Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
File: IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer (raw, json)
Hash identifier: 9OYl7i/kZYoIz11GT7Q8vJcYgIfqxGuYYUFBh8/FnMY=
Subject key identifier: 23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A7A3233005B10110AA1DCE06E5A5592B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Nov 2026 17:37:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218914
IP: 2a12:dec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:a3:23:30:05:b1:01:10:aa:1d:ce:06:e5:a5:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 17:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=230992191d853734bd572d61d1a8e3553bedf6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:32:0e:6b:c0:db:ac:c0:d9:14:85:c2:51:
61:e4:bd:3c:bc:0f:6a:57:fb:9c:fe:e9:b7:55:6e:
50:9d:b3:40:d4:1e:8a:07:3e:79:05:c8:e8:95:61:
c0:f0:7b:e5:ac:91:ae:f6:7e:66:35:07:37:bd:2e:
7c:13:fe:ee:f7:8f:37:34:54:e6:96:f7:8c:a3:a2:
a3:3c:7a:b1:6c:62:dc:e1:be:9d:a0:31:d2:33:c9:
db:b2:c3:d6:47:80:90:7e:10:cf:a9:47:d1:b3:a3:
30:56:a6:ad:42:91:6b:dd:b3:c5:2a:f6:6e:d5:82:
9d:d7:a3:8b:d8:9a:b1:5b:f0:20:99:c0:41:be:9c:
62:97:db:dc:e3:59:fb:11:3e:ab:cc:ef:19:83:e5:
f6:e8:fa:32:c6:71:41:4f:8f:2e:04:22:34:2d:bb:
d8:e1:8b:0f:2f:e3:42:c5:c2:25:fb:c5:1f:de:c2:
fe:90:8a:ab:eb:47:44:38:f9:dc:be:c0:f1:e9:43:
c4:2b:ee:4e:42:18:a4:54:6d:60:20:42:33:e4:b6:
c5:4a:64:55:2f:1a:f7:43:85:29:09:c6:7a:9f:55:
a3:71:71:9a:a3:2e:29:b1:dc:b7:21:e9:9c:70:d6:
e6:bc:a5:8c:ed:c0:72:e9:fa:5e:7b:cd:b3:7f:4b:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218914
Signature Algorithm: sha256WithRSAEncryption
a4:b7:b6:0a:83:1c:a4:f0:d6:dc:c7:db:e5:74:f4:92:09:75:
20:7f:24:41:f4:7c:99:7e:9d:32:84:76:f6:22:cf:6b:83:d4:
7f:d0:f4:bc:3b:28:7c:8c:c2:6a:45:da:c7:10:63:3f:8f:9b:
22:84:b8:a7:29:b3:6f:93:da:cb:11:42:76:a4:64:0e:18:a5:
a8:5e:7a:ef:97:29:34:49:db:5d:3c:99:fc:d4:59:f8:3b:7d:
fa:2f:a3:65:f6:de:76:19:32:aa:19:03:fd:b4:c0:cf:d0:ea:
06:7c:75:a4:28:2d:7f:0b:0b:2a:23:18:69:4b:25:6f:2e:0c:
c8:8a:9a:39:ea:b0:0a:c8:9b:33:6d:aa:15:d5:f8:5a:a5:90:
30:5a:c8:d9:78:aa:72:b5:3c:8e:7a:e6:6c:85:75:23:39:0a:
ed:6a:73:05:14:ac:42:45:4f:a1:b5:1f:b7:ef:c4:58:56:f5:
ed:b6:05:82:b4:18:46:ec:d6:96:d4:f7:19:8c:75:a9:b6:9f:
06:e1:f0:ab:54:ac:a1:98:5a:78:77:4a:c0:ac:74:21:e2:2d:
5b:30:10:7d:f2:04:7c:b0:74:65:60:ee:54:c1:17:46:d3:cf:
e8:0a:c5:60:50:84:25:b1:71:9f:5b:4b:ac:e4:91:81:cb:c1:
8f:10:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:57:26 2026 by rpki-client