Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.cer (raw, json)
Hash identifier: 4S9My/PCYqsjEjEJkaa1BweI8XnEDSbapuEOfIgNN6k=
Subject key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB21EA6C38295F0C20CDB2BC4E29A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203810
IP: 185.46.52.0/22
IP: 2a01:8520::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:21:ea:6c:38:29:5f:0c:20:cd:b2:bc:4e:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:34:50:aa:37:67:cf:a2:83:9b:07:37:6c:
32:f3:f2:9a:05:a4:2d:13:9b:54:07:20:e1:bf:af:
e9:89:48:ab:3b:60:8b:ac:0c:9d:b8:7b:bb:49:71:
99:b3:8b:39:03:71:8f:bf:17:73:f3:99:c2:d3:b6:
7b:f1:ea:3c:15:53:e0:2c:22:b2:3b:24:8d:fd:0b:
67:d5:c9:d3:03:fc:7c:a2:9a:a2:df:08:43:f2:37:
eb:0d:d6:10:51:94:1d:27:03:b0:46:17:03:c8:e3:
17:3c:78:c5:56:fb:16:13:63:df:33:9e:7e:54:6d:
3c:65:85:07:c5:e1:69:e0:80:0f:05:b6:e5:15:23:
65:8b:30:c4:ad:d3:4e:87:34:55:6f:50:3b:d8:42:
d8:e3:9b:76:05:60:3d:f5:b0:13:65:e4:a4:a6:19:
16:d9:e7:14:6e:bd:d0:24:92:e4:24:2e:d5:5b:e9:
33:21:5f:5f:1f:b8:d9:5f:52:99:68:9d:ab:b5:1d:
22:ac:63:25:5c:6c:c2:a2:71:23:e2:68:f6:1f:77:
50:35:50:9d:79:9f:16:82:00:14:17:ad:f0:fa:c3:
f3:d3:36:fe:92:c6:0a:60:5b:33:ff:9b:71:d4:dd:
b9:c7:b3:28:2d:12:41:47:c0:2c:11:0b:c0:2f:dd:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.52.0/22
IPv6:
2a01:8520::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203810
Signature Algorithm: sha256WithRSAEncryption
03:d4:c8:80:65:e9:4e:b8:4c:76:ec:7d:03:cb:3e:8c:8c:2b:
ed:19:df:74:42:91:68:ad:1d:3b:ea:7c:47:87:41:a2:67:4e:
41:46:66:f5:7b:93:06:1e:8c:bc:ca:a8:dd:2e:fa:68:90:89:
c3:bd:41:54:96:41:41:d7:5c:d2:f1:f0:ec:5c:a2:3f:23:4d:
ef:28:47:4a:48:6c:66:10:6d:c2:88:c7:28:d2:78:9a:15:ac:
83:02:87:aa:8c:db:f7:5c:c6:fe:26:ec:28:e3:30:64:f9:53:
8c:9c:ab:9e:1b:0b:34:4e:a3:01:27:a2:19:83:10:66:dc:db:
9d:85:df:4f:bc:da:03:22:b2:49:6e:6f:45:fd:78:f9:47:f0:
55:76:bb:04:4f:c1:8c:92:22:da:a9:4b:a6:af:78:a3:f2:63:
f3:86:4d:35:11:32:f8:b0:c5:96:d2:59:55:33:67:05:6a:f9:
da:bf:43:7d:bc:6f:63:00:dd:b7:27:ed:31:1c:f1:2c:43:df:
cd:2c:df:66:87:0d:8b:3a:8b:55:78:7e:30:f6:fd:e4:9c:74:
b9:f8:a6:ba:fd:53:ca:60:4d:af:5d:a7:0b:11:88:d5:fb:06:
79:5b:b1:ab:4f:6b:0d:1e:17:4f:86:5a:2d:45:c1:49:ee:a9:
59:37:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:34 2026 by rpki-client