Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer (raw, json)
Hash identifier: A1h0f3mNy4YnZiEVpCCk63gAQMYHXC5SgVvPCLqGgjU=
Subject key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11B47A37AD83E5F48B5F289F80D9AB74E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 11:30:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34916
IP: 85.204.193.0/24
IP: 86.104.231.0/24
IP: 86.105.226.0/24
IP: 86.106.27.0/24
IP: 89.44.238.0/23
IP: 193.202.126.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:47:a3:7a:d8:3e:5f:48:b5:f2:89:f8:0d:9a:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 11:30:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb182a5dbd1bee871de519002d6018fee213670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:33:2d:55:90:8d:1e:6d:ad:d7:af:6b:e2:
cd:ff:50:6c:16:8f:56:f8:c0:ae:aa:78:ef:4f:82:
c5:5e:84:07:4a:25:f1:d8:82:b5:1b:cb:13:98:5b:
d4:f3:45:8d:fe:bb:3b:03:6f:fe:b1:d1:38:94:b3:
eb:f4:e0:19:52:ef:39:f9:08:da:9c:c0:37:6d:48:
75:c8:e5:14:ba:e5:3e:52:ff:64:7d:66:83:67:90:
10:40:62:de:05:f2:be:be:d5:e7:6b:f9:02:73:cc:
81:d3:57:a4:4f:20:83:00:de:62:02:bd:54:93:6e:
40:3f:19:67:7a:23:e2:1c:a8:89:de:6c:68:13:85:
ee:2b:d7:0d:12:6d:84:bd:25:2c:d5:79:cb:00:e8:
d7:e2:19:92:5f:fe:e1:ce:78:02:0e:01:04:6d:82:
1a:b7:cf:d7:8c:ae:2c:ca:7b:b1:b2:de:98:42:15:
27:ea:b4:cb:c5:13:52:70:c8:db:a2:92:e1:c7:1a:
2b:97:49:e5:bc:fe:12:ee:71:3f:10:d1:42:e8:a9:
84:10:05:fa:5b:04:f9:7f:28:9a:83:b2:d4:c6:8f:
5d:6b:b6:e9:19:c3:fb:a9:b0:b0:b3:7a:d3:da:92:
33:63:0a:ca:19:d3:b6:4c:41:c7:57:d6:75:69:cc:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.193.0/24
86.104.231.0/24
86.105.226.0/24
86.106.27.0/24
89.44.238.0/23
193.202.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34916
Signature Algorithm: sha256WithRSAEncryption
86:44:5e:e2:9b:20:f1:31:f6:a7:e7:c8:26:0a:17:a8:84:eb:
be:b5:9d:17:b3:60:96:e0:0e:ef:93:c2:4c:a4:52:0e:02:ca:
49:a9:aa:a0:b9:95:48:36:17:e3:33:ff:75:29:33:92:35:c9:
86:f0:85:14:77:a3:24:07:42:e0:9e:4f:d0:60:7c:41:76:7c:
c5:dc:68:38:b2:52:de:fd:d1:83:41:00:6c:fd:f0:c9:fd:f1:
ca:7d:24:85:17:84:32:b4:23:31:d6:02:99:b5:5d:b2:ae:1a:
90:09:01:62:00:02:75:a0:85:c8:ef:4e:f1:41:c6:90:37:4b:
bf:c3:71:59:a0:a6:ff:c5:18:a3:18:53:6f:af:fe:c7:07:c4:
71:78:5b:5a:5b:18:1d:bb:35:fe:79:4d:5c:6b:e1:a3:2c:32:
c0:44:f8:5e:31:68:93:0c:5f:c5:90:e5:ba:a4:b4:1e:bb:21:
17:d2:bb:91:09:f9:04:f7:f5:e2:d4:4e:6e:98:fd:f0:ee:ef:
ba:fa:d9:44:72:32:5d:9d:f6:e7:63:0a:f4:3c:0d:8c:76:48:
ec:c3:57:31:cf:7f:a1:ef:c4:b8:db:2d:ea:1e:f6:d1:f6:57:
4d:95:cb:51:0a:f5:13:3e:8c:2d:75:7e:35:82:ef:74:1d:c7:
ad:bf:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:18:38 2026 by rpki-client