Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
File: cwLNwp_coJ6aDz99IRPahafh1lQ.cer (raw, json)
Hash identifier: Z7P6IfW8gFZN/f7QDIEXDR96RTrzXh6XIuPelUbUBCs=
Subject key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FDB62EC300C43978E22019C0BFBCA2C95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Aug 2026 08:42:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42075
AS: 43391
AS: 202991
IP: 77.223.128.0/19
IP: 78.40.224.0/21
IP: 91.191.160.0/20
IP: 93.187.200.0/21
IP: 151.237.237.0/24
IP: 185.80.72.0/22
IP: 185.148.84.0/22
IP: 185.178.240.0/22
IP: 195.244.32.0/19
IP: 2a01:aac0::/32
IP: 2a0a:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:62:ec:30:0c:43:97:8e:22:01:9c:0b:fb:ca:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 08:42:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9e:73:d5:b4:07:05:4d:d1:3c:af:4d:fa:
ed:a7:e1:4f:34:fc:17:ed:b1:ad:91:5d:e0:fb:43:
b2:36:3f:f7:86:0e:2b:17:db:dd:d4:ae:4f:cb:9d:
58:5a:27:d8:d8:cc:d0:34:d1:ad:34:86:67:6a:20:
02:6d:f2:fa:9c:58:f1:7f:06:7e:9b:4f:22:f8:e6:
23:10:da:9f:fc:36:9a:e9:2b:f5:7e:01:ad:24:13:
a1:db:0b:2f:69:9c:2b:56:fc:bc:73:e3:a2:dd:53:
36:19:2a:6a:4d:e5:18:f5:40:5a:15:f4:55:05:e1:
ee:17:ac:b5:46:7c:6f:3b:f4:13:b5:9a:dc:7e:f9:
f2:03:52:81:0a:5c:f5:43:85:d3:c6:1d:a4:10:f8:
cc:a5:8d:c5:4a:e8:f1:3a:42:e6:49:c1:8d:79:b0:
be:f6:a6:7a:67:1b:e5:37:98:5b:f4:84:13:1c:ae:
1d:38:ff:f2:1d:3c:ee:70:29:e1:6f:62:6c:80:af:
ae:26:54:26:89:c8:9c:2c:28:1c:ae:37:30:5d:99:
53:07:9e:6b:00:8f:4a:79:08:b0:25:e6:68:e5:4d:
0b:48:46:e2:1f:ed:3d:31:e7:ba:b9:77:38:5f:8e:
c8:35:b8:82:f8:74:67:96:0d:2a:81:04:1c:26:69:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
151.237.237.0/24
185.80.72.0/22
185.148.84.0/22
185.178.240.0/22
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42075
43391
202991
Signature Algorithm: sha256WithRSAEncryption
33:17:fa:68:ab:ea:d5:ab:da:a5:93:d0:71:a4:9d:b4:71:6e:
1d:86:42:35:64:a7:04:f8:0f:eb:50:f9:20:46:0d:26:ff:6f:
86:46:6e:8b:e7:18:5f:42:16:a6:63:0f:69:fa:c1:d1:28:b2:
b1:4f:36:c7:b4:14:f3:90:66:1d:22:c4:20:04:8b:bf:60:f9:
32:7a:bf:80:93:d2:fe:22:a5:d3:4d:6c:fe:88:aa:ec:ee:c3:
2c:bd:1d:40:92:d0:01:6f:bf:18:1c:2d:3d:3e:f0:9e:bb:3c:
b7:ac:55:6e:6b:8e:01:e6:46:7a:bf:9e:ed:20:01:54:23:8c:
26:4f:60:b9:0c:cb:b7:0c:cd:18:45:98:7e:6c:aa:7e:81:2f:
39:07:a2:9d:b5:d8:81:8f:e6:68:4f:70:d6:b5:e0:10:2c:d2:
9a:84:ad:70:a2:6c:82:a7:c5:d4:e3:3b:89:4a:3a:e3:cd:e7:
59:ae:17:a7:0a:fe:8d:cc:f5:98:86:6a:2d:27:9e:ba:47:ee:
1e:64:5e:d3:27:c0:c9:d0:05:1a:88:9f:52:2c:66:2b:57:bd:
1b:ca:ac:34:b7:f9:19:02:04:3a:ba:f7:b6:3a:9f:0f:9b:1b:
b1:0d:a1:e9:d1:89:05:ec:f3:65:b7:80:87:25:6a:19:b4:e0:
85:29:0a:d2
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAZ/bYuwwDEOXjiIBnAv7yiyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODA3MDg0MjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzAyY2RjMjlmZGNhMDllOWEwZjNmN2QyMTEzZGE4NWE3ZTFkNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl06ec9W0BwVN0TyvTfrtp+FPNPwX
7bGtkV3g+0OyNj/3hg4rF9vd1K5Py51YWifY2MzQNNGtNIZnaiACbfL6nFjxfwZ+
m08i+OYjENqf/Daa6Sv1fgGtJBOh2wsvaZwrVvy8c+Oi3VM2GSpqTeUY9UBaFfRV
BeHuF6y1RnxvO/QTtZrcfvnyA1KBClz1Q4XTxh2kEPjMpY3FSujxOkLmScGNebC+
9qZ6ZxvlN5hb9IQTHK4dOP/yHTzucCnhb2JsgK+uJlQmicicLCgcrjcwXZlTB55r
AI9KeQiwJeZo5U0LSEbiH+09Mee6uXc4X47INbiC+HRnlg0qgQQcJmkKPQIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFHMCzcKf3KCemg8/fSET2oWn4dZUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4Lzc3MjE3
ZC04MTRiLTQ4NmEtOGVmMi1mZTAzMzNlZDAwNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNzcyMTdk
LTgxNGItNDg2YS04ZWYyLWZlMDMzM2VkMDA1Zi8xL2N3TE53cF9jb0o2YUR6OTlJ
UlBhaGFmaDFsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF
BwEHAQH/BFYwVDA8BAIAATA2AwQFTd+AAwQDTijgAwQEW7+gAwQDXbvIAwQAl+3t
AwQCuVBIAwQCuZRUAwQCubLwAwQFw/QgMBQEAgACMA4DBQAqAarAAwUDKgq+gDAk
BggrBgEFBQcBCAEB/wQVMBOgETAPAgMApFsCAwCpfwIDAxjvMA0GCSqGSIb3DQEB
CwUAA4IBAQAzF/poq+rVq9qlk9BxpJ20cW4dhkI1ZKcE+A/rUPkgRg0m/2+GRm6L
5xhfQhamYw9p+sHRKLKxTzbHtBTzkGYdIsQgBIu/YPkyer+Ak9L+IqXTTWz+iKrs
7sMsvR1AktABb78YHC09PvCeuzy3rFVua44B5kZ6v57tIAFUI4wmT2C5DMu3DM0Y
RZh+bKp+gS85B6KdtdiBj+ZoT3DWteAQLNKahK1womyCp8XU4zuJSjrjzedZrhen
Cv6NzPWYhmotJ566R+4eZF7TJ8DJ0AUaiJ9SLGYrV70byqw0t/kZAgQ6uve2Op8P
mxuxDaHp0YkF7PNlt4CHJWoZtOCFKQrS
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:27 2026 by rpki-client