Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.cer (raw, json)
Hash identifier:          j0T29SP2c1hBlTxgsYTzLFZTHgQJVZPCA5zbvmexk34=
Subject key identifier:   46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F36D1F0345BA469158EFD2301BAC12C67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 06 Jul 2026 09:45:56 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 219274
                          IP: 194.56.72.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:d1:f0:34:5b:a4:69:15:8e:fd:23:01:ba:c1:2c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  6 09:45:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:93:b2:a0:4c:14:52:67:87:ed:4b:b2:7e:
                    51:f9:5b:72:91:ca:b5:07:ba:a6:ca:2d:fb:fa:4b:
                    58:b7:0e:5f:12:21:bd:7f:9c:b5:1e:70:62:95:7b:
                    77:df:68:90:86:1e:c6:a2:c6:d0:9b:a3:1d:f5:e5:
                    4e:d3:08:40:e6:21:30:1f:10:4c:0a:19:5d:ef:97:
                    1f:94:30:f4:2d:4f:79:ea:5d:7e:c7:1d:c8:bb:78:
                    9b:86:36:24:80:23:46:f8:cd:bb:4a:d8:27:84:41:
                    ce:cc:fe:33:b2:17:34:b4:1f:2d:77:ed:59:df:78:
                    69:de:1e:f3:50:71:e6:bf:ea:9e:70:43:c4:7a:7e:
                    27:c1:5d:3c:02:4d:b7:5f:a6:08:0c:bf:8b:3b:e5:
                    54:fd:47:d0:0e:c6:fd:16:eb:5b:01:3f:a5:a8:d8:
                    fe:23:4f:c9:05:b1:37:4a:54:68:39:a4:4d:e9:5c:
                    cb:4c:89:7e:32:e6:2b:90:b5:45:0e:7d:14:ac:78:
                    7f:a2:62:a9:1d:57:df:53:ec:36:cd:f9:96:30:a1:
                    e8:13:6f:81:ec:c9:e8:e0:7d:d0:77:71:ba:36:42:
                    5d:e9:f8:ef:a8:ac:cf:7b:2f:64:21:42:b7:2d:b5:
                    18:10:12:5a:0a:7c:96:32:18:56:3c:3c:cd:8a:a7:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.72.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219274

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:17:0c:69:b6:08:56:47:93:94:30:a0:4d:e8:ef:49:27:
         90:da:57:28:55:54:9b:21:89:b5:29:20:06:8d:31:c7:56:68:
         7d:26:6d:86:f1:bd:c5:c8:0c:ee:13:f3:f1:d1:e7:5a:6e:3f:
         84:ae:ed:74:04:c2:bd:fa:6e:f6:45:4f:ea:bc:50:e1:49:42:
         f2:46:d6:96:69:48:d6:aa:99:dc:cd:7f:c5:1b:08:cf:f3:74:
         ce:12:25:60:4d:dc:41:15:f7:fb:ac:22:89:d3:e9:04:9c:90:
         4a:be:ac:16:7e:71:f3:2b:5e:ae:a3:3d:c1:6d:e5:c6:a5:af:
         3b:9b:d0:9c:9c:a2:7c:7d:53:d1:5c:80:8e:8f:29:15:3e:a5:
         ae:f1:94:6c:92:05:df:45:70:55:8f:07:94:59:d2:51:be:20:
         07:f1:0b:1d:4c:48:47:99:a1:06:86:81:28:59:13:84:0f:6c:
         3d:7c:e5:cc:05:17:75:73:20:92:c8:d8:2b:38:79:b8:e3:ba:
         13:3d:b7:c2:52:7c:9b:cc:7e:16:d3:5c:85:00:86:57:2e:8f:
         1c:56:5b:e4:c4:e6:38:ec:da:4b:db:a4:fc:a1:e0:ae:4c:4b:
         44:ae:0e:3a:2d:b7:d8:7b:41:55:68:ca:78:24:cc:60:a9:63:
         21:c0:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:15 2026 by rpki-client