Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer (raw, json)
Hash identifier: uh8is9K9ipqZqMALjKpPP7DKAKLOgCeNjRxeHL9yNqo=
Subject key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6E072486A2FDE711CF0D66D1B2042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35320
IP: 78.154.160.0/19
IP: 80.93.112.0/20
IP: 185.12.140.0/22
IP: 2a02:5f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e0:72:48:6a:2f:de:71:1c:f0:d6:6d:1b:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:7d:df:15:a0:bd:56:c1:6f:9f:72:4b:d5:
53:22:15:47:23:82:bb:5d:a2:ad:49:46:26:71:57:
56:79:0d:eb:82:1b:35:5f:fa:93:ad:28:3b:75:ff:
e8:59:77:b8:86:00:f7:f4:cb:cd:e4:ce:93:73:02:
fe:77:83:09:8d:44:13:ea:81:14:58:f2:80:db:1d:
06:4d:34:48:cd:da:09:6c:e4:85:af:0b:f5:12:d5:
e3:1e:4a:c5:93:d3:2c:03:58:2f:32:36:e7:54:cc:
f5:b1:a4:00:e2:91:8c:c4:40:5c:a0:fb:72:a0:83:
33:37:e7:c4:49:9c:85:99:51:71:64:fd:73:00:0b:
a0:1a:53:79:bb:d3:6c:a5:9b:6b:20:b6:3c:cc:90:
99:ba:9c:34:e3:35:ec:1e:57:5c:79:64:4c:09:71:
f0:0f:86:b4:92:78:6d:1f:0f:d7:a6:8d:a9:1e:fd:
41:27:30:24:bf:a3:c1:5f:aa:bc:52:23:1b:37:e3:
ab:11:c1:8c:de:40:d2:df:37:72:3b:82:e3:cd:76:
a2:46:c5:3e:ab:55:26:5b:d7:ae:b3:74:7c:5c:f9:
c0:ad:07:99:f8:6c:b8:4f:05:87:4d:d2:c7:8f:8b:
eb:e7:7f:8d:ae:fa:eb:92:62:4b:31:c7:32:e3:be:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.160.0/19
80.93.112.0/20
185.12.140.0/22
IPv6:
2a02:5f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35320
Signature Algorithm: sha256WithRSAEncryption
65:03:67:37:16:03:16:85:14:c5:8c:f2:f8:38:a9:3b:e1:a2:
88:4a:96:71:91:4e:cf:2d:69:c8:e7:99:79:53:a6:9d:99:7f:
16:dc:60:08:36:f1:e9:70:04:70:2a:73:cc:ba:d3:75:28:b2:
25:2b:b6:e6:c7:50:2e:43:9f:62:20:03:37:15:65:a8:2a:51:
3c:d5:1f:4f:51:7b:32:a3:61:e1:b5:73:83:5f:e5:18:6d:8f:
e7:19:b2:df:30:c1:bc:91:76:1d:91:06:16:17:a5:88:9d:a2:
6c:0b:04:70:ed:f3:bc:32:44:50:eb:57:77:07:8a:6d:0d:fd:
3e:7f:fb:8b:81:a6:df:b9:76:b3:c0:1a:9d:a2:97:a2:9a:70:
dd:86:f4:bd:d4:4f:67:45:92:c1:54:b4:76:52:43:12:9e:d9:
ad:03:21:a5:b5:f2:d4:56:12:9e:ee:d0:b0:08:88:b8:42:64:
81:d2:af:54:de:92:6d:31:11:68:a7:ec:e9:9e:51:5b:c7:99:
69:77:1b:0b:02:5b:34:71:0d:84:4b:4f:56:b2:f6:f3:4a:8c:
48:5c:65:f0:8f:33:9c:6c:78:e0:06:f0:46:28:04:de:72:e0:
02:f4:dd:2d:8e:bf:f8:05:87:80:e4:8f:f6:9d:b6:94:4c:18:
0e:74:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:15 2026 by rpki-client