Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
File: jDOuTBqzl29JpB_r6aCPUrauED4.cer (raw, json)
Hash identifier: Ugu46vdmamP2TIApAKW53UN90a7p3iLN08LRb7Bcgfs=
Subject key identifier: 8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A163EA1C850B89ACDD12A888182B66F57D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Oct 2026 14:00:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57261
IP: 188.0.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:ea:1c:85:0b:89:ac:dd:12:a8:88:18:2b:66:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 14:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c33ae4c1ab3976f49a41febe9a08f52b6ae103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:a1:d6:90:ca:ee:92:59:6a:28:18:70:58:
1a:3b:13:dc:bf:90:73:53:7d:12:16:23:ff:5f:ee:
40:36:f3:e9:76:53:98:57:d5:09:1b:a8:8f:93:34:
dc:69:e2:a4:f4:c0:b6:da:c5:68:77:ba:f8:1d:ac:
c0:34:05:98:34:f5:f2:8d:79:36:d0:55:e4:d4:00:
ef:37:f8:bf:1f:2a:67:0a:88:31:83:69:ba:93:0c:
f3:52:fa:aa:bd:32:25:52:a2:6f:ea:28:c0:45:e5:
50:2b:e2:c6:17:02:29:84:4f:2f:b6:64:58:71:e6:
b0:52:b2:9f:8c:43:de:7b:6a:29:c4:d8:71:75:b5:
0e:4c:23:62:86:59:27:a5:29:61:b9:5c:c7:51:5e:
0e:c1:09:59:a4:3f:5d:51:14:a0:f1:29:af:4c:0d:
c5:2f:d3:37:72:92:47:5e:23:87:45:27:2f:2b:21:
00:f6:aa:65:77:93:fd:d0:8a:8e:1e:15:e5:e3:c4:
fc:97:3d:15:5c:95:fd:ef:7b:ba:f1:39:50:2c:6e:
b3:4c:72:eb:11:fa:cb:9c:a8:ca:48:16:62:60:18:
19:d9:c0:12:63:8b:fa:3e:53:40:06:b9:53:54:43:
4b:35:52:01:f2:17:62:1c:41:20:e6:78:df:3f:a4:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57261
Signature Algorithm: sha256WithRSAEncryption
af:42:f1:c5:3a:23:49:86:78:74:a5:9c:a9:27:7b:80:d7:63:
f2:f9:82:4d:96:57:fa:6a:82:12:26:de:4a:d7:42:24:a7:e9:
80:05:c2:47:41:92:71:ec:3b:23:49:5b:b5:b0:4a:73:8e:fb:
9d:be:45:5c:ef:93:f4:30:d6:b9:12:ad:a4:f3:c0:8f:42:3f:
ac:a9:3e:bb:aa:d6:6a:2d:92:e1:cf:d9:6e:2a:73:07:15:08:
83:97:b8:ed:7b:63:0e:b8:1a:f7:74:83:a8:58:56:54:09:7f:
1d:9b:5a:a5:77:a1:4f:07:1b:03:db:79:4a:f4:24:c1:ba:72:
0a:37:cf:26:96:a2:eb:62:9c:50:a4:8e:e0:9c:84:1a:20:96:
60:5c:89:23:ad:fd:22:39:8b:8b:10:83:6c:00:4c:9f:67:51:
64:46:d8:47:8a:8d:84:8e:79:e8:63:67:28:25:f9:97:bb:33:
92:9d:8b:7e:94:1f:00:35:7f:d4:d9:94:11:68:e0:92:5c:cd:
12:c2:c7:02:a3:09:05:c6:91:e0:49:98:c0:36:ff:aa:fd:63:
7c:47:58:bd:4f:f3:c2:06:61:ca:1c:07:b7:65:1a:d2:40:4f:
e4:5d:6a:6e:d5:d5:df:d7:9a:51:f3:2f:11:08:c1:97:dc:af:
e6:b5:a1:78
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAaFj6hyFC4ms3RKoiBgrZvV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDIyMTQwMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzMzYWU0YzFhYjM5NzZmNDlhNDFmZWJlOWEwOGY1MmI2YWUxMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovyh1pDK7pJZaigYcFgaOxPcv5Bz
U30SFiP/X+5ANvPpdlOYV9UJG6iPkzTcaeKk9MC22sVod7r4HazANAWYNPXyjXk2
0FXk1ADvN/i/HypnCogxg2m6kwzzUvqqvTIlUqJv6ijAReVQK+LGFwIphE8vtmRY
ceawUrKfjEPee2opxNhxdbUOTCNihlknpSlhuVzHUV4OwQlZpD9dURSg8SmvTA3F
L9M3cpJHXiOHRScvKyEA9qpld5P90IqOHhXl48T8lz0VXJX973u68TlQLG6zTHLr
EfrLnKjKSBZiYBgZ2cASY4v6PlNABrlTVENLNVIB8hdiHEEg5njfP6TL+wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIwzrkwas5dvSaQf6+mgj1K2rhA+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzE3ZDY0
My1hMmU0LTRjZjctOGZhYi1hMDNjYmQzMGFlNmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMTdkNjQz
LWEyZTQtNGNmNy04ZmFiLWEwM2NiZDMwYWU2YS8xL2pET3VUQnF6bDI5SnBCX3I2
YUNQVXJhdUVENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFvAAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDfrTANBgkqhkiG9w0BAQsFAAOCAQEAr0LxxTojSYZ4dKWcqSd7gNdj8vmCTZZX
+mqCEibeStdCJKfpgAXCR0GScew7I0lbtbBKc477nb5FXO+T9DDWuRKtpPPAj0I/
rKk+u6rWai2S4c/ZbipzBxUIg5e47XtjDrga93SDqFhWVAl/HZtapXehTwcbA9t5
SvQkwbpyCjfPJpai62KcUKSO4JyEGiCWYFyJI639IjmLixCDbABMn2dRZEbYR4qN
hI556GNnKCX5l7szkp2LfpQfADV/1NmUEWjgklzNEsLHAqMJBcaR4EmYwDb/qv1j
fEdYvU/zwgZhyhwHt2Ua0kBP5F1qbtXV39eaUfMvEQjBl9yv5rWheA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:56 2026 by rpki-client