Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
File: U3kggzC5j0ALjYNFoCtZHBoXLwo.cer (raw, json)
Hash identifier: 8SKgtROrvAjF4XGVgYNy6ZaZWtdssAgEZLgM/I31dPQ=
Subject key identifier: 53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB701C04D1F3C558A9CF7FB5021603
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207440
AS: 209231
IP: 2.56.140.0/22
IP: 86.110.204.0/22
IP: 89.232.172.0/22
IP: 185.161.236.0/22
IP: 185.251.36.0/24
IP: 2a09:c540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:70:1c:04:d1:f3:c5:58:a9:cf:7f:b5:02:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5379208330b98f400b8d8345a02b591c1a172f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:96:7e:c6:35:ac:2b:24:d5:d5:1a:c1:92:
b6:98:ea:7b:de:96:10:bd:84:95:a6:de:8e:c0:08:
21:97:fc:ec:f8:ab:a1:85:8c:27:59:bc:48:41:71:
f7:08:34:17:eb:ee:ba:c3:f3:03:4d:61:f0:db:12:
66:26:54:91:a9:f0:32:60:c6:dc:8f:0c:cf:4b:53:
43:6e:b9:fc:fd:76:0b:18:33:0e:c5:f9:98:cb:17:
1d:65:05:76:b6:c0:ec:f3:aa:b2:0a:0b:fa:db:7d:
b1:ef:e1:e7:ac:43:b0:ca:49:85:36:90:c6:08:da:
d2:73:2c:db:3f:32:95:83:e0:36:2f:08:1d:41:46:
5f:73:aa:ea:ad:4f:5c:81:4f:29:73:5b:91:a9:68:
eb:5d:4f:f7:c4:11:c8:ac:5a:e4:8d:0d:88:a0:5d:
09:cc:a3:d1:0c:ae:e3:31:ae:a0:d7:0f:ff:20:ea:
b2:97:1e:6b:3c:d3:d1:d9:26:3f:10:b0:0f:8f:69:
f3:d5:5f:b5:ee:c8:1e:34:93:5f:08:4e:09:eb:3e:
8a:a7:e2:94:bc:ad:2f:14:03:69:13:ed:b5:c0:7f:
87:ea:96:78:55:4b:04:a9:03:2d:33:f5:5d:f3:8c:
87:2f:45:1b:93:d3:51:1f:21:1c:6e:e4:49:30:9b:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
86.110.204.0/22
89.232.172.0/22
185.161.236.0/22
185.251.36.0/24
IPv6:
2a09:c540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207440
209231
Signature Algorithm: sha256WithRSAEncryption
6a:40:7d:a6:fd:de:6a:bb:23:b3:3c:b7:ac:34:d4:47:ea:2b:
21:1f:16:9e:c2:2e:92:50:e8:66:19:cf:4a:3a:a5:fc:b9:96:
d0:13:71:02:38:5d:ec:be:96:8b:98:04:a0:ab:87:c5:3d:80:
a9:8a:60:34:d5:ee:ff:c4:6f:89:cf:c3:46:e1:be:41:5e:4c:
b5:0d:e6:39:c3:83:be:67:de:2b:fb:b4:17:bf:27:4d:09:b8:
13:39:f4:97:1b:31:ff:f5:6a:71:57:50:49:42:e1:26:2e:04:
9b:09:ea:92:d6:dd:85:2d:69:a2:b6:39:2a:4c:00:d4:6e:7e:
da:34:95:ce:09:ab:76:c2:6c:12:44:12:e9:b1:b7:9d:15:8c:
17:d4:eb:aa:d3:4c:68:ed:0c:47:5e:f0:af:91:a5:5c:01:5e:
1f:8a:ab:e5:63:fb:51:71:30:d2:39:c8:a9:91:05:fe:14:c9:
ad:97:85:ec:5d:21:89:1e:3e:bb:d8:c5:30:15:d5:af:d4:18:
6c:ff:e2:9a:dc:f1:99:3a:28:db:76:2b:ac:95:26:ae:e0:80:
b0:61:3f:f1:79:56:74:31:96:da:8c:65:d7:7f:39:0b:b4:13:
ac:d3:38:66:96:94:c2:75:b4:18:6c:4b:5f:45:06:29:bd:ad:
30:48:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:15:23 2026 by rpki-client