Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
File: 34h388VbUo4aKds9eZIGVvDGaus.cer (raw, json)
Hash identifier: XAQZJrO/zdxEdW0BwvZLhGhif9H/XgRpwDlM2PlcQDA=
Subject key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A066462A4CB402A4309976B298068F4952
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 07:57:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21183
AS: 50973
IP: 66.186.194.0/23
IP: 66.186.198.0/23
IP: 79.171.48.0/21
IP: 80.78.64.0/20
IP: 91.132.172.0/22
IP: 94.137.144.0/21
IP: 95.133.132.0/22
IP: 109.69.0.0/21
IP: 141.98.140.0/22
IP: 185.62.172.0/22
IP: 185.200.212.0/22
IP: 188.172.96.0/20
IP: 217.73.128.0/20
IP: 2a04:eb40::/29
IP: 2a09:ca80::/29
IP: 2a0a:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:46:2a:4c:b4:02:a4:30:99:76:b2:98:06:8f:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 07:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:0a:c0:09:e7:88:b4:68:a9:15:42:40:54:
df:d7:45:95:7a:a7:d5:bc:b4:5c:a0:d2:e0:70:68:
6e:d0:a3:1a:73:f4:c1:e0:fe:33:c3:19:75:27:f2:
f8:6f:21:7c:0f:ae:e1:73:5e:1d:1d:d6:71:de:89:
5a:d5:b7:ea:63:c1:50:52:e4:cb:fd:c5:e1:bc:58:
8e:57:c5:3e:8e:a2:8d:02:8c:d1:33:44:1e:c0:f2:
89:a5:7f:7c:94:ed:97:70:41:10:74:41:95:69:bb:
20:8a:6b:d5:3d:51:b0:67:4e:8c:87:cf:1a:32:1d:
03:fc:10:6e:22:0e:fb:67:b5:44:f9:ff:a7:3d:62:
45:98:53:99:de:6f:a4:0e:70:3f:f1:f8:a8:e8:6f:
78:fb:b1:1c:2e:3f:40:1a:0a:cf:49:fa:a8:c7:78:
90:6f:3a:f4:48:e3:9c:e1:e1:7b:c9:59:8b:34:eb:
ad:b1:4d:77:ec:39:79:f1:fe:2b:84:73:51:7c:5f:
d6:c5:42:89:65:99:7c:fe:39:ac:46:3a:a1:ff:62:
c3:a3:f8:db:09:c9:d1:58:8e:c1:49:73:89:57:5a:
05:5a:98:85:ee:fe:cf:db:4c:74:e2:96:b4:3d:1d:
a6:f9:43:4a:e7:63:1e:72:46:76:40:01:0f:c2:fe:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.186.194.0/23
66.186.198.0/23
79.171.48.0/21
80.78.64.0/20
91.132.172.0/22
94.137.144.0/21
95.133.132.0/22
109.69.0.0/21
141.98.140.0/22
185.62.172.0/22
185.200.212.0/22
188.172.96.0/20
217.73.128.0/20
IPv6:
2a04:eb40::/29
2a09:ca80::/29
2a0a:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21183
50973
Signature Algorithm: sha256WithRSAEncryption
4c:2b:ec:d9:67:b1:6d:89:7d:66:e1:74:65:55:e0:01:6f:db:
7f:6d:93:07:14:a2:90:21:7f:f9:2c:a5:e7:89:9d:95:d1:85:
0d:7a:ee:f5:5d:b7:04:c2:4d:43:a5:ce:c5:4d:e1:1e:53:a3:
00:eb:cc:c8:8b:e2:fd:f6:0f:76:e2:f5:59:a1:c7:8c:c4:54:
7a:b6:35:bc:92:25:08:b5:10:1f:a6:4d:3d:44:97:70:94:36:
03:e8:2e:28:5c:c5:85:5e:22:56:56:10:02:8c:c2:07:5c:2f:
8e:32:e8:16:b6:88:32:84:54:df:e3:11:99:b4:5e:74:c8:52:
cf:30:7d:fe:86:e5:11:8a:8f:98:67:e4:d7:f5:76:9b:6e:ab:
c2:e0:76:4d:13:38:40:a0:7a:46:6b:88:7c:06:14:85:73:15:
05:c2:ba:70:f9:e5:1d:14:34:b1:fe:e9:8f:8b:e5:76:bc:34:
18:00:cd:5a:e0:b7:1c:d3:7f:f3:14:02:9a:88:d1:58:b6:eb:
f2:fc:ed:9b:d1:67:6b:0a:ed:89:1f:4c:7b:9d:a3:05:58:b2:
84:07:dc:af:6e:8b:a5:c4:47:dc:ec:46:7a:ec:36:67:5d:08:
32:bc:fe:02:55:d5:4c:47:61:a2:48:dd:e2:c0:c2:42:95:76:
a3:c1:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:40 2026 by rpki-client