Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
File: js94ugJ10dO2SSqOnWEGE8Awahc.cer (raw, json)
Hash identifier: 2N+5jNYTXk1r1VvgffhvNevKYPzJ+5VAx9w53B7zkWQ=
Subject key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED9BBBC5615F2923330CBA9E19A82D7EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 07:56:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.28.196.0/22
IP: 185.34.188.0/22
IP: 2a00:db60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:bb:bc:56:15:f2:92:33:30:cb:a9:e1:9a:82:d7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 07:56:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:36:f6:ee:7d:5d:83:90:76:36:ea:e4:98:
68:49:39:22:e8:46:34:fc:c2:51:a6:64:80:9f:cb:
61:d5:c6:ef:78:b5:71:e1:b1:b1:99:d9:aa:c6:c7:
00:00:33:cc:e5:b1:0a:70:67:9c:74:f7:86:43:7b:
ab:b9:ad:2e:09:f1:ab:a0:94:17:e1:29:11:27:d2:
fe:d7:1d:98:e2:27:51:97:07:5f:08:52:13:7d:62:
45:b2:55:9f:67:84:20:43:34:21:b3:e1:13:0d:f3:
82:4a:15:f7:44:b1:db:c4:aa:e7:f8:21:81:70:9f:
64:cb:1f:02:d9:08:24:6c:ce:99:4f:ed:24:ab:2c:
32:08:7d:9b:41:a2:f0:07:fa:67:e9:ad:7e:91:e6:
ac:f1:7b:fa:22:bc:9d:bc:ce:c6:ff:b8:49:a9:0b:
05:8e:bc:90:45:75:53:5e:bb:20:87:68:4f:b6:05:
b5:a5:fd:cb:45:bf:43:4b:93:86:32:6b:e5:f9:3d:
fa:7d:c5:f0:91:ff:45:e8:e3:ad:f2:f2:b5:13:d7:
94:94:ba:3e:10:a9:af:89:5d:a1:d5:8e:20:c8:de:
f7:91:a0:4f:86:ca:e1:a0:f6:b4:fe:b1:7e:f6:c8:
bc:de:43:16:ab:33:a9:a2:d6:96:c5:df:cc:45:85:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.196.0/22
185.34.188.0/22
IPv6:
2a00:db60::/32
Signature Algorithm: sha256WithRSAEncryption
8c:be:29:05:d1:b2:19:5d:34:28:87:21:bb:a5:f5:0a:65:87:
ba:d2:6c:96:51:b9:8f:6a:19:26:a8:74:76:01:2e:7a:ad:88:
21:52:fe:a1:5c:d8:09:18:bc:16:45:3b:90:77:ab:99:ba:2f:
c8:71:57:29:71:cb:8e:bd:76:1f:b1:c0:71:db:ba:80:67:3c:
c1:aa:ac:f1:ed:25:2a:62:8f:ab:ae:84:11:2a:c9:42:ef:fe:
44:cf:f2:cb:2d:14:3e:76:e0:4f:e0:6b:c5:0a:09:3b:20:0f:
59:7f:92:bd:a6:cb:85:89:b3:90:ed:d1:32:f8:fc:9d:5a:14:
22:ce:0c:b8:fb:40:e9:12:98:80:66:2c:ef:15:d4:1b:d5:32:
c8:76:bc:1d:13:db:92:74:83:7d:2e:f4:20:ef:fb:71:41:5d:
07:cf:15:f5:58:76:8c:97:e9:4c:75:2d:a6:f6:44:f6:34:b2:
3c:21:48:88:95:86:35:69:63:17:0c:24:42:18:7d:f9:47:4d:
c6:6d:4f:17:08:85:14:5e:98:fe:3d:6c:fa:cf:29:41:be:59:
47:96:1d:9d:89:68:45:a2:c7:e9:10:c4:e0:0e:a5:5b:e5:d6:
4e:d4:29:e7:9f:bc:a8:66:91:9b:e7:39:a9:38:18:34:ed:bc:
89:8a:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:13:27 2026 by rpki-client