Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/JGx9ouuKxQJnEjY3xPZF2LggpgU.cer
File: JGx9ouuKxQJnEjY3xPZF2LggpgU.cer (raw, json)
Hash identifier: a6DiClIrlTJSVKfez7jEWpkfu/cj8RnF35XxYDU680Q=
Subject key identifier: 24:6C:7D:A2:EB:8A:C5:02:67:12:36:37:C4:F6:45:D8:B8:20:A6:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A16DA60E8DD0A8F1C467B9322C82B9CFD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/4211fa-2260-4714-9d49-3ddd2d068e11/1/JGx9ouuKxQJnEjY3xPZF2LggpgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/4211fa-2260-4714-9d49-3ddd2d068e11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 24 Oct 2026 11:22:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218338
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:a6:0e:8d:d0:a8:f1:c4:67:b9:32:2c:82:b9:cf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 11:22:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=246c7da2eb8ac50267123637c4f645d8b820a605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:f7:dc:b2:66:21:d3:61:5a:56:92:7e:5f:
b9:15:73:23:2d:3b:f1:77:d9:2d:67:77:6a:14:e1:
d8:39:d9:fa:11:b3:9a:d8:3a:1f:f3:ac:30:71:e7:
ca:41:ba:9f:aa:7f:72:f1:39:45:20:56:6e:9c:0a:
6b:8a:ce:53:81:5a:67:98:1b:b3:e3:fa:3b:a7:0b:
65:47:9f:15:1c:0b:1d:a0:b1:29:e0:6d:ce:bd:94:
77:d0:5f:66:cf:0d:8a:61:60:6c:c3:a2:fd:f6:4b:
95:41:4e:6e:4a:69:d0:c3:6b:e2:81:b9:8b:cf:c1:
37:d4:e8:6b:2c:f4:ae:ce:cb:ff:a8:29:f7:c2:24:
99:5c:3a:d2:c8:a4:0c:4e:ff:20:c4:20:10:58:e8:
18:69:fb:45:c2:fb:d2:53:ff:ab:67:89:ba:07:13:
db:c5:57:10:2f:eb:dd:39:a6:8f:cf:42:77:04:70:
88:d9:a3:5e:7c:24:f2:b4:40:3e:7b:20:79:8c:6d:
af:16:ab:f0:a6:53:d7:ae:f2:b7:94:ec:ad:0e:7b:
75:6a:e0:c0:8d:f5:e3:fe:7a:30:dd:ba:bf:bd:38:
b2:a3:26:db:90:43:41:22:d7:3c:43:c7:21:e7:65:
f9:86:09:07:4d:e6:e9:69:a3:ff:8a:09:50:20:34:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:7D:A2:EB:8A:C5:02:67:12:36:37:C4:F6:45:D8:B8:20:A6:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4211fa-2260-4714-9d49-3ddd2d068e11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4211fa-2260-4714-9d49-3ddd2d068e11/1/JGx9ouuKxQJnEjY3xPZF2LggpgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218338
Signature Algorithm: sha256WithRSAEncryption
33:9c:36:ca:58:b1:2b:3f:fb:b9:a5:a0:c8:68:46:3b:96:a6:
9a:b3:f0:90:e3:d9:18:4f:50:0e:23:75:85:38:45:44:57:a6:
03:e1:64:63:5b:29:46:54:5d:4e:72:83:aa:58:6c:32:50:bb:
33:6e:31:a2:c4:7f:0b:74:75:1b:dd:91:14:f6:e9:fb:ff:5f:
0d:9a:87:5d:d2:37:85:09:cb:fb:3a:04:e0:be:24:4e:18:ef:
d4:49:36:e2:b2:84:08:96:f8:e9:38:16:50:ab:cf:ae:e8:11:
56:de:f7:7d:62:01:b8:d5:42:14:9b:4e:fe:0c:9e:1d:90:ca:
de:01:01:32:ec:c7:0e:1b:6f:2b:73:ee:a6:c3:94:c3:ca:f7:
c8:d4:45:04:44:97:45:cc:cc:8d:d7:86:4e:14:7c:f6:5a:01:
23:84:de:48:0d:c8:ea:4d:71:ed:0d:35:d4:69:15:c5:50:b6:
41:67:3a:cb:f8:59:13:4d:d5:e1:37:4c:c6:16:ca:c7:62:7e:
f7:19:f3:b8:91:88:58:a9:1c:96:11:ba:62:95:9a:a5:04:31:
ea:9f:2c:fe:5e:ea:62:d2:23:21:c5:65:15:3e:db:26:a2:6c:
50:02:11:d3:30:dd:f5:41:11:bc:9c:9d:66:f1:b8:57:a6:cf:
d8:4d:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:14:09 2026 by rpki-client