Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
File: sgWR5euUhCdKdKyC_muRDivLE5k.cer (raw, json)
Hash identifier: MAwdk0Y+/3/Bqio5Xva/f94hotrtwrWxpLIG5L+HVjU=
Subject key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D62640159954C31E628E9C4C5C509A4A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Apr 2026 10:43:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200445
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:64:01:59:95:4c:31:e6:28:e9:c4:c5:c5:09:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 6 10:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:a3:e3:ad:63:cc:d0:5e:39:a9:18:64:be:
3d:0a:77:b0:a6:d3:f3:a8:b9:a6:dd:0d:12:d6:44:
0e:e2:dd:89:67:5f:14:53:5e:ec:4a:a3:04:f0:57:
2d:d4:bf:8b:eb:1c:62:96:37:28:ad:da:8c:1a:7d:
79:17:63:2f:40:3d:b1:c7:80:a0:20:56:97:d5:0e:
03:b3:76:39:2d:1e:66:d6:55:11:8f:e9:8e:b3:5d:
20:96:d4:00:ce:4e:72:b2:a2:20:08:b2:ea:47:f7:
9d:06:1c:3f:db:13:1e:8d:61:84:6c:41:6f:3b:99:
50:74:53:b7:ef:c5:b1:8e:00:59:f0:6b:3f:60:d9:
dd:91:b5:5a:d7:b5:a1:af:28:ae:03:11:d2:89:a5:
30:47:fc:7f:b2:e0:10:56:6a:5b:88:88:5a:57:66:
56:83:72:ad:2d:04:65:40:ea:04:45:f8:7a:bb:f5:
85:f4:4c:ca:21:01:08:48:70:26:ee:9a:05:b7:51:
7d:55:fc:67:5f:98:d0:7e:dc:21:9f:87:66:08:fd:
54:57:3a:52:59:23:e8:a4:91:65:a7:d9:86:43:5c:
99:6f:24:9c:f9:56:02:2f:29:3b:16:80:6b:59:69:
9c:07:97:2e:fb:98:f5:47:23:e0:5d:04:67:a4:aa:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200445
Signature Algorithm: sha256WithRSAEncryption
74:84:4f:3d:bd:ca:4c:de:ff:d2:54:6b:bb:25:f0:3c:54:a0:
7d:aa:b7:52:7a:11:84:b9:ea:35:5e:60:df:f0:1a:4a:f8:50:
cc:80:4c:f5:13:81:45:5c:8a:db:e0:16:57:ce:e1:be:96:07:
f6:8d:4b:55:7e:af:94:56:9c:09:6c:a2:37:31:f5:47:84:aa:
5d:06:e9:2e:ec:41:77:0f:06:43:9f:0a:63:c8:38:7b:c5:9d:
4f:a7:eb:20:73:08:f9:33:fd:ec:7d:36:6a:1d:8c:0e:58:13:
6c:ac:a9:ab:8d:59:a5:bd:75:52:2f:3e:45:70:d1:37:97:e5:
ee:2d:59:53:f3:10:f9:c6:2c:f1:c2:44:01:ee:33:32:e4:66:
04:23:fe:7a:4a:d4:6a:48:d6:34:b4:7e:b4:0d:08:9e:25:2b:
a7:76:55:c0:c9:de:59:fc:b6:1d:58:e9:24:2e:cb:99:9a:86:
07:00:95:6a:a3:70:2d:c7:4f:84:d0:3d:91:a6:a5:3c:fc:22:
51:6a:4f:22:82:b0:30:52:0f:e3:e0:a5:67:91:38:63:7c:c1:
57:ff:b6:f9:b7:98:d5:62:7c:0b:3e:fe:50:40:af:d2:89:29:
e1:2d:fd:f6:ea:3b:ae:f6:fd:83:17:62:ae:4c:91:18:b2:fa:
7f:c8:2c:f2
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ1iZAFZlUwx5ijpxMXFCaSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDA2MTA0MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjA1OTFlNWViOTQ4NDI3NGE3NGFjODJmZTZiOTEwZTJiY2IxMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xOj461jzNBeOakYZL49CnewptPz
qLmm3Q0S1kQO4t2JZ18UU17sSqME8Fct1L+L6xxiljcordqMGn15F2MvQD2xx4Cg
IFaX1Q4Ds3Y5LR5m1lURj+mOs10gltQAzk5ysqIgCLLqR/edBhw/2xMejWGEbEFv
O5lQdFO378WxjgBZ8Gs/YNndkbVa17WhryiuAxHSiaUwR/x/suAQVmpbiIhaV2ZW
g3KtLQRlQOoERfh6u/WF9EzKIQEISHAm7poFt1F9VfxnX5jQftwhn4dmCP1UVzpS
WSPopJFlp9mGQ1yZbySc+VYCLyk7FoBrWWmcB5cu+5j1RyPgXQRnpKrK7QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLIFkeXrlIQnSnSsgv5rkQ4ryxOZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzc5YmVm
MS1jZDU2LTRlOGItOTc0OS05NTgzOGM3Yzg0ZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNzliZWYx
LWNkNTYtNGU4Yi05NzQ5LTk1ODM4YzdjODRmNS8xL3NnV1I1ZXVVaENkS2RLeUNf
bXVSRGl2TEU1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMO/TANBgkqhkiG9w0BAQsFAAOCAQEAdIRPPb3KTN7/
0lRruyXwPFSgfaq3UnoRhLnqNV5g3/AaSvhQzIBM9ROBRVyK2+AWV87hvpYH9o1L
VX6vlFacCWyiNzH1R4SqXQbpLuxBdw8GQ58KY8g4e8WdT6frIHMI+TP97H02ah2M
DlgTbKypq41Zpb11Ui8+RXDRN5fl7i1ZU/MQ+cYs8cJEAe4zMuRmBCP+ekrUakjW
NLR+tA0IniUrp3ZVwMneWfy2HVjpJC7LmZqGBwCVaqNwLcdPhNA9kaalPPwiUWpP
IoKwMFIP4+ClZ5E4Y3zBV/+2+beY1WJ8Cz7+UECv0okp4S399uo7rvb9gxdirkyR
GLL6f8gs8g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:32 2026 by rpki-client