Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
File: cwLNwp_coJ6aDz99IRPahafh1lQ.cer (raw, json)
Hash identifier: /76KXkWwynQPo/sF4zxEzXLkYFArm6maRq20oi7pLKM=
Subject key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDC685537B657A6FEBE7F2D247FC47F60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 10:19:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42075
AS: 43391
AS: 202991
AS: 206648
IP: 77.223.128.0/19
IP: 78.40.224.0/21
IP: 91.191.160.0/20
IP: 93.187.200.0/21
IP: 151.237.237.0/24
IP: 185.80.72.0/22
IP: 185.148.84.0/22
IP: 185.178.240.0/22
IP: 195.244.32.0/19
IP: 2a01:aac0::/32
IP: 2a0a:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:68:55:37:b6:57:a6:fe:be:7f:2d:24:7f:c4:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 10:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9e:73:d5:b4:07:05:4d:d1:3c:af:4d:fa:
ed:a7:e1:4f:34:fc:17:ed:b1:ad:91:5d:e0:fb:43:
b2:36:3f:f7:86:0e:2b:17:db:dd:d4:ae:4f:cb:9d:
58:5a:27:d8:d8:cc:d0:34:d1:ad:34:86:67:6a:20:
02:6d:f2:fa:9c:58:f1:7f:06:7e:9b:4f:22:f8:e6:
23:10:da:9f:fc:36:9a:e9:2b:f5:7e:01:ad:24:13:
a1:db:0b:2f:69:9c:2b:56:fc:bc:73:e3:a2:dd:53:
36:19:2a:6a:4d:e5:18:f5:40:5a:15:f4:55:05:e1:
ee:17:ac:b5:46:7c:6f:3b:f4:13:b5:9a:dc:7e:f9:
f2:03:52:81:0a:5c:f5:43:85:d3:c6:1d:a4:10:f8:
cc:a5:8d:c5:4a:e8:f1:3a:42:e6:49:c1:8d:79:b0:
be:f6:a6:7a:67:1b:e5:37:98:5b:f4:84:13:1c:ae:
1d:38:ff:f2:1d:3c:ee:70:29:e1:6f:62:6c:80:af:
ae:26:54:26:89:c8:9c:2c:28:1c:ae:37:30:5d:99:
53:07:9e:6b:00:8f:4a:79:08:b0:25:e6:68:e5:4d:
0b:48:46:e2:1f:ed:3d:31:e7:ba:b9:77:38:5f:8e:
c8:35:b8:82:f8:74:67:96:0d:2a:81:04:1c:26:69:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
151.237.237.0/24
185.80.72.0/22
185.148.84.0/22
185.178.240.0/22
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42075
43391
202991
206648
Signature Algorithm: sha256WithRSAEncryption
87:3b:15:c8:c6:a4:9d:ea:49:65:fb:eb:21:8a:9b:d7:00:88:
dd:29:95:96:f2:b1:ef:58:bb:48:e7:cd:b7:5e:f8:04:c8:6d:
3a:08:20:73:14:05:45:46:d9:1e:19:4f:35:92:c0:e7:5e:ea:
87:4b:ba:64:7b:d4:68:c4:00:d1:b9:c9:b5:78:00:b7:36:f8:
de:e4:63:15:c6:62:a2:03:d7:a4:ba:3b:9e:63:43:54:8c:f0:
c1:22:53:7e:0a:7e:7a:ca:41:3d:25:08:48:43:00:13:de:e9:
30:9f:f2:93:c3:49:86:7b:16:18:56:e1:63:c2:dd:3b:1c:c4:
7a:e1:5a:52:f4:56:bd:4b:e8:bf:ae:98:0f:be:53:4d:91:d2:
6f:07:72:4a:2c:bf:8b:e6:65:b9:1d:bd:57:a8:cc:c8:ff:77:
6f:41:a6:42:1b:32:e3:38:56:4f:e6:10:be:32:be:38:0b:a6:
50:ac:13:80:fc:80:75:59:6e:a8:84:ac:bc:c7:cc:2f:3d:0e:
d8:6b:1e:98:eb:63:76:ab:15:29:30:45:23:28:e6:87:27:70:
4d:8b:93:de:cf:ec:82:c2:8d:63:d8:16:2f:75:b1:d7:ff:d5:
29:bd:39:fb:83:3a:e5:3e:1f:9e:f7:51:ef:dd:b7:f0:ed:3d:
17:1d:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:46:27 2026 by rpki-client