Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
File: pJR6ZT3sU9F51XJPJRTHJW22nfg.cer (raw, json)
Hash identifier: k6WsekflNDfLBbXXfYbkevh8XxNn2zgleCJaKjmOu4U=
Subject key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5B1448255439DD24B8235ABF0F08C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:17:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 52160
IP: 194.247.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:14:48:25:54:39:dd:24:b8:23:5a:bf:0f:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4947a653dec53d179d5724f2514c7256db69df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:c0:52:5c:53:8e:49:47:9c:c4:f3:14:99:
ad:09:26:67:ce:24:fb:4e:e4:70:9b:ee:ff:f0:9f:
34:b8:26:ff:51:f9:23:24:44:fa:68:eb:09:fc:56:
4d:7b:93:a5:9f:f4:3f:1a:bf:12:e4:e9:78:53:5e:
84:5d:cd:86:16:a5:85:7e:11:73:3f:64:fe:a0:65:
94:98:01:98:14:ba:bb:67:90:08:76:93:bc:5f:d7:
1e:71:f2:45:9d:9a:1e:63:2a:b0:48:e2:02:af:f3:
29:69:13:93:7c:9d:cc:3a:01:07:5b:ac:6a:d6:0b:
17:de:79:33:62:43:37:c8:a2:4f:17:21:09:89:9f:
8b:c0:92:92:94:c5:57:aa:69:f7:08:03:ab:11:0c:
f5:60:57:91:47:5c:66:02:2e:ca:94:94:37:f0:e8:
08:e7:c4:2d:41:8c:16:5d:2e:03:10:91:6d:dc:72:
5a:cd:11:00:86:85:7f:eb:20:15:8e:bc:70:42:7f:
e7:1d:8b:08:d4:1a:b8:35:7d:48:f0:b8:db:b1:5a:
30:04:94:fa:c5:b7:e5:f6:5b:68:8c:fd:03:72:82:
0b:53:c7:22:03:a1:d5:9b:80:80:17:f8:ea:4f:ef:
00:be:ee:ef:fc:10:f0:dc:88:04:5e:0f:56:b9:1e:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.50.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52160
Signature Algorithm: sha256WithRSAEncryption
02:5b:94:1e:fa:09:90:0f:73:77:8b:bb:49:d4:2b:cd:58:37:
c1:51:d2:c4:2c:38:ae:1b:82:c5:14:0c:87:08:d0:39:60:c2:
10:5a:79:b9:44:97:f1:ec:0e:b7:9b:7d:dd:9c:0b:e9:ac:ca:
3f:ac:e7:1b:b9:91:4a:af:a6:29:9a:5a:44:51:8b:b0:7f:38:
66:92:87:31:0e:f0:b3:f2:65:9a:f5:04:e0:c6:0e:15:47:17:
9a:1e:aa:0d:64:3e:ac:93:cf:fb:10:9b:4a:cd:65:ae:b6:c2:
ee:a8:9a:df:d9:07:42:0a:fa:f0:29:27:88:4b:94:51:38:e9:
be:4d:5d:9f:72:63:8a:ec:cc:ae:fc:c7:c7:33:bd:53:34:05:
d3:a6:2f:63:ba:32:54:55:5c:a0:34:0e:b5:68:68:ad:47:6e:
5b:7a:58:ad:98:de:dc:ca:14:0c:b0:37:39:03:e1:ac:fc:69:
e7:f0:e2:f4:8e:6f:c2:a7:cb:e1:74:62:18:f9:72:d7:02:e8:
ce:64:66:4b:3c:48:27:b9:69:cf:3d:ec:1b:bc:0e:14:ef:ee:
80:fc:4f:96:d5:bf:52:5c:58:ae:a3:a4:b4:91:fb:74:3c:4d:
9a:bb:97:c6:5b:34:bf:39:68:70:98:24:a2:9c:4e:75:da:9d:
26:04:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:03 2026 by rpki-client