Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
File: DWE_6YRKY0OerooaoMPKjGC0XUU.cer (raw, json)
Hash identifier: cG8OSPGPUO+V8o8w+A4ssRbufdLM3VNWUDn12TveCdU=
Subject key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797ED866D409D25C79F06D521414615E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210172
IP: 194.53.176.0/22
IP: 2a0d:ee40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:d8:66:d4:09:d2:5c:79:f0:6d:52:14:14:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:29:c7:ab:13:99:a5:cc:22:71:e7:38:e2:
82:0b:24:5f:cd:ce:31:e9:23:74:da:f5:a4:3e:44:
96:90:72:77:db:f9:3c:3e:b7:71:4b:b3:f3:f7:cb:
36:8c:b7:6c:68:5c:cb:ee:f7:d5:d2:bc:57:90:7e:
9c:46:66:21:9d:83:5a:0d:c4:7d:98:9a:49:61:b5:
02:7a:83:22:d0:71:04:0c:67:68:7b:95:01:39:17:
35:ce:10:f6:30:5f:a1:0d:9b:a3:a1:48:38:8f:56:
7b:b8:42:0d:ba:c8:50:59:6d:f1:32:74:9c:c8:f4:
e9:23:db:d1:bd:6a:2f:36:63:5c:31:20:d2:43:11:
88:65:54:1c:2d:6e:02:e8:ff:59:06:6f:c2:89:73:
41:3d:10:2f:93:52:13:71:ae:42:35:c8:d8:57:3f:
06:86:3c:64:90:84:19:b9:07:a3:ca:84:4e:92:62:
8a:9e:07:d0:5a:15:a0:ee:81:03:67:cd:4c:a2:63:
2c:00:52:4a:19:a6:18:f5:81:0d:9a:90:98:78:38:
9b:33:4a:e5:2b:d8:11:7c:bd:ec:fa:78:21:d9:10:
a3:f6:ae:15:a4:3f:74:41:db:df:3d:81:b8:74:12:
93:b0:6e:fa:98:65:e6:85:73:a1:06:a3:21:34:57:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.176.0/22
IPv6:
2a0d:ee40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210172
Signature Algorithm: sha256WithRSAEncryption
21:2e:1a:97:b5:96:55:74:22:bb:6a:35:d9:72:5b:ed:bc:37:
d1:5b:45:80:00:d4:70:de:35:8d:47:d0:b8:ed:31:11:b8:84:
85:dc:49:f9:4a:1a:74:3e:40:df:18:87:95:7d:4b:fb:c6:da:
b2:40:f3:0c:05:1d:7f:ea:6d:29:87:50:38:36:66:ea:f1:35:
dc:4d:2b:5a:00:31:71:88:56:8b:18:43:98:48:bd:ce:4d:1b:
d8:70:6b:97:54:97:5e:68:ba:54:fe:92:49:02:72:92:b2:50:
5d:e0:63:bd:0e:2c:47:85:5e:c9:ae:ec:fe:4e:9e:f6:e3:ac:
b4:8c:25:c8:fe:7d:04:be:6b:48:a8:41:aa:cf:01:d6:54:4a:
15:82:1c:19:d9:57:49:9b:b6:78:5b:70:f7:67:0c:0a:54:a7:
b8:fc:f5:1b:0f:27:36:6f:0d:75:24:05:94:87:bc:28:a0:a6:
cc:67:88:c9:83:db:90:48:6f:06:95:23:c6:6f:4b:31:42:c6:
2b:ae:1d:0e:55:c9:8c:12:0b:04:fc:79:e8:e9:a9:fb:ce:cc:
a5:cb:14:95:0f:c5:f3:36:91:f5:68:fa:e7:45:3d:94:45:b4:
2b:62:d1:ac:ad:26:32:ce:77:29:75:e1:31:43:c4:7c:49:1d:
62:c0:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:34 2026 by rpki-client