Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer (raw, json)
Hash identifier: J887TpgeUCSy08YSCuw3NRyhVT5M2HU6xx3XtaB8GQ8=
Subject key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE333A10BBF5B59A8632802A7A98EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 139.30.0.0/16
IP: 192.76.158.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:33:3a:10:bb:f5:b5:9a:86:32:80:2a:7a:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:42:88:56:11:ff:51:c8:a7:21:f1:6d:7c:
e0:ea:dd:1b:d2:b8:56:33:f6:ab:83:80:84:6f:f0:
28:40:5a:f9:90:b3:22:ec:34:bf:e3:2a:b9:9e:6c:
24:d6:fe:e3:e0:a4:f8:d9:f1:b0:c6:33:84:a2:0b:
9c:36:96:78:25:da:d2:d4:d1:e5:de:c8:a4:c6:6d:
e8:b8:7b:d2:d1:28:60:64:d9:b7:53:9d:cd:7d:03:
72:44:ff:c4:e9:86:f9:1a:e3:f8:c7:d1:19:2d:88:
47:3d:ef:62:a2:1c:dd:2c:47:0b:f4:d2:e5:ba:0c:
1b:ca:ce:82:07:41:45:84:25:e1:a9:4f:e7:1a:16:
a6:f9:a6:7f:28:c8:00:8f:87:d2:ca:8f:a1:32:12:
0c:8a:76:cc:5b:01:6b:4b:60:a8:8a:f7:cd:b8:25:
89:7b:1a:42:5f:96:53:3d:7e:81:c5:17:60:37:21:
a1:72:8f:83:b9:50:df:1e:7a:aa:03:e9:a8:d6:a3:
97:42:cb:e3:8b:b5:3c:4e:ac:20:bc:bb:38:07:e3:
a2:8f:9f:0d:bd:f7:e2:0c:90:76:21:4f:80:f9:8d:
13:a6:f3:cc:c7:82:0c:3e:ec:22:2a:b1:c0:9c:c5:
5f:8c:b8:ae:76:22:8f:00:e7:87:fc:7b:ce:05:54:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
192.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
23:69:e1:4d:7c:27:e6:27:ca:d7:36:a9:c7:3b:af:de:46:95:
72:35:3b:97:43:34:e6:15:8d:9b:58:c7:2f:0b:53:13:95:e4:
b3:b1:7b:b2:b7:6b:3f:18:4a:6a:6d:3a:a5:fe:99:05:33:0b:
1e:86:84:f0:eb:75:88:3e:8b:8f:c4:c0:ea:b7:e7:ab:fa:98:
ed:a4:d4:65:5c:c9:67:01:92:1a:da:0c:48:75:63:05:88:9f:
1b:b3:b7:6c:e1:66:a7:f3:c5:c1:59:1f:4d:82:41:11:73:e2:
60:2b:d9:87:56:91:5c:db:b6:c4:35:56:54:1b:38:a0:61:12:
38:a9:03:d9:f0:be:d6:59:1f:85:93:6f:c6:23:5d:44:42:91:
88:84:8a:16:14:91:92:bd:cb:9d:71:a9:35:55:8f:56:33:ef:
83:7c:fa:e1:0d:d1:69:83:b0:25:d6:ee:1c:ab:d7:da:09:8e:
c0:13:7b:08:0e:71:dc:dd:63:e5:02:63:bf:26:fc:f0:13:f0:
e6:a3:4b:0e:8f:15:78:0c:37:c8:01:4c:0a:92:cc:ac:f8:92:
51:e4:a7:7a:11:27:40:3b:39:99:4b:aa:3e:f4:5a:bb:9d:b3:
47:34:7a:72:eb:ee:6c:18:d6:6e:38:33:43:f5:93:b9:b0:01:
02:c7:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:54:04 2026 by rpki-client