Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer (raw, json)
Hash identifier: Ykj1bfbaNUcPSSK1jjBt4dW48i+6m5WlApBwtXOlG4k=
Subject key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15594DCCBA50E962C165B6B19A3DDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209088
IP: 5.181.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:59:4d:cc:ba:50:e9:62:c1:65:b6:b1:9a:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:44:a3:7a:42:52:19:57:90:56:61:e8:00:
67:96:1d:bc:65:13:82:ef:70:b6:bd:07:0f:eb:57:
a6:ba:02:18:f3:57:ae:e5:06:b6:e8:ef:17:b0:90:
1b:ab:c6:d9:a7:9d:40:54:dc:e8:b0:eb:96:16:28:
a7:70:ca:79:ef:0e:9b:42:3b:b2:f4:47:fb:3e:02:
9c:0d:d2:61:7a:e8:54:9f:84:11:8c:7d:b5:14:5f:
e9:b4:74:f6:07:1d:b1:fe:82:61:70:d4:4e:28:87:
75:5a:14:7f:d5:6b:b5:5b:43:40:cb:8c:bc:5f:7c:
ab:a4:af:92:89:65:03:e4:61:e4:54:56:88:50:48:
1c:dc:fc:0e:40:d5:b5:fd:d6:a6:6d:e2:5e:93:2d:
ff:8b:19:18:00:ae:db:b4:01:84:b5:ba:25:8d:c3:
b5:be:3c:8a:41:f6:05:4d:45:b9:9b:ae:37:5c:a0:
27:65:a8:d0:50:72:be:33:85:aa:7d:be:85:d7:9f:
25:ec:83:a5:be:99:13:39:29:fe:26:d7:8c:aa:00:
8d:48:09:68:ef:5b:82:ff:c3:3a:30:9a:12:12:a0:
dd:03:6a:4d:ed:d7:1e:30:1e:45:b5:f1:41:1e:ba:
b4:07:92:d3:be:64:d2:5c:f8:49:92:07:8c:f8:1c:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209088
Signature Algorithm: sha256WithRSAEncryption
87:97:b6:c0:e0:cf:8d:b9:14:89:06:70:b7:9d:30:43:54:43:
95:4e:1c:75:5e:72:14:ef:f1:03:77:5d:21:91:ed:b0:fc:85:
17:e7:72:14:18:c9:16:df:7d:87:ff:34:d0:56:4c:b0:c9:5c:
66:92:41:59:5d:28:f8:41:7b:0e:f1:01:c9:13:85:d4:af:2f:
62:74:a3:49:aa:58:b5:0a:89:ed:68:58:5c:98:79:21:19:ff:
45:11:29:a8:e6:1f:be:58:bb:5c:dd:89:1e:be:19:9f:47:4c:
b4:bc:98:14:33:b0:3d:43:d4:47:a3:65:a6:54:4a:65:21:cc:
c3:6f:4b:e3:0f:4a:ca:b7:b3:47:35:22:9d:32:f0:66:ae:55:
44:96:96:dc:d9:19:c3:4b:0b:ab:16:43:f1:35:98:13:d0:46:
81:29:b5:cc:a0:b1:33:eb:d4:0a:c4:c4:45:43:4e:8c:12:c7:
9a:61:27:0c:11:9d:56:96:38:8a:9b:82:e3:b7:94:61:9e:6c:
c1:b8:13:ef:59:5e:f5:2a:e4:0d:47:e5:72:41:38:9d:c3:22:
28:f8:7b:b3:7e:10:d9:1b:25:cb:c4:bf:98:03:e8:77:79:14:
99:6b:58:0f:58:9c:24:c2:d8:3a:b3:3c:6a:be:3e:15:43:41:
da:49:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:12:26 2026 by rpki-client