Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
File: LWHdlSWcJozW425VvLLLzFNbCog.cer (raw, json)
Hash identifier: oA/xZw2GUFa2r1hveTnJDrxxZwkXiqFyw7qWvvYlpI4=
Subject key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0FD10F9CB475653BD432E7B402140057C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Oct 2026 14:42:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 128.86.128.0/17
IP: 137.253.0.0/16
IP: 192.12.72.0/24
IP: 192.138.1.0 -- 192.138.8.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:10:f9:cb:47:56:53:bd:43:2e:7b:40:21:40:05:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 14:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:4e:b3:57:14:03:02:b0:3b:3b:88:1f:96:
b3:db:49:f0:e2:32:36:08:3a:bd:1b:87:29:2a:e8:
07:a6:f5:06:47:f6:2f:83:d1:14:63:8a:5c:b1:02:
5b:d1:92:51:34:9b:7b:f4:a2:ce:03:c3:b0:06:ae:
85:2d:48:dd:7d:e0:c3:55:54:dc:91:fd:cd:9f:af:
11:69:9e:94:1d:31:33:86:1b:30:29:af:49:eb:46:
04:a8:b6:58:95:ae:4d:e8:88:0d:2a:03:ee:f4:53:
a7:7f:b7:52:30:8f:69:e8:05:86:54:7b:15:7e:68:
a1:5e:ee:c4:64:f5:77:6c:4c:a5:b4:bb:54:45:fe:
4c:e9:52:74:3d:31:1e:b8:7a:9e:b9:ef:3f:f6:b3:
e2:98:82:09:78:4d:31:cd:3d:1e:13:95:cf:61:92:
98:61:8c:fe:43:c4:69:32:b7:d4:1f:a6:af:8b:94:
69:86:e2:41:21:28:91:81:73:49:02:1c:b1:a5:42:
24:c3:ad:48:a5:80:4f:ae:4e:22:06:ac:05:36:e3:
b1:8b:9f:63:f2:db:7d:44:d4:d8:35:24:bc:c0:e9:
d3:50:70:e8:3c:84:27:24:c6:c1:0e:59:1a:57:c8:
1a:ef:ae:07:58:29:00:e4:3e:be:18:04:bb:f0:db:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.86.128.0/17
137.253.0.0/16
192.12.72.0/24
192.138.1.0-192.138.8.255
Signature Algorithm: sha256WithRSAEncryption
8a:4a:ed:49:75:83:7a:3f:ba:83:ae:36:98:1e:1f:df:cc:d8:
8e:8b:24:9c:eb:7c:74:d5:06:26:d5:70:67:6d:05:19:de:47:
7c:e9:bc:aa:67:f3:84:69:52:2b:0b:d9:8d:45:a6:61:df:a8:
1e:e2:1a:f6:af:19:09:eb:fa:08:82:14:a0:45:f7:ee:39:1a:
5c:ff:b2:85:ab:88:89:21:88:bd:42:c4:c5:1b:18:83:79:35:
42:bb:ca:88:07:de:21:3a:3b:78:c6:fd:83:27:d8:b5:bc:e9:
50:09:2e:5d:56:97:88:b7:a8:42:ae:3a:bb:29:ec:51:45:f6:
8c:3a:a7:7b:77:8d:27:7d:b4:0d:2f:fd:5f:65:12:9a:77:b4:
30:0e:8d:9e:34:0a:d8:39:dd:5c:f9:64:80:2a:a2:31:2e:a4:
37:4c:92:db:93:19:e8:f6:3d:cc:0d:64:66:2f:b2:bf:5e:f3:
d0:16:1c:22:2c:48:81:db:ea:17:45:46:55:cd:0c:9c:78:17:
11:90:29:9a:56:38:71:09:57:f3:53:5b:94:ca:8f:05:a4:60:
ff:ba:b0:69:73:a5:fa:78:01:bc:54:60:b3:9c:73:3f:f1:ed:
c7:f3:e8:05:71:00:ca:e9:c0:79:bf:49:3f:b4:56:81:81:86:
05:35:57:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:28:59 2026 by rpki-client