Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EW3J4YxQICkXWc-S1TsDfTAX--Y.cer
File: EW3J4YxQICkXWc-S1TsDfTAX--Y.cer (raw, json)
Hash identifier: rBsnF5r4OxdCUFy8IUY3hkWgx9ho0IcIjeBIDNMdh0U=
Subject key identifier: 11:6D:C9:E1:8C:50:20:29:17:59:CF:92:D5:3B:03:7D:30:17:FB:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ECD82AFAEB0378E93323907798CFAA892
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jun 2026 22:59:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219466
IP: 91.199.19.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:82:af:ae:b0:37:8e:93:32:39:07:79:8c:fa:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 15 22:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=116dc9e18c5020291759cf92d53b037d3017fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:2a:e6:78:f4:8e:51:27:33:26:d5:93:72:
f8:2f:5f:83:29:78:fe:60:41:ac:c7:d1:6b:3d:84:
9e:67:1d:31:8a:9c:90:87:a7:03:ae:6c:da:65:3f:
94:ea:60:18:10:8e:b4:8a:77:c9:92:11:48:61:8f:
d0:88:95:bc:f5:c0:a7:46:cc:91:c6:ae:37:38:0e:
84:8b:be:bf:a1:c5:8f:43:cc:6b:1c:98:4a:bf:e4:
29:85:aa:07:39:7b:52:e4:c0:83:97:aa:c8:10:f2:
da:ef:7c:b0:d3:ba:8d:b2:ee:48:ed:a8:7e:6d:04:
1b:3b:9f:48:94:15:f0:30:cf:14:c1:43:5b:1a:3c:
6d:ba:bd:d5:d9:f8:e0:61:13:5d:78:c9:84:50:9c:
ef:93:ca:ca:74:0b:0a:7d:b0:c6:83:6d:92:e1:ab:
e3:1a:7a:04:1b:5c:ec:99:61:64:dc:27:27:4f:b3:
cd:49:56:43:7d:cc:84:76:f8:cc:71:70:ac:3d:fa:
78:53:04:28:54:ce:7f:22:af:ad:cb:83:8c:4b:b8:
61:4b:78:96:80:3f:3b:74:ac:0b:fc:4c:1d:03:91:
4d:ab:c8:a7:f9:f9:79:fd:31:d3:8c:4e:de:55:93:
da:e4:f3:aa:11:20:80:c6:35:46:44:d3:25:d7:f6:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:C9:E1:8C:50:20:29:17:59:CF:92:D5:3B:03:7D:30:17:FB:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.19.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219466
Signature Algorithm: sha256WithRSAEncryption
1c:d1:55:35:87:74:51:6d:00:a6:d7:6e:64:6a:f8:db:cc:7a:
bf:ba:e0:b0:f5:ac:5e:a8:4f:5a:20:fb:fe:57:d3:f2:eb:5b:
a6:9c:fb:fb:38:db:2d:08:5a:79:27:5d:cc:66:4c:b3:78:ed:
06:9a:47:0c:99:ec:0a:c6:d2:23:b5:38:9d:b2:4b:0f:97:b7:
11:d6:0e:0f:43:87:3d:fd:ce:21:1f:13:ed:5b:b8:c9:c0:87:
6c:d3:fe:71:d0:3f:66:20:62:2c:5d:57:0d:29:94:26:d5:ea:
14:0a:35:ca:9b:40:f6:de:7f:4d:46:f3:b0:95:2a:fe:ff:4c:
e2:dc:ae:2b:d7:69:7d:18:ed:01:9b:a1:9b:ac:60:d7:41:84:
4c:40:b9:16:51:86:76:51:d1:f4:f0:d4:fb:fc:04:2b:18:e9:
ce:ff:c0:5a:a9:de:d1:07:ba:38:f1:e7:4c:25:88:65:60:7e:
99:da:2e:0a:23:42:79:7f:55:87:3e:3a:cf:fd:bf:32:de:5b:
c4:03:d0:1d:92:17:d8:03:e9:e6:62:7b:b1:b4:f8:98:7a:5c:
51:59:15:0f:81:20:52:1e:ff:57:99:dc:15:40:83:f9:fc:32:
6d:51:78:e1:27:be:31:e4:61:47:5f:ff:8d:3f:64:d1:38:b4:
f4:ad:f9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:41 2026 by rpki-client