Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.cer (raw, json)
Hash identifier: BtT3Bi+4lCuXUav6KnZyq4fc/V66jlNbfPDPHiRMDps=
Subject key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F80CA41194FE26CBC32ECC1DB95A614
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203358
IP: 185.253.59.0/24
IP: 2a12:c140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:ca:41:19:4f:e2:6c:bc:32:ec:c1:db:95:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:15:98:c4:96:4b:72:85:2d:ba:41:5c:5f:
f9:5c:8a:a2:a8:c5:7d:08:ce:a1:c8:d7:3e:85:ee:
87:eb:3f:14:c7:ab:d8:b7:b5:31:2d:ff:ef:f1:15:
de:ac:4c:b6:4c:12:c6:a3:f9:a0:8e:40:83:78:6e:
0e:3f:e5:63:9a:45:8d:12:fb:b6:3f:d6:cc:b8:d3:
89:ab:3b:8c:6d:24:00:ce:38:9b:3f:4e:ff:c7:5c:
0e:cc:e7:43:27:c4:fb:78:6e:15:fc:0b:60:4c:6c:
f9:c1:74:dc:9e:fc:39:6e:a9:74:38:7b:cb:71:85:
fb:fc:1a:86:e1:64:36:e8:21:5a:b8:fb:cd:16:cd:
46:ce:b7:da:9b:cd:5f:3d:ec:7d:18:06:64:c1:f3:
af:aa:b1:0d:4e:98:70:4b:b7:d8:27:27:66:e0:2a:
61:bd:f3:89:5d:38:63:ab:07:2e:fe:67:e1:0d:cc:
b5:0a:dc:a9:c2:9d:56:bc:45:4e:e1:94:ac:40:7b:
47:32:b2:70:99:03:fb:be:21:0a:b4:41:94:e3:5b:
51:0d:77:94:ab:2f:05:23:01:3c:92:7c:f9:1f:95:
55:4a:ac:c2:4b:fb:ea:e0:ce:d7:48:70:13:cb:c0:
12:05:0a:22:3a:f0:1e:40:cb:ec:fd:2e:9b:c0:b7:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.59.0/24
IPv6:
2a12:c140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203358
Signature Algorithm: sha256WithRSAEncryption
b0:ff:50:27:88:6a:db:88:7b:4a:fe:2d:74:9d:bd:a7:2d:38:
55:a6:05:6d:0e:cb:6c:4a:c1:8e:b0:e4:de:68:e7:df:56:46:
26:13:93:3b:f0:e5:41:33:c5:b6:09:6a:d2:f0:09:aa:d0:75:
77:6e:a4:d7:eb:3f:75:d9:49:eb:a6:10:09:f8:ee:5b:fd:80:
c6:c6:b8:8b:f9:70:4e:bc:51:10:c6:25:09:52:f8:b3:0d:3d:
6a:c4:b3:e5:5f:c5:ee:9d:ed:aa:94:94:ce:da:b8:20:1b:88:
ff:4c:f0:6b:7d:6c:30:7e:19:9c:fb:b7:6c:0e:b5:c8:47:0e:
52:8f:a1:83:e5:67:89:4a:ee:2b:80:0b:65:12:95:c6:a6:81:
4c:c1:dc:14:17:1f:f7:19:1f:1a:89:2d:62:ad:1a:a9:bb:45:
d0:f5:0b:4b:34:77:09:ed:db:b3:d7:1d:79:46:4e:ac:e0:6e:
f3:fa:50:80:5b:3d:6d:b4:39:53:36:67:84:74:47:c4:8f:1f:
d6:25:f8:76:fe:5e:5b:ec:57:57:51:b6:74:6c:10:2f:0f:93:
81:70:1b:e4:8d:da:ea:da:ca:da:9e:b3:69:ad:5b:4d:85:f2:
6c:08:4b:f2:a0:dd:dc:d7:77:fa:ac:39:73:31:04:ea:09:0c:
70:61:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:16:37 2026 by rpki-client