Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
File: JW-mc9s74eLrq_uZbQfPSSJevAg.cer (raw, json)
Hash identifier: 9ZKPYWrKMS4MJhZtInYyunXnSLULDmh0vh6od0TzWDE=
Subject key identifier: 25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EDAEE3F0B977A633DF8F24EE0C47ED9F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 13:31:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210270
IP: 176.98.36.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:ee:3f:0b:97:7a:63:3d:f8:f2:4e:e0:c4:7e:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 13:31:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:60:88:16:3b:f0:ee:f7:7c:fc:a7:f3:cb:
38:17:28:f1:59:bd:3b:0f:4f:a7:64:5f:c1:3f:e9:
ec:85:ca:00:ef:d0:cb:bd:58:57:4c:84:8e:19:02:
76:28:da:f2:f9:b5:a3:40:5e:26:71:40:18:f8:33:
78:9c:a8:cc:d0:6c:2f:a2:f5:cd:21:72:7f:33:b4:
47:c0:bf:15:d3:4d:09:98:5b:58:6e:98:1d:9c:87:
a6:28:6e:6b:e3:58:a8:e7:07:af:e8:ee:33:8a:50:
87:a0:44:0f:f8:2a:88:cd:b3:08:e9:5f:1f:cb:a0:
28:94:25:cd:9d:9f:93:5e:6e:c6:44:11:c2:d5:15:
83:4e:e1:6e:8c:4d:ec:a4:f1:8f:6a:80:e0:30:60:
96:b6:aa:92:88:12:35:bf:af:c7:10:13:af:56:8f:
3e:f0:1c:0f:4d:4b:25:82:73:3d:aa:c2:ee:a7:e3:
27:11:2d:69:01:dc:50:78:da:4b:17:7a:39:74:7a:
fc:0a:e6:d7:97:0c:a7:1c:43:f4:93:7f:10:ff:3f:
fb:2f:d0:0d:9f:dc:ac:0c:d2:2e:ef:61:9d:e6:8f:
8e:f1:28:8d:26:00:59:3a:cf:13:7a:18:d9:bf:d4:
e5:e3:1e:22:e4:20:2b:46:03:33:47:e7:e0:aa:e1:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210270
Signature Algorithm: sha256WithRSAEncryption
10:5d:9a:b3:a3:89:80:0c:73:72:57:6d:42:65:e4:10:c6:06:
62:de:bc:58:58:0d:ab:90:ea:49:11:c1:f5:87:4f:71:01:28:
b2:20:ff:ae:31:3d:ad:71:21:dc:a5:ab:6a:5a:20:e1:d7:c1:
d2:1b:e5:e9:1b:4b:72:de:2f:9e:7a:d7:3e:2b:30:06:13:08:
ad:12:23:55:cd:2f:35:6e:7e:0e:06:ff:f5:2c:59:6c:71:50:
0a:b4:7c:fd:f0:62:20:b9:5e:c4:37:55:ef:4c:ba:5f:6e:01:
f9:6c:89:45:47:8c:78:45:47:b5:5f:6f:48:b7:f7:d8:43:86:
81:0a:2a:92:d9:12:9b:8e:e9:2e:f5:60:de:af:a0:c2:2d:8e:
b7:dd:90:20:f1:1b:8d:32:82:a7:42:01:52:ca:d2:39:12:c2:
1d:9c:1b:40:73:7d:3b:bc:a0:dc:c8:a0:18:86:4a:0a:b7:9d:
da:3d:eb:c2:41:2a:42:c3:b7:08:f6:fb:39:8f:40:79:18:fa:
17:6e:73:9c:c4:31:d7:4e:2e:ef:d9:32:fc:93:06:f4:fb:b4:
47:a8:e2:34:19:65:cc:be:80:e1:f4:a6:3b:7a:15:00:a2:d0:
d7:54:11:cf:90:35:49:1b:95:44:bf:42:2c:76:71:a9:f4:28:
a7:de:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:22 2026 by rpki-client