Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer (raw, json)
Hash identifier: 0rwYtoRqM+9+NEEEAFm42V6/TSuaI06YuSmRqNYG6qQ=
Subject key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F034BDB044BC2BC3F0A8B2D68D2E19B01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 09:38:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210536
IP: 109.71.185.0/24
IP: 217.22.10.0/24
IP: 2a14:c180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:4b:db:04:4b:c2:bc:3f:0a:8b:2d:68:d2:e1:9b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 09:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:07:03:fa:4e:39:d6:d5:ab:5c:5d:24:06:
b2:3e:76:5e:15:a2:26:51:25:73:83:fe:76:68:b9:
5d:e4:10:b9:73:ac:f7:e9:d5:c4:50:41:9c:73:c8:
28:7b:87:ef:e4:9c:a9:0c:26:f4:84:27:e5:83:d7:
76:64:59:cc:6f:44:02:1e:96:0d:70:2f:e9:d7:62:
60:13:f2:94:93:80:f0:be:40:b0:48:f7:3c:ee:3b:
ef:2f:4c:c1:22:d3:e9:bd:0d:38:e3:75:44:8d:f3:
d6:f5:29:1e:c9:ab:28:38:73:3e:b4:e9:8d:af:b1:
d7:df:cd:0a:33:96:d0:0a:66:64:bd:fe:72:41:3f:
16:bd:26:c0:4c:50:3b:95:b2:3b:05:f2:69:5e:59:
11:5d:ee:62:bc:a5:c4:24:cc:12:89:1a:dd:02:20:
05:f0:e2:7d:dd:3c:10:91:9d:9b:20:b7:b7:48:fe:
37:54:c1:c5:29:ac:df:35:85:46:ba:61:45:0c:71:
b3:1e:b2:33:b3:be:5f:20:7b:c6:83:de:36:55:84:
d0:7a:31:23:d9:b2:03:93:80:40:4b:e7:f9:56:b6:
9b:65:fd:1e:83:b3:a5:48:cd:45:8d:d5:13:62:8c:
0f:65:73:42:6e:48:0d:8a:a5:2b:13:90:71:53:26:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.185.0/24
217.22.10.0/24
IPv6:
2a14:c180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210536
Signature Algorithm: sha256WithRSAEncryption
3f:08:c8:d5:e2:a0:7a:fc:6e:8a:2d:1e:0b:8d:19:73:d1:eb:
6b:e7:08:11:ed:50:8d:ed:28:e6:60:9e:27:af:a5:80:a8:20:
e5:cb:05:1e:8a:27:21:04:97:bf:af:01:ba:24:f5:dc:cf:53:
e6:dc:a7:77:dd:32:3f:4b:a3:c6:5a:7e:83:e4:92:b4:19:b2:
0c:97:91:cd:39:8c:d7:2b:d7:7b:ab:8d:2f:5b:a0:69:7f:ab:
56:38:9e:ad:e4:8a:10:17:08:a5:cb:64:38:ea:99:46:7e:3e:
75:cd:2c:34:02:0f:0b:e0:27:e5:d1:0e:84:77:38:30:d1:47:
27:35:9d:ed:8c:42:64:68:65:7d:43:40:79:a6:6d:e5:09:ca:
1c:11:9b:e5:f6:c7:01:2a:4b:ee:04:55:36:a6:c2:1d:af:44:
a5:a2:b9:08:63:83:97:c3:25:cf:0c:18:54:89:e9:33:f1:b9:
a3:20:e3:ae:89:8d:5b:b3:37:9a:4d:ff:e8:8f:09:57:39:1a:
c9:44:df:04:12:54:41:d8:c3:53:00:9b:df:8e:56:8b:6f:51:
a0:b3:51:39:82:2d:61:52:7e:66:91:de:5c:26:22:9f:17:c8:
a8:e3:02:84:98:2f:f5:fe:00:0d:c1:a3:06:5a:25:36:6d:b2:
61:5b:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:06:49 2026 by rpki-client