Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.cer (raw, json)
Hash identifier: 4E9Sms6TDMTFgJtafW4ANyb8XyqlsD5DcNpZuizHLGE=
Subject key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEB53081DC1022C83E2A5A0AABC5D308A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 21 Jun 2026 17:55:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51839
IP: 91.221.104.0/23
IP: 2001:67c:3a8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:53:08:1d:c1:02:2c:83:e2:a5:a0:aa:bc:5d:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 21 17:55:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:04:f8:bb:b9:1d:ca:aa:3b:5a:9a:13:06:
62:29:ef:c1:96:de:4c:77:03:a9:2e:81:fb:02:a8:
4d:35:14:59:50:dc:3f:db:1e:46:9c:b7:9c:e0:c0:
60:8f:bb:f0:e7:cd:b9:46:77:33:b6:69:f9:86:3b:
92:6d:eb:51:97:73:6d:82:f0:cd:f8:a2:11:70:e2:
f4:09:17:38:2b:c8:ad:26:fa:02:42:aa:88:c4:05:
fb:5e:dd:e0:48:8b:98:ee:26:2a:cc:89:38:6b:b8:
54:ec:f7:02:d5:81:e5:44:eb:11:20:4c:ed:2f:b7:
bb:15:3e:74:bc:c5:f2:7c:6b:08:51:0e:00:8a:eb:
1f:de:4f:21:d7:87:79:fe:c6:23:0c:aa:56:b0:ec:
07:f0:74:86:6d:c2:ac:b0:7a:c1:dc:b9:6b:1e:a6:
28:7d:7b:46:b0:56:8f:c4:98:60:2a:61:c4:c3:41:
fb:a1:83:cd:07:6e:9e:1e:9c:fe:c2:78:40:09:f2:
ef:56:ac:1e:26:c9:09:af:ee:90:de:55:9b:57:54:
27:2f:fb:33:45:7a:57:c3:7e:7c:b5:92:1f:0a:60:
ec:55:c0:e3:26:b0:5f:2d:52:1c:a3:46:7c:6b:ea:
67:05:d7:d0:66:e5:bc:a2:a3:af:49:11:9e:d3:2d:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.104.0/23
IPv6:
2001:67c:3a8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51839
Signature Algorithm: sha256WithRSAEncryption
98:b6:d1:5b:51:ee:1e:5b:43:06:ac:e0:df:ea:eb:6f:9c:ac:
3f:0e:aa:f6:d0:bc:74:36:8f:9a:6b:c4:34:23:f4:6d:10:36:
67:77:3b:ce:9c:f0:a3:be:18:78:a4:71:0e:1f:0a:22:b6:ca:
c9:70:24:07:3f:ce:18:bf:05:17:92:e9:65:f4:a2:f4:46:e0:
bb:d3:50:de:a6:ae:c5:7f:7e:4f:77:94:6c:f0:cb:ea:fa:7e:
7f:68:1c:b0:26:0d:50:44:bb:11:30:02:0e:93:69:20:79:d1:
85:70:2e:5c:29:2e:41:8b:5c:7c:de:05:c5:56:6b:5b:7f:72:
8e:77:69:1a:d2:e6:32:9b:46:98:b0:e5:01:25:fd:55:02:52:
a4:5c:c9:92:8f:95:c7:24:35:f7:92:ce:1a:d3:b9:71:26:65:
1f:4e:af:80:1f:2f:04:79:7d:3e:90:83:d5:4d:0e:41:f4:67:
76:bc:b9:11:39:d2:27:11:d6:98:e5:c4:32:76:60:c0:e3:a0:
5b:3c:ea:31:45:67:e2:d8:80:8a:9e:27:1d:55:a9:45:0f:cc:
ed:8a:6a:8c:d1:d4:12:f3:39:72:72:41:b1:9c:d5:f9:a8:e0:
78:fd:5c:0c:66:51:bb:47:a6:b7:5f:38:12:7a:05:cd:7a:69:
99:f1:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:26 2026 by rpki-client