Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/W_9QyeFaSXdYXiHebEBrzUx7YJU.cer
File:                     W_9QyeFaSXdYXiHebEBrzUx7YJU.cer (raw, json)
Hash identifier:          EGn/C3WuSG3ngC2VNnPT1GHjUPACPA7RA/D3G7T7zVg=
Subject key identifier:   5B:FF:50:C9:E1:5A:49:77:58:5E:21:DE:6C:40:6B:CD:4C:7B:60:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18FACEFE8E771D35E2634E0F0410ECF5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:41:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 62382
                          IP: 80.72.216.0/21
                          IP: 185.37.188.0/22
                          IP: 193.143.96.0/23
                          IP: 193.143.250.0/23
                          IP: 2a00:fa20::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:fa:ce:fe:8e:77:1d:35:e2:63:4e:0f:04:10:ec:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:41:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bff50c9e15a4977585e21de6c406bcd4c7b6095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:9c:d5:69:04:b8:86:51:2c:41:05:78:99:
                    0f:c9:ca:5b:36:52:e1:01:11:21:16:f6:bb:e0:f4:
                    33:a0:19:25:65:fe:a3:4b:c3:4e:13:5f:80:7c:fa:
                    2e:d4:83:bd:ca:f3:3f:aa:99:5e:fb:d9:fe:b9:fa:
                    90:bf:00:43:9d:b7:5e:ca:78:55:fd:fb:88:51:a5:
                    07:45:9d:a4:2c:08:33:45:34:df:37:90:d0:75:8d:
                    60:d1:70:49:11:61:6a:14:2a:db:76:6c:00:29:34:
                    13:23:67:35:35:95:d7:19:47:17:31:78:ed:d2:b7:
                    da:df:26:67:09:eb:1a:b9:3f:08:d3:e2:66:34:b7:
                    19:a7:6c:a9:d8:87:74:97:b9:37:10:9f:2e:f2:cc:
                    04:cc:0b:fd:8d:60:aa:f6:88:9e:9c:df:62:36:0c:
                    9f:b4:4c:f8:b7:e8:2f:31:c0:24:d3:ec:25:17:f4:
                    73:9e:70:eb:c6:b1:05:21:f9:2a:bc:20:c4:7d:f7:
                    81:18:3c:73:07:19:95:d6:1c:48:f4:c6:4b:42:fe:
                    46:02:30:72:e3:82:e5:fc:35:24:91:45:db:28:dc:
                    ac:43:cf:a3:d8:01:de:15:ed:cb:85:e9:71:26:2a:
                    06:b9:e0:1a:28:4d:27:02:14:3d:cd:96:65:59:8f:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:50:C9:E1:5A:49:77:58:5E:21:DE:6C:40:6B:CD:4C:7B:60:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/W_9QyeFaSXdYXiHebEBrzUx7YJU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.72.216.0/21
                  185.37.188.0/22
                  193.143.96.0/23
                  193.143.250.0/23
                IPv6:
                  2a00:fa20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62382

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:b9:87:8b:1f:48:f0:5c:fc:36:c4:2f:47:ee:d3:09:4d:
         bd:90:34:d5:9d:39:17:71:55:ea:ff:18:b3:03:a5:6d:64:76:
         83:a5:9a:dd:90:08:be:b3:af:60:9c:0b:68:b3:5d:ea:b6:72:
         3f:6a:bb:a8:0e:71:57:98:bb:c8:b3:3f:14:92:52:b7:82:5a:
         69:5d:3f:fb:af:fd:a5:2a:0d:64:71:ae:f3:6e:fa:2f:cf:fb:
         bf:6b:96:fc:78:fa:91:d2:b0:15:b4:de:d7:3d:65:ec:2a:99:
         f0:64:3d:3a:99:bc:d6:3f:75:44:a3:c7:a4:ad:d7:72:da:bb:
         e2:d4:fe:a1:21:c2:89:0d:23:7d:bc:e3:5e:33:d6:51:2c:81:
         71:50:e1:73:cd:00:55:55:0a:7a:45:62:56:a6:63:a6:a4:b2:
         a4:d8:30:ee:76:bc:ce:ae:5e:b9:cf:25:55:7f:4f:17:27:4d:
         22:ee:82:06:1f:d1:4f:14:83:1f:89:25:eb:c4:34:b6:77:3b:
         17:af:d9:a0:d2:cd:40:73:a3:91:9b:19:e3:01:71:16:15:f2:
         de:c9:4c:0a:99:f2:d4:2a:4a:a7:7f:da:16:ba:00:08:77:c7:
         af:32:ce:30:67:d8:df:e8:6c:df:ba:29:d2:ff:66:9d:6b:63:
         1b:15:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:58:06 2026 by rpki-client