Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
File: W2EaPPrpUXZM-WaaBo1M50-mGag.cer (raw, json)
Hash identifier: yiZXZ4sEEKiVbWzJgZGWALdzrNpgBH9GPP4xJCLEQy4=
Subject key identifier: 5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0498F64EFF5F26457D1F6FD928ED8B50E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 18:08:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 176.123.52.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:8f:64:ef:f5:f2:64:57:d1:f6:fd:92:8e:d8:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 18:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:9e:e4:4b:af:8b:23:34:53:19:84:09:ac:
6e:4a:a6:7f:ad:aa:65:72:b0:e6:65:54:a5:62:58:
17:b1:48:b3:2e:24:05:f5:9a:9d:f6:70:00:7c:69:
84:1c:87:ef:d2:54:49:55:7c:3b:e4:7e:a0:bb:5a:
53:fa:40:93:4e:d5:f8:dd:af:e0:cf:87:e7:8d:7f:
16:f6:be:9c:a8:28:05:ef:90:97:b4:62:5a:e5:9b:
62:2e:68:b8:b6:8c:0d:f6:e9:14:51:02:21:26:79:
51:49:db:9f:43:d0:7c:38:d1:35:b4:37:79:d7:20:
94:90:a5:f4:7e:7b:77:f8:8c:8a:be:e0:45:ee:1b:
2c:bb:a2:ec:a2:6a:7d:5a:70:cd:73:c4:61:f4:5e:
a7:f1:6e:4c:d5:09:7c:6b:6b:ff:bf:c8:87:da:65:
f4:78:cd:b3:92:1d:90:16:07:1a:ac:5a:6f:c3:26:
12:f4:33:db:3e:d0:d9:28:c3:1d:22:be:1d:b6:be:
ac:83:f3:f9:bb:2f:a0:a9:74:ea:64:ae:a0:40:9f:
80:39:16:35:3e:ab:8c:e9:b7:9e:13:cf:0b:6c:0f:
63:c2:a0:0c:be:da:a3:3d:75:47:46:e4:7e:ec:2c:
de:bb:1f:a1:4f:9d:5d:e3:bf:66:87:11:ad:4a:c3:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
81:90:46:94:c5:bd:f3:98:93:a9:6a:c1:9f:6f:d8:bf:25:89:
6f:72:54:61:fb:88:f6:6c:a5:da:a6:51:c8:2a:54:3b:9c:6e:
a2:a4:59:e7:68:b9:fd:3b:2a:4f:54:2c:37:09:a1:9d:56:de:
11:5f:c6:df:66:ab:00:54:89:f6:12:8b:1d:b7:86:04:e6:8a:
88:e4:8b:75:7d:66:e2:6f:95:47:53:e6:4e:34:b1:4e:98:bd:
4c:ca:b2:bf:c1:d1:b7:08:fb:f4:ca:4c:5a:b3:96:3e:8f:70:
0f:55:82:de:ab:39:66:3b:d3:de:ec:e3:42:09:11:61:f5:36:
d4:f2:86:9b:71:e9:d2:6d:dd:27:3b:ad:43:32:e0:3d:f3:96:
ac:82:1a:52:26:bd:e5:82:28:4e:9d:5e:7f:72:e1:64:0f:40:
5b:b7:b2:da:a2:35:e4:b1:2e:28:28:c8:48:ba:3e:41:cf:00:
e9:12:b1:59:b1:4d:3f:cc:ac:a7:ec:83:6c:30:7f:d4:36:73:
6a:32:ca:bb:f7:f8:53:2b:ae:4d:9b:b4:48:d2:ae:93:40:aa:
b8:4a:eb:98:fc:b5:76:7b:ab:95:20:26:60:28:1f:ba:87:de:
6e:3a:a5:ba:b5:74:1d:7c:be:97:22:45:59:7c:d1:e6:fe:4b:
3e:d9:fe:7c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaBJj2Tv9fJkV9H2/ZKO2LUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODI4MTgwODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjYxMWEzY2ZhZTk1MTc2NGNmOTY2OWEwNjhkNGNlNzRmYTYxOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWe5EuviyM0UxmECaxuSqZ/rapl
crDmZVSlYlgXsUizLiQF9Zqd9nAAfGmEHIfv0lRJVXw75H6gu1pT+kCTTtX43a/g
z4fnjX8W9r6cqCgF75CXtGJa5ZtiLmi4towN9ukUUQIhJnlRSdufQ9B8ONE1tDd5
1yCUkKX0fnt3+IyKvuBF7hssu6Lsomp9WnDNc8Rh9F6n8W5M1Ql8a2v/v8iH2mX0
eM2zkh2QFgcarFpvwyYS9DPbPtDZKMMdIr4dtr6sg/P5uy+gqXTqZK6gQJ+AORY1
PquM6beeE88LbA9jwqAMvtqjPXVHRuR+7Czeux+hT51d479mhxGtSsPT9QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFthGjz66VF2TPlmmgaNTOdPphmoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzcwMjMw
Mi0zZDUzLTRlNDMtOWQ1Yy0yOGJiMmRlNThhYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvNzAyMzAy
LTNkNTMtNGU0My05ZDVjLTI4YmIyZGU1OGFjNC8xL1cyRWFQUHJwVVhaTS1XYWFC
bzFNNTAtbUdhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBsHs0MA0GCSqGSIb3DQEBCwUAA4IBAQCBkEaU
xb3zmJOpasGfb9i/JYlvclRh+4j2bKXaplHIKlQ7nG6ipFnnaLn9OypPVCw3CaGd
Vt4RX8bfZqsAVIn2Eosdt4YE5oqI5It1fWbib5VHU+ZONLFOmL1MyrK/wdG3CPv0
ykxas5Y+j3APVYLeqzlmO9Pe7ONCCRFh9TbU8oabcenSbd0nO61DMuA985asghpS
Jr3lgihOnV5/cuFkD0Bbt7LaojXksS4oKMhIuj5BzwDpErFZsU0/zKyn7INsMH/U
NnNqMsq79/hTK65Nm7RI0q6TQKq4SuuY/LV2e6uVICZgKB+6h95uOqW6tXQdfL6X
IkVZfNHm/ks+2f58
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:50 2026 by rpki-client