Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.cer (raw, json)
Hash identifier: a3GWZslJChYPUEexCFir19Vzm+sHLpa+I1uRri5+LKY=
Subject key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC885D5621ED72815554A4E8E897CE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202565
AS: 203935
AS: 204166
AS: 206702
IP: 93.115.196.0/22
IP: 137.59.56.0/23
IP: 185.20.108.0/22
IP: 185.107.0.0/22
IP: 185.134.189.0/24
IP: 185.160.148.0/22
IP: 185.178.160.0/22
IP: 185.194.192.0/22
IP: 185.216.188.0/23
IP: 193.148.84.0/22
IP: 2a0a:1140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:85:d5:62:1e:d7:28:15:55:4a:4e:8e:89:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:13:03:82:3c:d9:49:aa:18:7e:57:3e:1d:
ef:8e:67:7c:ad:16:94:96:42:4b:7e:c5:cf:b9:c5:
b1:38:7e:79:76:a3:8b:71:b4:6d:dd:e7:79:46:a8:
98:3f:aa:92:80:d2:a8:f6:39:af:10:6f:41:70:6a:
9c:60:cd:73:07:dc:49:c8:82:6b:40:ad:59:ac:be:
4c:75:1e:68:24:4e:a1:96:1a:68:e9:18:df:07:26:
32:90:43:10:5a:62:09:31:1b:af:41:5b:0e:2a:d5:
15:32:66:36:83:18:f4:99:ef:56:25:78:88:9a:08:
be:8e:4a:b1:26:82:bd:23:9b:a0:3a:fd:9c:83:47:
10:de:f1:47:39:bd:af:c7:bd:13:03:08:3d:fc:25:
35:d1:58:b5:58:3a:70:48:21:21:f5:df:fa:b0:b7:
30:d0:70:52:e5:da:3c:b5:6c:a7:a9:c2:0a:af:32:
12:61:6d:91:86:38:80:32:e2:8d:7c:e3:bf:5e:08:
45:fc:38:96:93:c6:9a:c2:30:25:62:ab:e9:6f:03:
68:8e:cd:47:cd:15:56:ee:0b:76:2d:fd:a3:ca:cf:
80:20:c8:e2:f5:54:04:91:2b:5f:12:f4:75:1b:81:
1f:c5:57:e3:46:99:3d:76:7f:3d:d9:b0:ad:5e:7e:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.134.189.0/24
185.160.148.0/22
185.178.160.0/22
185.194.192.0/22
185.216.188.0/23
193.148.84.0/22
IPv6:
2a0a:1140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202565
203935
204166
206702
Signature Algorithm: sha256WithRSAEncryption
5d:35:c6:ba:41:2c:84:78:10:33:a1:64:51:2c:25:ff:77:a3:
49:15:58:86:5d:93:d0:d3:eb:38:d1:f1:78:ec:0f:39:2c:73:
2e:ed:ac:97:c8:3f:02:b9:c3:4f:3e:95:51:09:4d:e3:77:df:
e6:77:7e:dc:11:c3:1e:2e:20:02:8b:dc:07:d6:b0:eb:04:0d:
bf:9e:33:13:bf:4d:ae:d3:b9:91:70:1e:89:58:7d:e3:2c:68:
02:eb:d6:93:53:b8:bd:18:26:35:f7:70:9d:c1:0f:66:77:d9:
66:35:c2:f2:0b:ad:d7:20:ab:bf:11:a8:37:56:36:93:17:ae:
c3:14:96:6a:45:e0:4b:ef:66:f1:06:48:6f:e2:d8:87:ed:aa:
e1:84:2e:8d:5d:ec:5b:b9:0e:74:0f:b2:9a:58:e3:b6:c6:8a:
74:8a:9c:86:25:46:34:34:e1:8b:9b:18:f0:ab:16:84:d0:79:
ac:aa:a1:09:e4:ad:4c:a5:84:ca:83:52:84:5b:b4:47:bd:a6:
e8:a0:0a:5d:a7:2e:a7:e9:5a:8b:30:37:46:7d:0f:03:7a:92:
f9:94:ce:89:a6:16:57:55:f1:26:e1:53:11:98:6a:6b:0f:31:
45:52:4e:2a:22:6c:a9:e1:1d:d1:fa:43:9c:e3:5b:22:38:c0:
10:d5:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:45 2026 by rpki-client