Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.cer (raw, json)
Hash identifier: ry7G+8AlKNMdIQa7r/Hv1ZG8dz+5pBGwxJ9QY74+qV8=
Subject key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D68158323F1EC8BD35A4F24C8B4FBD76D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 13:15:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204567
IP: 185.175.220.0/22
IP: 2a0d:4d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:15:83:23:f1:ec:8b:d3:5a:4f:24:c8:b4:fb:d7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 13:15:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:57:a0:0b:67:f2:c2:e1:aa:c3:b3:b6:dd:
80:c7:da:86:2a:f7:c8:3b:88:da:1e:a0:03:d0:94:
67:e7:ee:29:7f:d9:e5:70:1a:e8:0e:6e:07:36:d8:
29:35:5b:c7:28:ac:74:9d:c5:c2:31:d3:1b:8b:6f:
51:b3:f7:a1:12:e2:2b:40:fa:37:9f:5d:17:b0:03:
d9:f8:02:10:16:c4:ce:bb:7c:cd:7c:bd:19:6d:b0:
38:2b:f4:c3:0b:69:d4:50:2d:b3:15:79:2c:8b:0b:
01:a4:75:b4:55:8e:e8:b2:38:74:33:ba:21:e8:32:
06:63:7c:e2:08:76:96:10:56:da:f1:db:77:b3:2e:
eb:99:dc:03:b7:94:e5:5a:d0:88:86:44:24:90:2c:
60:82:44:0f:bc:bc:d9:5c:fd:81:00:79:21:10:c7:
cf:ad:fa:04:f3:3a:a7:f2:11:11:59:7b:48:81:23:
a5:36:1a:4c:68:47:b0:67:dd:2f:49:2e:25:4d:39:
43:a5:6a:58:fd:f6:2f:e4:41:56:b3:07:9a:bd:8c:
89:b6:c4:fe:14:57:9b:36:5a:dd:3c:45:47:b6:6b:
2e:f7:96:ed:cd:19:61:3d:dc:d3:0c:bf:38:79:f3:
05:34:c1:ae:93:b5:d6:43:66:1a:91:41:5d:23:57:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.220.0/22
IPv6:
2a0d:4d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204567
Signature Algorithm: sha256WithRSAEncryption
16:b2:4d:c6:97:1f:9b:cc:b1:90:02:bd:4a:3b:42:4c:6c:59:
62:89:4a:0f:13:09:83:b8:a4:e6:64:80:6a:20:f5:a9:29:4d:
ef:5e:d7:d2:21:34:e2:12:ac:18:ae:2b:9b:33:da:3d:54:b0:
8a:bb:4b:88:89:21:80:de:3f:7d:06:d0:37:9f:75:28:f9:4f:
09:28:60:bf:80:9a:d3:ad:f2:2c:7a:8b:db:cc:6f:04:15:3a:
8b:82:17:a3:80:c8:5b:57:da:a4:e9:bd:25:c7:fe:1b:a2:d3:
21:28:b2:80:e3:4e:e9:18:9d:2c:00:1a:02:95:1a:8e:14:23:
9b:64:9f:76:3f:6a:9f:c5:a4:38:bc:5c:cf:71:4d:a1:15:56:
73:86:ae:c8:e1:1e:35:00:53:ed:84:e4:84:90:61:e6:cd:82:
3c:e9:e8:a9:db:59:6f:3c:62:c0:44:63:42:83:db:3f:55:e2:
0b:3b:22:29:3e:69:d2:99:4b:0b:0f:d8:e4:10:6e:dd:74:4c:
77:fa:21:ed:2d:9f:6c:2e:81:93:53:3f:14:e8:55:59:10:7d:
00:22:29:e7:0f:62:a4:1d:f0:53:83:52:03:b5:b0:aa:6a:3f:
25:a5:8d:ea:bc:4f:0b:cb:8d:3a:1e:72:99:a3:d9:56:23:60:
07:77:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:24:21 2026 by rpki-client