Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer
File: J2YrWWeEuugzz_s5qEg3yAb2S0Q.cer (raw, json)
Hash identifier: /pFwd7/TfNx0AiLz/f8kN5wOFh0wpB25BU4ZiBvCkAA=
Subject key identifier: 27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35A6D6980EC00006437F2E4F142082
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48601
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:a6:d6:98:0e:c0:00:06:43:7f:2e:4f:14:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27662b596784bae833cffb39a84837c806f64b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:6f:86:ee:09:8a:a8:54:d1:bd:37:20:31:
17:06:e3:23:fc:0d:84:59:04:6e:eb:9c:6f:d2:ee:
f6:33:1c:eb:e0:ba:cb:25:77:ce:7e:23:55:5c:13:
78:9c:b3:0d:96:ca:c5:b6:d9:eb:2c:b0:99:10:33:
0e:b4:a2:a4:13:3f:2f:85:53:e8:b5:71:fe:d6:9b:
eb:a7:17:39:95:22:a1:8f:72:0d:ef:c9:9d:a9:bc:
86:6f:91:7c:5e:09:a4:5a:1e:50:31:f0:b5:8b:e5:
42:a5:b2:de:a6:79:73:f7:87:ee:b9:a4:69:67:90:
74:3c:11:af:d4:ba:af:5b:3e:9d:a1:d9:6a:1d:97:
db:54:48:8d:d5:0c:61:fc:13:80:c3:6f:21:bc:08:
89:e4:cf:fb:35:fc:f7:23:1f:ad:22:98:e3:32:a4:
2e:19:31:88:12:29:a6:d6:81:ce:9c:e6:b5:37:7d:
b5:7a:25:f4:c2:fc:a0:dc:9b:d5:83:c6:63:57:93:
8f:ba:dc:c2:c5:45:d5:8f:b5:b3:7a:01:76:ca:52:
2a:fa:23:7f:2a:5a:fb:21:cc:34:84:cb:89:9e:ae:
d4:b3:4a:98:00:06:61:a5:fc:3e:fe:9e:da:0d:e7:
ae:e5:52:eb:0a:c6:ab:14:59:d6:33:db:75:e1:6b:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:2B:59:67:84:BA:E8:33:CF:FB:39:A8:48:37:C8:06:F6:4B:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/45c285-0ff7-4748-a38d-62763612bf46/1/J2YrWWeEuugzz_s5qEg3yAb2S0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48601
Signature Algorithm: sha256WithRSAEncryption
03:59:81:3b:4f:aa:e0:43:c8:c8:4f:2f:fd:68:ff:4b:ec:43:
bd:01:22:71:e6:6a:ee:c4:83:38:6e:dc:c1:c1:77:99:44:72:
58:67:c8:51:cd:90:56:d7:79:18:2c:9e:1a:5b:c1:a7:8d:af:
ac:c4:a7:c3:f4:74:ad:51:b7:da:4e:f4:01:b3:c3:7c:0e:38:
d1:62:39:85:86:7d:cf:49:43:fb:b0:a0:92:f1:d1:10:c2:6d:
0b:40:22:79:05:f9:f9:5d:1d:90:d3:85:aa:97:08:15:51:57:
d3:10:49:75:21:7b:fe:7c:fa:2c:f3:b4:15:49:0d:38:51:ad:
de:a6:fd:f5:0b:81:e0:71:a8:dc:5e:b4:c0:5e:ca:3d:1f:0f:
b5:68:a1:cb:60:22:78:38:5d:84:50:78:53:d6:44:d4:bc:ca:
b5:54:cd:a1:4c:83:7f:55:3c:ed:09:5e:18:ec:93:e8:ae:e8:
bb:08:c3:4b:d9:d7:d6:b4:b4:53:ef:c7:b6:c1:bf:0a:6e:98:
b8:fa:1f:2c:56:e6:26:5d:14:33:db:33:04:53:21:5d:9e:4b:
4b:cd:e2:01:1b:c1:87:0d:e3:29:71:bc:5f:4d:5a:62:49:7b:
21:68:1e:67:d1:fc:db:e6:f0:fd:13:44:0d:70:5f:d4:15:4b:
cd:9f:cf:36
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt7NabWmA7AAAZDfy5PFCCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzY2MmI1OTY3ODRiYWU4MzNjZmZiMzlhODQ4MzdjODA2ZjY0YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWtvhu4JiqhU0b03IDEXBuMj/A2E
WQRu65xv0u72Mxzr4LrLJXfOfiNVXBN4nLMNlsrFttnrLLCZEDMOtKKkEz8vhVPo
tXH+1pvrpxc5lSKhj3IN78mdqbyGb5F8XgmkWh5QMfC1i+VCpbLepnlz94fuuaRp
Z5B0PBGv1LqvWz6dodlqHZfbVEiN1Qxh/BOAw28hvAiJ5M/7Nfz3Ix+tIpjjMqQu
GTGIEimm1oHOnOa1N321eiX0wvyg3JvVg8ZjV5OPutzCxUXVj7WzegF2ylIq+iN/
Klr7Icw0hMuJnq7Us0qYAAZhpfw+/p7aDeeu5VLrCsarFFnWM9t14WsXYQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCdmK1lnhLroM8/7OahIN8gG9ktEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzQ1YzI4
NS0wZmY3LTQ3NDgtYTM4ZC02Mjc2MzYxMmJmNDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNDVjMjg1
LTBmZjctNDc0OC1hMzhkLTYyNzYzNjEyYmY0Ni8xL0oyWXJXV2VFdXVnenpfczVx
RWczeUFiMlMwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC92TANBgkqhkiG9w0BAQsFAAOCAQEAA1mBO0+q4EPI
yE8v/Wj/S+xDvQEiceZq7sSDOG7cwcF3mURyWGfIUc2QVtd5GCyeGlvBp42vrMSn
w/R0rVG32k70AbPDfA440WI5hYZ9z0lD+7CgkvHREMJtC0AieQX5+V0dkNOFqpcI
FVFX0xBJdSF7/nz6LPO0FUkNOFGt3qb99QuB4HGo3F60wF7KPR8PtWihy2AieDhd
hFB4U9ZE1LzKtVTNoUyDf1U87QleGOyT6K7ouwjDS9nX1rS0U+/HtsG/Cm6YuPof
LFbmJl0UM9szBFMhXZ5LS83iARvBhw3jKXG8X01aYkl7IWgeZ9H82+bw/RNEDXBf
1BVLzZ/PNg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:20 2026 by rpki-client