Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
File: Jo9QG7-eE83S64mdlxIfZpqikTU.cer (raw, json)
Hash identifier: 6E0Uqgxk6lOpTA2PsisRGUuGZyEXVPX/xgwg9KtAQoc=
Subject key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FF8A5045293E4C3504F07C882A66E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.234.36.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:f8:a5:04:52:93:e4:c3:50:4f:07:c8:82:a6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:20:11:e9:31:0d:75:62:88:e4:33:4b:42:
4e:41:8f:f7:e8:cf:9a:fc:8c:c3:0e:dc:27:06:53:
b0:4e:0d:25:03:5b:cf:3c:d0:08:3a:34:5d:7c:e5:
97:d4:5d:a2:94:93:94:7d:42:cc:d3:4b:bd:20:b1:
9d:53:d1:b6:53:a0:ba:3a:c9:08:21:09:27:f7:81:
bd:59:8c:e8:3b:7a:01:a7:b0:2d:db:31:c7:1a:18:
9d:2b:31:26:67:0f:16:e9:ee:20:c9:c0:0d:6e:65:
02:36:cd:c8:bc:26:ea:e8:65:aa:cc:4d:92:85:28:
d0:ed:36:60:76:a9:37:73:15:c9:d4:ce:ab:d3:aa:
6e:91:73:07:94:22:d7:33:b8:b1:f0:f2:f5:47:9e:
43:1a:70:76:44:12:b3:2f:65:e0:fd:41:55:b4:0b:
48:e9:d0:8d:84:86:3f:f0:8b:89:2c:08:fa:f3:a6:
d4:f0:45:e7:be:d9:7d:4d:6b:6e:e8:4b:05:7c:ad:
1a:26:56:ce:94:4c:6d:5a:8b:48:a9:cd:62:59:38:
18:e5:9e:79:aa:7d:14:1a:ae:13:12:30:b9:b7:d2:
ce:61:7b:20:de:b5:bd:14:46:3b:de:ef:f7:ad:73:
6a:7c:03:8b:96:36:bc:3a:ee:44:66:1b:39:f7:23:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4f:88:cd:9b:e8:48:4c:07:db:bf:95:69:c8:64:b2:79:20:
a1:82:8e:ff:44:d2:0b:c3:0d:0a:88:e6:0f:af:44:5e:69:9c:
88:63:61:53:02:87:56:90:f9:de:03:b2:6a:9f:1a:95:34:a8:
7b:ec:09:14:a9:1b:17:ac:ba:36:a3:ff:48:35:f5:52:dd:3c:
40:58:25:1e:4f:4f:5c:57:bb:a8:8f:fb:43:b4:1e:7e:04:52:
bb:0c:a5:ee:cf:93:2c:59:3b:2e:e1:27:37:4f:a7:2f:e5:cb:
97:d6:bc:83:19:c6:99:41:89:38:fd:75:54:47:97:51:ef:59:
e7:ef:02:1b:37:a5:27:c9:02:fc:5a:93:81:38:a3:d0:e8:23:
41:86:1f:90:75:89:a0:de:f3:8c:41:9c:a4:d2:0f:5f:9b:13:
94:59:31:03:52:f0:6f:8e:5f:b2:47:e9:34:42:70:79:61:4c:
49:65:f9:8c:48:20:f9:d2:ed:85:cc:3f:0c:d0:7e:50:46:34:
95:70:e6:e9:09:10:d0:96:72:50:18:08:3b:96:1d:bf:60:80:
7f:03:11:cd:df:1d:26:34:34:02:af:12:58:ca:37:36:d3:a8:
a0:00:c5:7a:e9:bf:0c:5e:a8:ae:94:05:d9:36:91:76:63:2c:
a8:d7:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:44 2026 by rpki-client