdpy2BgCOYBzJDEkKARBnV+zOo1wc=
Subject key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01982BE84E737ED8F2CDC1180E974524E1E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Jul 2025 07:35:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48452
IP: 94.26.0.0/22
IP: 94.26.32.0 -- 94.26.43.255
IP: 94.26.48.0/20
IP: 94.26.68.0/22
IP: 94.26.80.0/22
IP: 94.26.88.0/24
IP: 94.26.91.0 -- 94.26.92.255
IP: 94.26.104.0/22
IP: 192.109.138.0/23
IP: 192.109.200.0/23
IP: 2a00:6f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:e8:4e:73:7e:d8:f2:cd:c1:18:0e:97:45:24:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 07:35:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:24:6a:c1:6b:f9:18:59:da:e2:2e:73:d5:
aa:11:c1:09:85:c4:65:ed:17:9d:d8:a5:a4:cc:e8:
9b:64:0c:11:40:46:77:8b:2a:3b:71:e9:3c:f5:58:
cf:23:9d:84:0a:72:18:63:5b:51:08:33:49:d3:e4:
1b:b0:86:db:ae:ee:1f:eb:05:4c:82:f8:82:4d:ca:
4a:7e:87:f7:98:df:ee:c0:b1:f3:36:15:9b:bf:96:
b2:3d:fc:9a:70:c8:b9:5b:37:e7:28:41:3b:bf:85:
a0:7a:ea:0b:77:ba:ca:2d:d4:16:98:16:58:ea:dd:
3b:8b:10:c5:2a:15:7f:60:fc:94:7a:24:65:8c:d4:
e8:26:28:78:ea:67:a3:9f:af:0e:4e:19:21:10:ec:
9a:e4:ab:bf:fe:7b:dc:10:bd:4c:37:2c:b4:44:6b:
b2:85:3a:6d:ce:f9:63:02:cf:43:0e:c7:70:0e:dd:
36:5c:8c:59:36:4e:62:e0:d7:0a:7d:6b:08:2e:be:
8d:f7:c4:59:ef:e8:bf:69:35:1e:33:64:fe:d8:d5:
ba:84:36:2d:eb:5b:5f:df:03:d6:a0:37:11:8f:25:
d1:75:dd:f5:1f:1b:6b:d4:4d:62:33:e8:7c:05:c8:
38:e3:a6:e0:5d:bc:ad:10:37:74:2e:58:37:23:76:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.32.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.88.0/24
94.26.91.0-94.26.92.255
94.26.104.0/22
192.109.138.0/23
192.109.200.0/23
IPv6:
2a00:6f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48452
Signature Algorithm: sha256WithRSAEncryption
80:84:0c:ae:1a:10:2b:78:4e:08:c5:70:60:f1:4c:9f:aa:e0:
07:42:b3:c6:6a:66:3c:32:46:31:1c:25:cd:39:89:2c:5e:a3:
01:98:22:99:3f:6e:0b:9c:7b:4b:51:6b:07:e7:fa:3e:28:a6:
85:2e:f1:ff:fc:a8:8c:38:df:f0:4b:06:1e:e8:43:b0:f5:73:
f3:10:ed:b9:99:48:c5:d5:ef:ce:44:95:64:64:94:c9:fb:9f:
4e:ea:29:e0:2c:75:35:aa:96:95:ba:16:c0:b9:29:0b:df:b1:
77:df:f9:0e:49:d3:f3:d4:77:19:77:f5:92:4e:67:02:b3:b4:
17:b2:00:1f:21:be:73:90:74:ff:e1:a5:67:9c:18:db:98:42:
0b:17:ba:71:90:d0:34:24:84:45:d3:91:6b:05:7e:44:86:2c:
a4:92:25:52:8c:98:7f:0c:81:56:f0:6f:aa:c8:16:90:b8:28:
59:1b:41:5a:61:ec:e3:af:7b:a4:a2:4a:26:fd:31:f2:06:6b:
f9:6e:b1:69:d4:f2:9e:45:86:69:ba:10:2b:67:ab:d7:a4:b4:
a5:52:5b:17:3c:56:3f:9c:2c:08:f4:af:06:92:96:e6:93:c2:
e2:71:fe:67:9f:c3:2e:7e:31:14:8d:35:6e:5b:e1:b0:21:07:
09:44:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:57:33 2025 by rpki-client