Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
File: Scc7ws4hVAJgNLw7kL1jgx94sAU.cer (raw, json)
Hash identifier: xorqj2FoU2ETGbuIjX1pluDQJdccCLU6AYfhUkbC8H8=
Subject key identifier: 49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06D4DFF0A48A3F38C8971A26F5494D194
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 16:43:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.34.68.0/22
IP: 193.27.72.0/23
IP: 2a04:5f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:4d:ff:0a:48:a3:f3:8c:89:71:a2:6f:54:94:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 16:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c73bc2ce2154026034bc3b90bd63831f78b005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:ca:a5:7d:5a:a0:3e:41:2f:a9:5f:f8:ca:
62:9e:bf:7a:71:15:fc:dc:70:a6:2a:ec:2e:da:f8:
c8:9d:3f:2c:44:74:a2:09:9b:79:49:4e:a7:13:e8:
db:11:b1:dc:5f:93:eb:3b:e9:2a:08:ca:33:cd:09:
fc:69:59:75:fe:c8:a6:b3:d0:8f:4b:79:ea:26:f4:
35:63:6d:99:64:2b:cc:73:dc:96:ab:2a:6f:57:ce:
95:d6:36:62:bd:2a:13:71:19:86:39:aa:43:77:f4:
0b:ea:69:51:ff:e6:0f:4d:2d:47:77:34:05:2c:0f:
0e:93:e0:d8:07:f8:c2:45:72:a0:6d:15:e4:80:40:
bd:3c:62:3f:e0:16:60:5c:b8:c3:7c:5f:4f:68:f3:
bf:bb:4f:60:29:2e:70:e3:33:65:72:92:c5:c1:de:
fd:f1:69:42:4c:3b:61:9d:9c:82:ec:ba:26:8c:e2:
18:33:42:de:c6:f0:52:3b:4a:6b:02:dd:a9:f2:d1:
3a:18:c4:01:a1:6d:0d:0c:08:dc:73:8b:cc:9c:98:
57:c9:12:4a:ce:05:74:82:c9:ef:82:a1:87:87:d7:
e7:ed:42:6a:2b:b2:33:1c:04:fa:71:10:e7:4e:de:
a6:3f:41:cc:ea:21:7d:be:01:ba:30:04:85:5f:e0:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.68.0/22
193.27.72.0/23
IPv6:
2a04:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
42:ee:df:35:2a:2a:5e:5c:e2:2f:8a:3c:ff:41:5f:dc:8c:89:
5c:cd:36:38:2e:91:06:33:d3:3a:c4:7a:78:12:e3:04:f5:8c:
e0:7f:0a:ec:26:05:d9:bf:76:ce:33:d9:36:b9:f7:c0:6c:72:
0c:73:67:f9:96:40:75:e4:39:ab:ca:e9:1d:77:b8:fc:fb:21:
fa:c3:92:d9:89:51:c4:93:9a:2f:c2:51:73:79:5e:99:61:9c:
98:28:1d:0e:ac:39:49:33:c7:bd:cf:cf:47:24:f3:43:cd:d0:
e1:c5:f1:a8:e0:65:b5:ef:40:5c:16:a2:7f:fd:cb:e6:be:d7:
13:09:00:96:60:bf:3c:93:17:85:1c:7b:7e:d7:67:ff:cb:7c:
ee:a4:ca:ff:5c:1a:88:8e:10:69:4e:df:09:db:b7:78:c5:4d:
11:96:51:69:7a:f2:7a:80:eb:98:ad:e8:a6:23:cc:87:4e:2c:
09:a4:40:89:cc:67:5b:be:65:04:3c:3a:cc:94:25:0a:42:3e:
3c:ff:02:ee:98:ac:a8:ae:d2:56:36:c8:ad:67:3a:e8:fe:a8:
86:4e:d4:7d:54:00:c9:a0:ea:1d:20:1d:e5:7f:a6:02:d3:c9:
16:11:e0:df:82:ae:a5:5b:64:2a:1f:fd:8d:a8:ab:84:05:dc:
75:22:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:06 2026 by rpki-client