
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
File: Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer (raw, json)
Hash identifier: w4StXrRFctCCSFwfdUQ0tpJ0IHwlHpfSfUz2B/hn/pE=
Subject key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9FBC42698D397422E2723775FC9D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 3333
AS: 12654
AS: 25152
AS: 196615
AS: 197000
AS: 201965
IP: 84.205.64.0/19
IP: 93.175.144.0/20
IP: 193.0.0.0 -- 193.0.23.255
IP: 2001:67c:2e8::/48
IP: 2001:67c:2d7c::/48
IP: 2001:7fb::/32
IP: 2001:7fd::/32
IP: 2a13:27c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:fb:c4:26:98:d3:97:42:2e:27:23:77:5f:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:ce:8d:bf:d2:0e:0c:52:55:00:41:ae:0f:
0e:fe:35:4d:ba:2c:d5:7d:99:9b:4f:4f:a0:3e:01:
68:8b:a9:57:c3:e3:18:2b:6e:c5:26:98:9b:b7:a6:
a1:16:c6:12:54:fd:95:ac:68:a7:bd:8b:fc:61:4b:
73:68:a0:ee:b0:b1:fd:ce:76:a1:88:05:d1:97:78:
88:36:e4:82:5b:2e:21:bb:ce:84:c1:b6:1c:14:88:
fb:18:3c:12:5f:cc:08:29:ca:e1:3a:c6:97:b5:eb:
ec:17:89:bb:46:59:90:d1:1a:d6:72:55:67:32:8c:
27:38:a8:b3:7e:39:0b:4f:c9:30:89:dd:d6:ea:bd:
2e:59:d4:f6:ad:87:d4:45:2d:3e:5d:4e:0c:55:5f:
c4:cb:c6:d6:4b:b3:08:f9:9c:67:48:7d:b7:49:a7:
a9:a2:f6:6e:50:15:3b:46:60:16:01:dc:93:18:b3:
3c:c0:31:fd:43:e4:a1:59:38:35:0a:cf:20:c4:2a:
59:94:0c:38:06:ac:2c:07:82:0b:0b:fd:83:b9:78:
7c:86:af:25:21:25:8a:f8:18:3c:e0:81:80:b7:4b:
c5:be:89:43:3b:77:37:8c:6e:cf:9e:29:83:07:40:
c5:09:bd:64:ee:74:e0:e9:a9:fe:40:88:20:4d:0b:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0/19
93.175.144.0/20
193.0.0.0-193.0.23.255
IPv6:
2001:67c:2e8::/48
2001:67c:2d7c::/48
2001:7fb::/32
2001:7fd::/32
2a13:27c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3333
12654
25152
196615
197000
201965
Signature Algorithm: sha256WithRSAEncryption
91:b0:cf:e5:1d:d2:f6:eb:a8:af:df:71:9e:81:6a:a7:fa:f6:
3b:f1:2b:dd:7a:35:6e:a7:34:cd:fe:1d:d5:7a:9f:ed:a9:ab:
81:b1:49:cc:36:99:0e:50:a1:3b:3a:28:3b:25:01:c8:25:31:
ba:7e:6f:a4:5b:1a:e9:66:5d:e4:da:94:2a:2a:ba:35:ce:8a:
37:64:0c:39:49:0e:ea:0d:c8:b0:28:36:08:ba:d2:0e:3e:f7:
51:81:c2:16:40:6f:4f:fc:63:e2:d7:65:25:ac:15:83:ea:25:
fc:83:ef:4e:e9:b9:a2:d3:91:9d:80:68:88:77:7c:f2:01:ba:
f7:15:03:16:ee:9e:d8:a2:87:bd:de:02:91:cd:2d:71:8b:50:
6c:c8:72:56:f1:60:e6:da:52:4a:bb:6a:56:d9:57:b5:83:9a:
a0:57:08:14:14:90:f3:91:1b:48:cf:3f:e1:eb:a7:37:b8:6e:
89:fa:2d:e5:50:9e:89:e4:55:ce:5b:4f:58:f5:0a:d5:76:85:
1d:9f:ef:13:fc:0a:26:2a:a2:f4:64:d9:0c:24:9c:18:c2:d2:
01:7b:19:6e:47:35:c3:2c:19:d0:5a:4b:75:48:6d:1c:ea:05:
30:66:54:41:0e:22:d5:dc:c6:ad:43:da:11:0f:10:05:44:f7:
9d:f3:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:50 2026 by rpki-client