Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer (raw, json)
Hash identifier: qkP2u+pfHUtTpmzF04/9C5YZl0O4MmyvgX+M7KG7q/U=
Subject key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E6339602D4E346E6A4B31A6314C102A78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 May 2026 07:39:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12577
IP: 185.104.224.0/22
IP: 212.108.32.0/19
IP: 2a00:1618::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:39:60:2d:4e:34:6e:6a:4b:31:a6:31:4c:10:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 07:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0966d239db4031fd6f147f601a2bb6b033314069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:36:be:d9:b2:ba:af:1b:78:3e:cb:9a:b7:
d1:7e:10:d5:87:3b:b9:53:ad:c9:73:df:e0:db:4e:
d9:19:9e:a0:cc:b1:25:e4:11:fc:48:c3:29:ff:0a:
38:d8:6b:9d:64:a7:a1:56:14:93:1c:e9:74:d1:ee:
66:46:5b:77:31:1a:8f:e2:82:c9:fb:6c:87:b5:92:
86:58:07:52:d1:ba:dc:de:cb:12:ef:b9:3f:9b:de:
bf:dd:78:60:12:ff:e4:3c:fd:06:ae:92:39:05:d8:
27:ab:f5:c2:df:20:2a:0d:4e:3d:ef:e4:f3:58:36:
7e:b7:5a:bc:8a:a7:3b:d8:5d:35:93:71:53:c6:75:
71:b5:78:a2:a8:a9:32:e9:f6:4b:c0:43:da:32:48:
10:52:fc:23:6b:2c:9f:2d:25:b1:e3:5e:0b:14:32:
6a:34:45:10:48:79:39:89:45:24:54:5f:66:91:33:
ea:b6:6b:87:08:ee:3e:b7:c5:2b:6a:bd:66:67:ed:
8a:5b:f7:1a:16:86:77:40:8f:94:0e:fc:cf:db:90:
a4:46:cf:49:2e:9c:bf:28:37:a9:0a:0a:46:9e:50:
d3:fb:47:7e:cf:00:77:9f:d9:6a:3f:95:38:88:d0:
bf:96:e2:8a:36:1f:b9:ae:81:86:2e:d1:45:03:28:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.224.0/22
212.108.32.0/19
IPv6:
2a00:1618::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12577
Signature Algorithm: sha256WithRSAEncryption
4f:c4:2a:93:6f:b6:93:7a:93:2c:31:20:32:2b:38:04:34:22:
f5:32:04:88:87:10:0d:1b:18:77:e0:ec:bf:0d:13:cc:37:55:
70:df:e7:8c:77:95:1b:76:72:6d:59:1d:e5:e3:c4:41:ac:ae:
49:db:ee:24:5e:5e:97:1c:77:a2:cb:f6:5c:cf:7b:1d:08:52:
cb:ac:1d:14:96:bc:d9:d9:61:0c:7a:75:77:ad:21:3e:62:bd:
87:25:87:3a:6e:83:30:5d:03:67:80:0d:e3:c8:8f:fa:03:1b:
7c:60:cc:9e:f7:d3:3b:cf:a2:a2:c4:e5:aa:48:d8:92:ce:e6:
11:6c:22:03:2e:c6:50:e7:27:96:8b:f3:14:a8:e0:41:ad:88:
83:fe:a5:e3:08:08:64:5d:e8:0f:d6:16:2c:fd:64:39:ad:00:
e6:69:25:a3:8b:b6:63:e0:e7:80:4d:8c:70:ce:df:bf:2a:9f:
b1:97:22:ec:9d:77:95:8c:5a:a2:60:b8:1c:3f:31:33:3e:b3:
43:68:76:0c:52:2f:42:81:d0:8d:6e:08:00:82:11:cb:f2:60:
0f:06:c9:5e:c0:ca:d8:67:70:db:5b:5e:30:83:ab:fb:26:0a:
17:05:86:bd:1d:dd:71:13:e6:3e:90:95:7c:7a:b7:1a:bd:af:
dd:5c:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:04:20 2026 by rpki-client