Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
File: JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer (raw, json)
Hash identifier: Hnj+ERRwNOGKNn2ux7VSNk+tp2aN8xeotVLcpJWzp44=
Subject key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1C0F45D201D6B5BCA8559DD4F74BB92F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Nov 2026 15:36:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214770
IP: 46.17.216.0/24
IP: 2a01:e900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:f4:5d:20:1d:6b:5b:ca:85:59:dd:4f:74:bb:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 9 15:36:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:de:d0:c1:2f:7a:bd:80:1b:9b:78:bc:8c:
24:6b:4b:d0:d8:53:16:b8:3d:3d:8e:7a:70:63:ca:
80:45:51:0f:e8:06:96:6e:52:78:ce:04:45:09:48:
a0:2d:fd:5c:e2:39:46:5e:27:1f:9b:1b:53:c4:19:
48:8a:c0:9f:6d:e8:65:08:83:e8:4c:5c:2e:6a:b8:
a0:0c:57:a3:33:41:ce:da:b2:aa:94:1f:59:e5:a2:
70:10:68:b6:df:52:01:20:8c:eb:a7:91:ad:2d:d3:
10:60:d6:0e:e6:77:5f:b6:5f:26:66:76:5b:85:ff:
df:9c:ef:4a:dc:8b:bd:9a:25:94:53:60:e5:bf:3f:
e0:6f:3b:b1:4b:0b:a9:33:58:f6:84:bb:8a:a5:27:
07:34:d7:3f:f2:be:34:e3:2a:03:10:00:df:ac:b4:
b3:8a:2c:d3:f9:73:de:65:c3:ad:24:07:2c:40:c4:
9a:0d:c9:47:3b:71:58:22:ab:90:c3:a7:ea:e6:f6:
34:3c:86:e1:9a:b4:8f:27:22:ff:65:18:49:7c:cc:
b2:df:b0:60:8e:38:c2:23:ad:38:99:df:e9:a8:96:
a9:49:24:4d:02:ce:4f:90:99:1e:ab:30:e4:81:41:
aa:4e:54:be:e8:1d:5f:02:94:33:74:d0:0d:ba:e2:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
IPv6:
2a01:e900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214770
Signature Algorithm: sha256WithRSAEncryption
22:44:df:67:2b:16:eb:f8:0f:b4:d8:12:bb:c0:f2:e9:a0:4b:
d9:48:59:cc:d0:b8:35:f7:e9:da:da:13:1a:f2:e4:4c:f8:f1:
10:8a:54:ee:b7:6e:97:c3:07:6a:5c:0b:61:11:7c:66:21:8b:
f9:1c:6b:1c:c4:b2:54:22:b9:ce:45:65:8f:97:7e:74:43:0c:
8e:1a:2a:8c:f2:06:26:ec:90:96:fa:46:8f:ab:93:c8:9d:37:
7b:2a:bb:55:9e:9a:4c:25:7e:87:fe:68:d5:c2:ca:2e:70:12:
c7:72:db:2a:d1:3d:14:f8:6b:58:80:31:35:89:0c:bc:53:bb:
93:53:57:fa:7f:0f:c5:29:64:f8:5e:e7:a0:5a:ce:2a:d4:72:
51:81:17:fe:21:27:f8:96:2f:fc:bf:97:8e:0f:6b:a0:8e:4e:
e0:a0:b8:8b:6f:93:3a:74:fc:15:46:e7:c2:24:c7:3f:3b:e9:
c2:8b:a3:b6:59:55:40:1a:67:0a:f0:04:a1:b1:0b:b5:c2:5a:
45:47:f9:3d:e5:e9:cf:72:78:ef:dc:62:93:86:db:67:5a:77:
cb:56:f4:ce:25:72:6a:41:34:6c:7f:88:ea:7c:a5:d0:c6:4e:
68:b8:b8:79:96:fd:d3:ea:3c:bc:db:e8:e6:97:ef:52:6b:7c:
d8:eb:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:43 2026 by rpki-client