Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.cer (raw, json)
Hash identifier: +dNOvNY83S0DxUUEr8hClY8Veho02fOW5Jzcop/0esc=
Subject key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0B424B77F302ADA3D36593F26E711904
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Mar 2026 12:39:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58302
IP: 193.35.52.0/22
IP: 2001:67c:29f4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:42:4b:77:f3:02:ad:a3:d3:65:93:f2:6e:71:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 12:39:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:d8:53:c6:0d:a9:5d:cc:eb:36:2f:66:cf:
c8:6f:d4:53:72:f7:db:58:25:8b:e4:92:7a:ff:b7:
23:b2:0c:a7:e3:98:af:4b:ba:52:65:f1:6c:9d:ff:
12:13:31:ae:7d:f8:18:ee:4d:da:0b:f9:ec:c8:6b:
70:e2:81:9d:54:83:af:df:e6:92:b9:19:b3:2f:e5:
0a:bd:d5:a8:79:a5:b7:f6:12:39:32:ce:ab:22:77:
9a:d3:12:e7:2a:bd:b2:8a:f7:8d:ed:89:eb:c3:23:
e7:66:7b:50:17:53:c0:29:b6:98:74:1f:94:43:ae:
9b:0c:cb:ef:44:74:e6:51:2a:bf:58:14:2e:4c:f2:
a1:e9:b0:c9:df:05:88:07:80:38:00:0e:73:31:4a:
3c:4c:a2:31:53:72:57:29:50:65:bf:ca:06:5c:8d:
3d:46:b6:91:5e:85:b8:88:e9:ac:7f:a5:36:9f:7c:
6c:3a:c2:d7:87:56:af:51:c0:c0:cd:b8:1b:5d:d6:
56:4a:9f:fc:60:89:c6:49:af:a3:0d:6a:ba:85:99:
79:25:47:8a:89:49:ec:cf:a4:f6:d8:47:61:70:75:
9a:37:1b:79:a7:cb:a6:d8:bc:ae:1c:ee:71:a6:31:
0f:9f:c3:8e:68:3b:bc:63:3a:78:19:5f:b0:8f:09:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.52.0/22
IPv6:
2001:67c:29f4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58302
Signature Algorithm: sha256WithRSAEncryption
1b:ce:99:0b:1a:90:6f:13:07:d6:84:ae:5a:48:d4:7d:46:31:
ea:d8:48:45:6d:c0:b7:a7:25:32:af:f9:2f:d2:a4:67:88:ea:
4d:c2:51:dc:48:f4:93:c3:fe:b3:18:68:d0:78:79:60:f0:5f:
56:0e:b2:f7:96:73:a6:7a:28:bc:05:3c:61:b5:73:58:9c:f6:
b5:79:a0:a6:95:fa:56:d4:4a:ad:1c:c3:34:08:b3:bc:6d:ff:
55:e6:48:c4:93:c0:43:89:0b:72:24:6c:4c:23:18:73:69:b7:
c3:d7:dd:bc:e0:71:e6:28:8c:e7:3a:b1:03:d1:77:0e:f5:71:
1f:1e:c9:d8:98:f9:9b:3f:36:f9:54:20:e4:f9:17:78:f7:82:
3d:4b:40:40:90:37:cf:b5:af:b5:dd:b1:37:2e:92:21:b2:2e:
6c:e2:d7:fe:b0:62:73:a0:bd:b5:96:d6:64:21:ee:23:1f:da:
26:ed:af:a3:73:35:57:f4:e5:6c:7c:69:7c:22:ce:c0:26:24:
85:20:a0:b1:60:a7:b1:ba:54:ad:7c:62:7b:f6:e9:28:5d:a2:
bd:c2:69:60:2d:c3:ef:07:f2:68:2d:2e:5a:4e:90:df:96:76:
86:74:4a:2a:8f:6d:08:05:f7:22:13:5a:19:bc:82:38:3b:6d:
2d:43:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:50 2026 by rpki-client