Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
File: JaizJB9Uy4zEo2EkJxnto1ALWPM.cer (raw, json)
Hash identifier: f/FvmnEYCEZyPKUdHFEsFo6dKI+Z4sHbktV+gC3YTqM=
Subject key identifier: 25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D9A25CE4F37DBBBFD2A1EF700ADFCCD4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Apr 2026 06:34:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203374
IP: 2001:67c:2e4c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:25:ce:4f:37:db:bb:fd:2a:1e:f7:00:ad:fc:cd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 06:34:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:12:ab:b9:c9:43:6d:05:c2:0e:0c:53:86:
3e:90:36:58:c3:3a:4f:c7:ef:11:22:ee:c6:22:46:
45:88:ec:0d:31:45:a2:03:76:32:33:ff:f4:cd:7c:
65:14:96:c6:20:87:89:dd:de:0d:a2:1f:f9:4e:49:
3e:b6:af:69:e5:20:4e:89:7a:d8:de:b8:33:d2:7d:
8e:39:48:98:76:cf:c3:7e:0c:cb:59:a5:c0:e6:dc:
46:31:56:15:9b:9b:a3:e3:a0:58:63:c8:9d:6b:45:
0f:d5:2d:5c:64:a6:b6:d4:ab:43:ed:e6:cb:7f:74:
b3:ab:3c:f8:df:95:a3:22:92:95:b1:fa:29:64:ea:
fc:3c:e0:af:bf:d8:63:3b:a5:02:6d:d7:4a:72:73:
ad:21:66:9c:59:34:ce:ed:aa:e3:88:73:ab:3d:a6:
51:db:1f:a4:1e:55:48:87:35:4d:fc:cb:23:b7:11:
03:7e:70:6c:a2:e8:41:b5:79:cf:04:57:55:22:10:
e4:ec:ff:75:19:b4:5a:d7:4c:84:6a:2b:0e:10:3e:
40:b3:c7:b0:39:1e:68:70:4d:5b:21:d2:66:41:fd:
ce:9f:ec:5a:e2:5a:3d:6f:de:91:d0:3e:03:c5:6c:
44:4d:08:15:0f:58:6a:0b:23:e8:cc:4e:32:e5:41:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2e4c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203374
Signature Algorithm: sha256WithRSAEncryption
99:12:04:52:74:73:5e:c4:65:68:4d:47:4b:0a:8b:e5:e2:09:
63:dd:a0:a4:3a:31:f2:9e:85:74:9f:0a:4a:ae:7e:90:5d:bf:
e1:86:9d:33:ca:78:f4:19:9c:bd:10:65:3b:f2:3b:70:41:0e:
b3:69:bd:3d:22:57:c2:c2:da:cf:7e:1d:1f:81:ae:c7:b3:2a:
98:0d:2d:da:9f:f2:83:bb:3e:f1:fd:1d:a5:03:eb:e9:d5:f4:
4c:65:85:b4:3a:07:49:f6:96:ec:6e:35:e0:fc:ef:3e:2e:60:
79:f4:6b:21:b4:b1:ef:a7:7e:71:72:ed:24:6d:df:5c:5c:77:
43:d4:ab:a9:66:1d:68:39:d3:28:7d:f8:6b:64:e0:43:c8:d5:
b3:02:af:b4:a1:75:fa:77:47:56:0a:41:91:34:24:b8:67:6b:
3d:f5:2b:8f:e4:65:a9:fa:c1:4d:50:b3:db:77:e2:8a:52:4d:
81:c2:0d:88:bf:b9:ba:f2:bd:e8:37:aa:02:25:4b:b3:78:6f:
db:f8:64:b9:b3:93:40:56:cf:76:38:51:45:9a:bd:28:0a:7b:
91:ed:e7:08:03:b5:95:f2:94:5a:af:ec:61:12:0a:2c:29:c2:
60:99:28:46:55:e3:e5:75:e0:f4:61:14:d8:de:d5:c9:69:1b:
b7:73:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:02 2026 by rpki-client