Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
File: 9lWaWOLE8UoftjRDGQgK88xWRGs.cer (raw, json)
Hash identifier: JR0MdpdoExP6PBSk7uMBkv6ulKZnklPXdKNRJqTYX1o=
Subject key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E37323548311DE81BF7D01B4EEC83C067
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 May 2026 18:28:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207135
IP: 2001:678:1284::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:32:35:48:31:1d:e8:1b:f7:d0:1b:4e:ec:83:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 17 18:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:af:f4:e5:b0:a8:2e:06:68:cb:aa:fb:12:
9b:b2:43:2b:d0:3f:65:66:0c:24:6d:b7:5e:e7:bb:
ec:4f:28:ad:1a:d3:02:06:c9:bd:3b:06:33:d6:2d:
77:91:ca:6b:be:19:88:77:53:1d:f6:fd:64:72:08:
36:8e:f2:16:d9:89:1f:9a:48:6c:f6:68:f2:9b:a1:
5e:90:63:29:f4:40:65:e5:6c:3b:bb:e3:a9:72:48:
04:7a:81:f0:3d:5a:20:4a:0b:bc:52:bd:ba:4e:a3:
54:27:0c:e8:fd:06:39:f9:a1:1c:ba:26:42:e7:58:
85:ac:f1:9b:fd:16:a0:be:ca:a3:ad:4b:13:36:15:
b8:1e:12:10:ae:a8:33:ca:3f:fd:82:89:31:1d:49:
a1:78:e6:61:bb:fe:a2:b1:b6:99:69:a9:4d:53:87:
64:a6:96:2d:28:3f:60:17:ac:80:e8:24:7d:c3:92:
58:d5:67:5a:71:56:eb:f4:ad:0f:ca:54:87:1d:18:
d4:95:b5:8a:35:aa:e7:04:a4:2b:62:52:ff:6f:24:
7c:4a:0d:2c:0f:d1:de:5d:d2:16:ae:52:99:97:8f:
47:12:e5:72:08:da:7f:75:ea:b6:c6:ee:32:d3:69:
56:e4:1e:64:44:ed:37:dd:51:cd:cc:86:30:76:75:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1284::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207135
Signature Algorithm: sha256WithRSAEncryption
00:73:77:17:f0:5e:48:76:59:94:1d:98:93:35:67:68:96:82:
db:ea:d5:ea:db:ca:04:74:2d:15:b5:73:b5:3a:ac:4a:fa:72:
1c:4d:7c:9f:0d:50:36:ce:1b:48:42:58:c3:8a:cd:55:fd:1d:
21:62:ea:9a:f4:5c:bb:23:15:81:cd:d1:6a:d0:bf:eb:af:25:
ef:15:e7:8f:57:7b:91:80:03:59:30:bb:60:9c:8a:23:6a:f9:
b8:53:14:79:97:7e:17:00:f6:5c:ba:db:19:90:e6:59:ba:d6:
a6:cb:f1:ce:3e:7c:fc:34:f2:6f:82:d6:51:dc:ae:88:eb:08:
ae:f5:a2:d2:19:ed:07:44:38:fc:8c:14:f0:31:d1:ad:f3:fa:
9c:81:f0:f3:a4:58:93:6b:e8:a2:65:c0:b1:a0:ec:4b:e9:50:
d6:33:8a:64:8a:0d:e5:ab:2e:33:8f:7c:e7:7c:b9:ce:21:10:
e4:72:4b:59:b5:74:4d:4f:44:06:83:b3:5b:63:26:0a:c3:c0:
fe:ed:25:46:1a:52:f0:5f:29:64:aa:e7:75:79:cc:e1:30:58:
eb:95:8c:52:31:ed:fc:72:f1:a4:8e:c6:d4:f0:4a:a4:26:f0:
d4:2e:05:ad:c4:9e:d0:6c:87:21:18:64:c0:25:c5:be:75:1d:
ae:f9:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:38:57 2026 by rpki-client