Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.cer (raw, json)
Hash identifier: Y/HXVGkAT5+I6/RJlJeHrJvEVFenYBpzPyBHUfPsSUE=
Subject key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A269FB63FE775F2A5DA03BC28B9861
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60624
IP: 91.236.84.0/22
IP: 185.28.248.0/22
IP: 2a04:3c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:69:fb:63:fe:77:5f:2a:5d:a0:3b:c2:8b:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:26:a9:0d:d4:0d:b1:f7:ba:33:d5:0c:81:
9d:90:03:cc:21:ba:48:32:e6:97:79:6f:e8:45:2d:
a2:c2:50:12:52:78:0d:9a:35:be:2e:55:d2:98:dd:
d8:9e:f4:0e:b6:67:61:52:34:3a:38:af:f9:66:0e:
eb:d3:ec:7d:dd:82:18:2a:b7:47:57:04:8b:1d:92:
7a:df:de:9d:8a:2a:40:95:26:ce:95:d0:24:f4:32:
64:ec:dc:f5:69:7d:1b:b2:b3:5d:04:63:49:9c:6d:
4a:13:57:b9:0e:04:51:04:e3:f3:00:49:23:bc:f4:
1f:1a:12:c8:63:5b:45:bf:70:86:41:28:9b:54:e8:
2d:c4:88:2e:26:91:05:6f:ff:de:48:a3:22:95:2a:
3e:50:89:fb:4a:32:94:a9:b1:e5:99:a4:09:b1:08:
8a:55:ab:36:28:2a:60:d1:38:60:3b:56:f4:15:6d:
dc:e0:d7:5f:fa:04:35:86:68:b6:e7:ac:bb:f0:2c:
70:42:3f:b1:31:3f:9f:70:7f:76:86:a0:33:82:e4:
b9:26:7a:b3:d5:1e:9d:43:ad:47:36:4c:5a:b2:6a:
dd:b4:0b:b4:d1:12:98:91:f3:78:05:1d:a3:dc:06:
5b:e1:b3:94:0a:ae:ae:19:d4:c0:77:a6:00:f3:29:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.84.0/22
185.28.248.0/22
IPv6:
2a04:3c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60624
Signature Algorithm: sha256WithRSAEncryption
51:cd:a9:6e:5d:43:40:9f:56:72:40:e0:91:95:a3:21:bf:18:
3f:3e:f0:c5:27:32:3b:17:ee:14:61:72:fd:23:74:79:a1:be:
70:93:a4:67:29:c3:5c:e8:de:72:01:53:98:bd:f9:7d:a6:90:
5e:00:bc:81:6f:ad:0e:c0:13:63:5e:0a:e6:fd:29:19:e8:de:
b0:83:1b:e0:39:5d:53:2c:a1:ab:a7:e9:ee:c5:8b:82:c0:a8:
92:0b:e6:26:ba:eb:37:34:2e:75:0d:2b:42:13:af:fb:d1:8f:
de:fa:a2:81:b3:d2:d5:c2:58:3e:27:a9:fa:da:df:d2:01:e5:
72:07:05:50:79:07:b4:c8:6c:6f:30:04:07:33:eb:2e:ab:07:
be:00:12:ad:94:75:4a:49:56:20:0a:9b:3a:c9:08:80:bb:c9:
0b:12:41:c7:c3:31:16:e4:12:88:c0:2d:b6:40:9b:37:04:e7:
0a:61:12:15:83:35:f2:1e:79:98:30:a0:9b:4f:66:40:b9:97:
18:f8:1f:a5:70:20:83:fb:af:94:8d:bd:5f:aa:2d:45:d6:b6:
df:b9:a3:35:eb:7c:17:7d:4b:58:5e:11:98:82:86:88:c6:28:
14:54:ed:68:8d:8d:c7:00:8c:23:2f:ec:2f:93:27:f8:1d:c9:
2f:c2:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:16 2026 by rpki-client