Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
File: lwj2W3tYEEJW4NM8xGwunXYou3g.cer (raw, json)
Hash identifier: WR1d6aN/JwIeZcE+XRyVyIY6w6E653APbRjNqIrqYto=
Subject key identifier: 97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB236F1E6E1076BE62A19217F213A31C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jul 2026 08:49:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 150.128.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:36:f1:e6:e1:07:6b:e6:2a:19:21:7f:21:3a:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 30 08:49:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:92:55:1c:98:fe:4b:f9:a2:2b:af:07:72:
e8:d8:54:41:c6:7d:33:f1:66:da:65:3b:92:17:3f:
ee:96:3d:ef:87:ee:8f:d2:4a:e6:57:46:f6:db:61:
b5:12:cd:b9:b0:54:f8:a4:c3:66:34:15:ed:41:af:
88:91:66:74:2c:99:67:13:1f:ac:19:43:06:f0:7c:
97:66:09:66:42:f1:c0:6d:d2:e2:95:9f:0d:f9:c3:
c9:93:c1:d0:64:a9:4c:0b:3c:63:7a:fe:58:c7:b4:
17:fb:9a:56:75:db:13:7e:94:80:e1:70:16:d0:0b:
dc:74:c6:8a:b1:50:a5:41:ca:4a:92:bf:d4:c4:c2:
2e:23:48:93:48:af:47:29:0c:62:ef:fe:a6:83:22:
e0:22:82:8e:06:80:f1:be:46:0b:23:fc:82:39:63:
0d:a1:44:1e:9b:17:4e:8c:9b:86:d6:b1:06:46:d2:
ab:80:df:d7:d5:03:de:df:13:ca:a5:25:34:5c:ab:
35:ba:67:c1:21:7d:82:30:17:43:de:52:2f:be:6a:
f9:1b:a4:6a:49:1a:4a:e4:c9:f9:56:8c:c8:10:05:
66:93:b5:98:ec:ca:a9:9c:c0:f6:08:82:2e:f9:73:
5b:1d:31:37:ce:00:47:7b:b9:08:b0:97:bb:88:a0:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:9a:eb:e2:27:6b:d2:3b:f7:46:40:42:20:fa:22:d3:74:28:
1e:39:c3:ba:be:01:d1:fb:81:dd:f7:62:a8:24:2f:69:ba:5c:
c6:db:91:17:59:5b:59:13:cf:b6:00:e3:ec:e2:a2:24:f3:72:
03:db:7a:03:71:8f:da:3b:c9:82:cd:f3:02:80:79:23:1c:61:
c4:ff:c1:0c:95:2d:db:57:f2:9f:34:73:79:5f:67:58:ad:b0:
57:53:21:c1:8f:7a:ce:e0:7a:bc:f3:4d:4e:06:7a:b7:ca:b2:
2d:6c:6e:41:af:c0:99:bb:53:fe:36:47:29:77:ea:6f:4d:02:
9d:55:9a:ea:56:c8:96:23:e0:22:b8:37:a3:36:93:dd:50:95:
36:1d:bb:37:71:44:40:00:a8:bc:8c:42:6e:65:7c:05:db:76:
1a:fa:c4:f3:16:c7:15:43:c4:7b:d0:a4:b7:84:54:a3:01:bc:
08:18:4e:19:6a:4b:81:21:e4:7c:d6:c7:2c:38:d0:1c:e9:ef:
d0:45:82:99:5e:38:f5:39:fd:53:97:bf:1d:31:fd:b5:43:93:
f2:82:53:e5:41:09:ef:1d:20:ed:34:20:a8:67:d8:05:67:36:
cc:9e:a0:83:a6:fe:90:d8:ef:30:7d:52:76:02:3d:ae:1e:b4:
39:84:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:19:19 2026 by rpki-client