Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
File: JZB_kNn52QL88EvQtGFSw4J6fVA.cer (raw, json)
Hash identifier: b95w1VKbJgcZvdAW1cP/0yq+/L49aiGsTGACIFATkNY=
Subject key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11545911CC364704908E658DD736F2089
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Oct 2026 07:30:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199393
IP: 192.118.132.0/22
IP: 194.169.183.0/24
IP: 2a13:c480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:45:91:1c:c3:64:70:49:08:e6:58:dd:73:6f:20:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 07:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:33:37:1e:f4:34:b4:d5:d0:a9:92:4e:ea:
c6:49:14:c0:21:ac:12:3a:5c:7a:05:b3:cb:87:bc:
24:43:0d:07:80:c8:aa:6e:b3:0c:8f:67:2e:a8:ba:
f0:38:d5:2a:00:9e:72:00:d2:47:8c:fe:cb:75:79:
1b:dc:62:50:4f:73:4b:64:df:51:a3:c0:96:a7:ba:
5a:f4:b7:3f:ee:eb:09:d9:6d:3e:93:93:90:2d:a3:
e1:15:47:d2:c5:ba:e3:a6:16:c8:ee:fb:bf:ca:3f:
63:ce:b7:72:24:ef:0b:7b:3e:a2:49:4b:6b:e3:69:
1c:92:72:04:54:e8:9b:e0:43:90:85:67:c0:6b:91:
b2:3f:7b:49:b7:47:cd:83:14:aa:e6:bd:ab:16:cc:
24:85:19:77:72:5a:88:b1:80:71:b3:42:f0:66:27:
7d:65:54:59:ef:6f:71:8e:bd:1f:c4:af:69:39:a1:
ba:04:3e:d7:bc:df:3f:1a:81:fb:bc:89:0a:82:55:
f3:8c:17:33:de:4e:52:e0:0e:59:c0:de:2b:22:6a:
92:7f:5e:3b:7f:15:58:78:0c:1a:36:15:0b:b1:4f:
ce:a0:94:ea:03:24:92:97:51:46:86:5e:e0:6e:ec:
45:ca:fe:91:49:84:2a:35:81:84:09:e8:69:3c:77:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.132.0/22
194.169.183.0/24
IPv6:
2a13:c480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199393
Signature Algorithm: sha256WithRSAEncryption
6c:58:d5:54:ea:eb:82:eb:b2:a0:74:7d:b1:d9:bb:e3:9e:fc:
1d:95:dd:d1:da:01:19:04:f7:3b:e7:e4:64:57:1f:16:15:0d:
f9:bb:c4:fd:43:1e:e4:97:62:cd:4c:af:ef:5e:95:e3:2e:50:
a2:4d:f4:41:4c:2b:0b:98:2a:de:7f:b7:35:6f:ba:d2:25:d5:
91:e7:c7:cf:6e:fb:59:eb:6f:64:3a:7a:4d:2b:e7:5f:c7:87:
26:77:d3:24:8d:0d:89:94:a7:c1:16:e4:9f:2e:e0:07:5b:19:
01:9b:89:11:76:ac:58:59:61:7f:91:08:0a:97:d1:5b:e4:9a:
77:ea:71:b9:11:ae:52:0b:cb:b5:61:5d:84:dc:e5:1c:1e:80:
0c:f6:45:85:14:b1:8e:49:4a:d1:d5:2e:43:60:50:17:64:2c:
ad:09:5b:b6:50:98:53:7f:a5:cd:a9:37:dd:36:ec:7a:a2:71:
97:bf:31:12:6a:9e:2b:44:4f:d2:77:bb:4b:5f:b1:94:50:df:
52:d8:c1:37:1b:bf:60:ab:05:ed:5b:52:81:7e:53:a0:43:1b:
ed:51:0d:ca:48:75:bc:d3:13:77:80:11:51:93:a1:e0:bc:6f:
c0:82:4b:a1:05:9b:20:f0:30:0d:17:46:24:dd:08:1a:f2:dc:
ef:3e:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:28:31 2026 by rpki-client