Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.cer (raw, json)
Hash identifier: lDUrzHbQMyv1y3t8Q1N2NMTz5qnhpZke1W/7F80viTA=
Subject key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5A011FAB7BD8E8F24020CBB9006845
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201295
IP: 91.243.114.0/24
IP: 185.252.28.0/22
IP: 2a09:7fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:01:1f:ab:7b:d8:e8:f2:40:20:cb:b9:00:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:d0:98:c2:56:35:3e:1f:d1:d4:a4:72:bb:
7f:50:77:18:48:e1:9d:a4:d3:a5:d4:e3:6b:ee:60:
7b:5d:74:42:37:8d:e5:49:21:03:79:fa:0a:b0:6f:
46:73:4b:cf:6c:7a:3a:32:c0:da:44:62:20:62:e8:
99:da:3e:e1:af:2c:b7:b0:eb:61:d0:fc:1a:18:eb:
cb:b5:19:32:50:c1:cf:4f:88:86:2c:95:66:d8:44:
d0:77:cd:7d:33:17:d9:0c:34:b6:e4:c2:d7:9d:4f:
ba:c0:cc:7e:3d:58:59:60:b2:9f:86:8f:d8:9f:ed:
d8:5f:46:86:b0:e2:56:1d:ce:8b:cb:30:aa:56:5a:
2a:90:bd:c8:d5:d3:25:4a:42:e9:44:68:0b:d9:03:
5c:01:38:9c:14:f5:30:9c:1d:05:4b:39:5e:69:e3:
3a:69:a6:ef:52:80:e6:e0:9a:05:67:a1:11:96:b6:
38:3e:a0:0d:55:0b:d5:be:9d:be:14:bd:f4:4a:26:
6c:56:fc:e3:25:7e:63:80:9f:29:e7:de:53:50:c9:
f8:25:98:00:2a:96:6c:17:c8:8d:b3:29:50:0c:b4:
f8:17:5d:8a:4c:f6:d1:a4:a4:eb:0d:eb:4c:df:39:
4d:19:91:be:da:d6:41:7f:43:13:ed:8d:03:3c:ac:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.114.0/24
185.252.28.0/22
IPv6:
2a09:7fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201295
Signature Algorithm: sha256WithRSAEncryption
35:54:2d:ef:d7:6b:f4:d8:ff:04:7d:74:23:33:2f:80:db:70:
b9:7b:fc:77:37:19:d8:23:93:2e:48:c6:64:6b:49:d9:03:c8:
a6:c1:8f:6a:86:29:4b:31:30:ad:a5:43:d0:62:a8:5b:44:c5:
c3:ad:04:1a:88:25:a3:e8:6c:99:92:91:c7:14:de:40:16:9a:
d8:55:60:15:34:57:11:0c:65:54:50:21:95:e8:a3:d7:7e:2a:
d5:d5:27:f4:55:d6:cf:e7:3e:af:6a:98:65:88:6d:23:60:2c:
ac:57:62:55:71:ff:8f:32:97:34:60:b1:68:4f:13:a1:cc:33:
99:df:bc:42:b2:07:e0:41:81:20:f7:71:3d:e9:bb:46:27:cb:
c8:07:89:4d:7a:4b:df:49:26:cb:65:e9:22:be:53:3c:07:25:
ee:d3:1c:10:d9:5d:9f:be:08:ac:86:4c:31:fd:fd:9b:28:72:
14:39:20:e0:5a:6c:c6:f4:50:bf:c7:83:5e:27:9f:be:e6:74:
8d:2d:9a:e8:b2:c4:ba:9b:18:15:56:cf:1a:ac:1d:85:c6:a7:
82:84:21:f2:0f:76:82:06:7e:74:b4:04:24:32:72:17:36:f5:
bb:dd:de:be:69:a5:d9:02:ea:56:79:7f:8e:46:62:b9:79:e1:
46:ed:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:25 2026 by rpki-client