Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
File: WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer (raw, json)
Hash identifier: edtpFkYbR1Bfk6nBa/X1GdCsekXwytcP0u1YqwWzhBU=
Subject key identifier: 58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEAD57395D4813D770287B664361C642E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 21 Jun 2026 15:38:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47341
IP: 2a07:f80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:d5:73:95:d4:81:3d:77:02:87:b6:64:36:1c:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 21 15:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5815a3e0959de2f27b45e71d2a84ff535f8163b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:a8:f6:e5:15:50:da:e9:3c:d1:d6:c2:cd:
b4:a5:de:75:3f:62:98:e9:fd:49:67:a0:1a:e1:65:
73:84:17:9c:e2:0d:85:5b:c1:e2:c3:39:d8:3a:c2:
3d:cb:47:41:1f:bb:ea:ec:1d:89:3a:20:a1:b7:b9:
f3:51:8a:0e:b4:c1:cc:73:8d:e7:1f:4f:91:b3:a5:
54:c1:05:27:96:44:9e:57:37:bf:d8:5b:20:27:8f:
e9:d9:34:d2:81:44:bf:4c:cf:81:ee:dd:93:21:50:
5f:fd:37:04:46:a9:fb:67:0e:c7:a9:d1:21:db:88:
48:e3:9e:0f:f6:16:f9:ec:25:ad:f0:59:3c:3c:f4:
c5:eb:68:a6:6c:b1:05:ed:11:76:4d:62:44:59:a9:
d9:e4:ec:03:89:6a:2d:6d:30:bb:89:83:dc:c3:58:
38:a5:d1:15:7d:b7:3a:57:7e:8e:97:40:e1:f3:91:
40:f9:30:0f:61:a4:1e:d1:37:e5:1d:f6:75:9d:63:
5a:2f:7d:54:a8:6b:51:c8:16:69:f0:b9:2b:34:1c:
f9:0f:3c:4e:85:39:43:ab:9c:8c:89:c4:02:db:e7:
c2:68:81:ca:81:9a:04:6a:66:b8:76:7c:c2:69:63:
67:35:78:dc:7e:7d:2b:43:de:10:e9:13:bb:f5:2c:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47341
Signature Algorithm: sha256WithRSAEncryption
7f:ac:b4:c3:63:52:e8:d0:ae:b2:44:96:af:b6:a4:73:ae:1c:
1f:84:72:96:da:9f:2f:68:3e:fe:22:8c:2d:9d:6a:ca:3a:fd:
e7:71:5b:63:29:3d:ff:b2:ce:25:b7:09:15:12:eb:74:d2:a2:
43:60:12:db:ad:ab:62:40:e9:f0:dd:3d:c5:1b:b0:47:cd:8a:
16:f8:ff:4b:7a:04:a3:ef:6d:9d:d8:ab:50:46:11:ef:3a:d3:
9b:29:d2:af:38:df:00:4e:f8:9c:ab:3e:01:ad:54:30:3d:d6:
6d:96:ef:7a:7c:09:ce:39:b0:2c:2f:3d:ce:28:a2:75:47:2c:
40:99:e9:08:c1:e6:55:a6:34:26:27:2d:38:92:d1:ad:45:17:
a0:19:a7:82:61:11:79:d3:dc:cc:8d:9a:38:58:c2:ac:32:8e:
ed:68:3e:2a:5e:e9:6b:29:3c:a9:80:ef:c7:b7:72:34:4c:05:
ba:92:80:94:33:a0:25:4f:f8:fd:29:37:15:7f:1b:4f:68:a3:
98:16:d8:1b:40:18:57:9d:4a:f1:af:5b:b9:cb:e7:c3:9b:b6:
6d:c3:1e:49:e2:ce:72:72:85:b1:6d:f8:15:18:c3:65:c7:79:
54:40:6b:93:d8:5b:1c:b7:17:f4:25:8e:a4:b9:fe:e2:9f:6b:
c2:91:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:59 2026 by rpki-client