Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer (raw, json)
Hash identifier: HEzVlodnaVJDgWcNRoNcs15gl7HQH4HU10/psZH76uQ=
Subject key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA371C390F6FAF33A2D15155A5CF342
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199326
IP: 217.70.6.0/24
IP: 2a13:7700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:71:c3:90:f6:fa:f3:3a:2d:15:15:5a:5c:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:47:5b:29:39:3e:9e:6d:4f:32:27:f6:66:
cd:4f:2b:aa:30:86:a0:5a:4a:ed:2a:3b:bb:b5:9f:
42:63:d4:ee:7c:b4:b8:40:78:5b:e8:07:e3:4f:5f:
9b:5a:a8:4b:4b:50:ac:14:13:03:02:06:5c:e7:9f:
cf:37:c6:e5:57:e9:4b:a5:4d:ac:25:e4:9f:7b:b5:
6f:9d:d4:b9:22:36:f6:34:ad:1f:43:3b:52:8e:61:
a6:c5:df:09:2a:af:b5:0b:36:20:11:19:c0:2e:c8:
13:9c:0c:2f:e7:d4:49:7b:e4:b7:25:3d:3e:99:fe:
49:38:b2:4b:0f:9b:3f:5f:b6:26:9c:aa:d1:03:dc:
9c:da:44:cb:c1:5a:c3:63:5c:b0:ce:dc:2f:9b:93:
68:da:24:55:7a:62:5b:b0:77:83:43:ea:aa:3b:3f:
c9:79:ff:05:fb:da:b0:f8:f2:2b:06:1a:20:45:07:
ff:cb:27:b0:91:b5:e7:55:85:65:ec:37:47:13:56:
96:57:6e:09:a4:ae:e9:04:34:36:7b:51:08:52:ef:
9b:7d:fa:b4:af:29:ca:f7:1b:5a:ba:94:ce:5d:29:
bc:99:bd:2a:a6:c6:63:5b:d4:0b:33:7e:bf:25:4b:
ff:bc:1d:19:d9:c8:51:e4:3c:54:1c:b3:ca:c2:33:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.70.6.0/24
IPv6:
2a13:7700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199326
Signature Algorithm: sha256WithRSAEncryption
54:79:69:2f:93:36:95:f7:6e:d2:13:c0:e7:20:b4:5a:0a:ad:
a3:13:cb:0b:df:3c:6e:40:d2:2a:33:b2:18:fb:c6:25:11:6f:
9e:07:a8:35:a7:31:60:02:ea:b9:2a:ea:fc:8f:01:d2:87:c4:
f3:4c:96:35:29:47:62:af:ec:ff:3e:bf:54:99:6a:b6:5c:b9:
e7:28:66:05:f4:63:d3:b8:7b:4c:ae:54:ca:80:85:fa:de:5a:
68:49:eb:1d:e8:cb:df:86:db:27:38:5c:6b:1d:33:1b:c1:32:
90:ea:cf:b2:94:79:f7:a0:a2:4e:14:c1:31:df:e9:13:c4:0b:
10:e7:79:2c:10:39:46:9b:48:74:31:d5:e4:23:24:de:d5:f3:
f7:ee:c7:e1:64:eb:52:c3:e1:23:02:fa:a6:9b:05:41:87:c5:
ab:5b:7e:f4:62:f3:f2:5d:4f:82:d9:af:65:27:f9:79:de:43:
64:6a:e2:84:1a:87:e8:2f:8e:b6:b6:0b:42:74:2e:c2:82:52:
af:bb:69:73:f7:aa:7a:75:e1:f4:51:f8:74:6f:71:8f:29:22:
d4:51:09:12:73:4f:66:4a:f9:02:b7:bb:36:1b:6a:76:46:30:
3d:6f:a3:6c:25:56:00:d8:24:80:9b:e7:94:ef:27:30:b2:58:
e3:93:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:54 2026 by rpki-client