Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
File: JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer (raw, json)
Hash identifier: b/6Cl9O0nwFoQqFCUmGaH7BALQ+fjJeDfvjR+yW/RoY=
Subject key identifier: 25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01A5A89726B3F1CC01403B6834BC3E7F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Aug 2026 14:08:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 198.60.216.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:5a:89:72:6b:3f:1c:c0:14:03:b6:83:4b:c3:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 14:08:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:df:81:e9:81:5a:fe:72:47:35:8c:d1:56:
c2:7f:d5:b4:9a:e2:d2:cd:e0:36:dc:f9:f1:a3:35:
0a:09:d9:e9:8b:63:5f:06:7b:7a:9c:1a:82:70:21:
62:34:d4:ee:18:15:7e:61:a0:e3:37:65:c5:11:66:
11:3f:47:0e:51:b1:aa:a6:75:7d:93:51:dd:a9:e8:
7d:35:0b:17:b7:56:82:0f:f0:af:67:f2:b6:10:4a:
dd:53:59:d6:95:3d:d8:e2:b2:99:35:6a:c5:70:1d:
8f:81:37:13:ba:a1:fc:4e:5e:43:40:c1:db:72:96:
8d:1a:f7:c0:65:6e:a5:d8:e1:5c:55:c8:43:41:5b:
39:05:71:12:d5:3c:87:e3:2d:a1:87:86:ab:16:7f:
8e:7b:aa:44:29:dd:ef:21:a5:1d:62:be:f7:52:25:
22:8f:3b:16:66:c8:80:b0:50:83:28:d8:ab:c8:c6:
3b:6b:ea:22:50:b9:c3:bd:1d:aa:86:9d:e3:b9:0e:
31:f5:93:34:fa:7b:b3:2c:f4:af:67:df:f1:49:56:
d9:cf:57:78:32:8b:a4:82:68:5a:c7:16:fd:c4:e3:
c2:6f:93:e4:c8:45:94:7a:d3:f0:e7:90:2b:f6:ef:
00:6e:04:17:20:5b:d1:d4:df:ce:df:c0:81:ce:26:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.60.216.0/24
Signature Algorithm: sha256WithRSAEncryption
21:12:75:71:53:2a:50:6c:e3:3f:7f:bf:f8:20:55:16:b7:51:
5d:5d:4c:74:48:b4:17:48:7e:54:f6:22:b1:fc:86:ed:d8:dc:
9f:a8:8f:ea:4a:fd:9a:1f:39:19:82:ab:db:a8:48:6d:5e:13:
2d:1a:35:c8:cf:7c:98:8b:46:90:ef:b5:47:2b:0f:b7:82:14:
2e:4d:af:63:8d:01:e7:d1:b7:3b:82:a6:94:d6:53:c5:6a:72:
24:c1:ca:6b:73:3b:d4:eb:ef:a2:de:50:0a:c0:65:77:63:b9:
ed:fc:26:d8:59:8b:96:6e:c2:b5:b4:35:46:68:02:d2:f3:c8:
f6:65:e2:fa:c2:fe:2e:5e:6c:9f:8e:42:b9:12:0a:05:7c:e6:
b3:e2:a2:78:ac:fe:e0:f8:d3:02:c7:be:fa:7f:d3:30:54:20:
8a:00:2b:ee:81:58:6c:b4:9d:3a:91:e5:3e:50:be:01:d1:5b:
ad:29:70:7d:a9:1c:ae:54:54:ab:4c:a4:4b:66:02:a5:f6:5a:
99:d4:e6:36:49:27:04:55:7a:0d:1a:68:9f:95:0c:a7:1f:11:
27:cc:e3:1a:b2:c6:10:c1:6a:78:13:ab:29:12:61:ca:93:e4:
fe:2c:a1:4a:de:45:b3:fa:f0:17:cd:e9:f0:81:18:b0:c3:07:
a6:37:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:39:59 2026 by rpki-client