Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
File: LWHdlSWcJozW425VvLLLzFNbCog.cer (raw, json)
Hash identifier: gv1pjkC0Ex9jeSQbg3jxV2tWYb+KD7KK9OUGXvykdF0=
Subject key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB1D83572EA420E0D6B9DB5CB491B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 137.253.0.0/16
IP: 192.12.72.0/24
IP: 192.138.1.0 -- 192.138.8.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:1d:83:57:2e:a4:20:e0:d6:b9:db:5c:b4:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:4e:b3:57:14:03:02:b0:3b:3b:88:1f:96:
b3:db:49:f0:e2:32:36:08:3a:bd:1b:87:29:2a:e8:
07:a6:f5:06:47:f6:2f:83:d1:14:63:8a:5c:b1:02:
5b:d1:92:51:34:9b:7b:f4:a2:ce:03:c3:b0:06:ae:
85:2d:48:dd:7d:e0:c3:55:54:dc:91:fd:cd:9f:af:
11:69:9e:94:1d:31:33:86:1b:30:29:af:49:eb:46:
04:a8:b6:58:95:ae:4d:e8:88:0d:2a:03:ee:f4:53:
a7:7f:b7:52:30:8f:69:e8:05:86:54:7b:15:7e:68:
a1:5e:ee:c4:64:f5:77:6c:4c:a5:b4:bb:54:45:fe:
4c:e9:52:74:3d:31:1e:b8:7a:9e:b9:ef:3f:f6:b3:
e2:98:82:09:78:4d:31:cd:3d:1e:13:95:cf:61:92:
98:61:8c:fe:43:c4:69:32:b7:d4:1f:a6:af:8b:94:
69:86:e2:41:21:28:91:81:73:49:02:1c:b1:a5:42:
24:c3:ad:48:a5:80:4f:ae:4e:22:06:ac:05:36:e3:
b1:8b:9f:63:f2:db:7d:44:d4:d8:35:24:bc:c0:e9:
d3:50:70:e8:3c:84:27:24:c6:c1:0e:59:1a:57:c8:
1a:ef:ae:07:58:29:00:e4:3e:be:18:04:bb:f0:db:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.253.0.0/16
192.12.72.0/24
192.138.1.0-192.138.8.255
Signature Algorithm: sha256WithRSAEncryption
28:41:cc:cb:b2:27:e0:66:07:f8:7a:e3:cc:f7:51:41:eb:90:
5b:95:af:10:15:2e:5a:21:90:53:a1:32:48:ca:84:28:98:47:
d3:53:9f:e6:58:24:bc:65:39:62:fd:37:a3:71:02:a9:7f:36:
76:7a:df:ab:3b:92:86:66:28:24:a0:a5:7c:2f:c9:2d:9e:95:
a4:ef:5b:3b:9b:9b:fd:ca:46:a8:6d:5f:4e:e0:47:7e:26:70:
f0:98:9b:2e:91:dc:48:4c:18:e7:18:10:4d:15:b3:14:b9:20:
b0:4a:3a:43:91:2a:d1:61:aa:b2:07:00:b1:33:0f:d3:f4:5c:
8d:10:ee:2a:fd:fc:00:84:15:22:c1:18:58:dc:82:67:f5:6b:
a7:5a:14:83:eb:72:53:ca:ed:26:2c:d8:dc:0f:51:61:c3:26:
b0:e2:8f:9a:f5:56:28:1e:bc:5f:18:21:68:00:25:89:5e:02:
1f:42:00:83:75:53:3e:62:94:dc:b8:66:82:e9:97:28:46:ba:
f4:bd:e5:a4:1a:af:0e:d3:20:77:80:c8:6c:9a:7b:76:08:79:
fc:5c:fa:0b:f9:f7:86:35:e8:61:d1:03:b7:f7:7a:ef:b9:42:
e6:ab:be:bc:57:14:c4:3d:7b:20:81:09:15:e7:60:ab:4c:71:
fa:39:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:13:04 2026 by rpki-client