Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2WB3ZuZSwY3M9cjZ1j9ra0sBC2M.cer
File: 2WB3ZuZSwY3M9cjZ1j9ra0sBC2M.cer (raw, json)
Hash identifier: LwJ0AZdAqVtCCc/n/N84vdhwy/hcOes2McT/NBbAb+8=
Subject key identifier: D9:60:77:66:E6:52:C1:8D:CC:F5:C8:D9:D6:3F:6B:6B:4B:01:0B:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1B1CF948EEB84D3CD5BF8ED98EF069394
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/195d1a-a027-48d4-8969-2eba0891a9df/1/2WB3ZuZSwY3M9cjZ1j9ra0sBC2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/195d1a-a027-48d4-8969-2eba0891a9df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Nov 2026 17:02:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 109.197.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:cf:94:8e:eb:84:d3:cd:5b:f8:ed:98:ef:06:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 6 17:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9607766e652c18dccf5c8d9d63f6b6b4b010b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:94:44:d9:64:41:a1:13:06:a1:ad:39:4f:
57:4c:e3:c7:bc:c6:a4:57:3e:18:84:28:4f:81:05:
1e:5d:bd:f6:44:25:4e:fd:01:63:0c:33:ca:f3:2f:
e7:3d:90:f6:a3:dc:d0:52:c1:a3:a7:75:53:69:09:
4e:ba:44:b6:d1:c9:07:ae:2b:fa:98:c0:6d:97:35:
a2:ec:8d:7a:58:1c:f8:bc:14:a3:32:48:24:17:56:
36:7c:58:67:62:ea:4e:94:db:df:00:d4:ee:05:32:
4f:18:b8:d5:f7:14:0a:a6:41:0e:2b:e1:30:5a:cb:
4d:3c:97:0d:77:17:5d:f0:31:20:21:4c:6b:0f:b9:
48:1c:06:b9:29:77:26:86:25:3e:39:14:b0:ab:22:
4e:1a:89:f4:6d:4c:3d:9c:54:92:cf:0e:55:ca:cc:
4d:b1:17:49:9a:0d:bc:db:29:ac:af:c6:98:cc:95:
39:94:0f:0a:01:4c:e9:cd:8b:be:c6:f2:5e:64:d9:
3a:1b:3b:ad:9a:92:46:f7:f7:59:67:9d:a5:bb:2d:
be:2b:46:90:17:3b:83:db:d3:d0:a7:a9:d7:1b:e3:
f6:60:4d:0e:65:c9:7c:11:e1:e6:e6:06:34:3d:15:
44:26:17:dd:e8:6e:c6:50:b6:9c:a7:d2:01:63:58:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:77:66:E6:52:C1:8D:CC:F5:C8:D9:D6:3F:6B:6B:4B:01:0B:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/195d1a-a027-48d4-8969-2eba0891a9df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/195d1a-a027-48d4-8969-2eba0891a9df/1/2WB3ZuZSwY3M9cjZ1j9ra0sBC2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.176.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:f7:bb:68:2e:c2:e7:25:0d:05:ed:3d:8e:27:01:38:2d:12:
39:f8:7c:74:3d:9a:72:1b:6f:2a:97:e4:18:90:0d:92:99:80:
64:fa:53:cb:94:6e:6f:c2:14:92:60:c1:ad:02:c6:5f:86:a3:
39:92:1c:54:e2:3c:1e:48:0a:b3:96:49:8d:f5:74:77:2c:cc:
68:b8:8c:ff:4f:8e:0d:47:89:a4:cb:87:c5:a1:70:e1:11:c1:
d5:ef:68:86:11:fc:ba:14:8d:d6:78:86:00:81:29:0c:73:62:
5a:4e:91:ec:7c:be:35:ae:9f:9a:c7:1b:1e:11:da:cd:16:d4:
c4:58:46:83:6a:27:0f:9e:da:e9:54:a7:d5:6e:c4:e5:f4:c5:
de:de:8b:35:ef:96:ab:64:b2:20:13:7d:8c:5b:4e:c1:e1:0f:
5c:b2:e5:a3:d3:74:62:0b:d8:88:4b:7d:5b:66:bf:29:fc:1b:
ea:2c:27:68:ac:06:91:d0:b0:51:13:cc:f7:b1:80:e2:ba:b5:
4c:87:e8:ae:61:ee:e1:23:5a:ee:d3:61:60:6b:73:d1:92:f1:
dc:fd:2e:e9:df:50:ef:e7:1b:95:54:e7:6c:55:b6:78:ab:23:
1a:d0:14:17:59:a4:92:d6:05:d8:2d:62:43:70:55:fe:86:0c:
20:b2:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:26:39 2026 by rpki-client