Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer (raw, json)
Hash identifier: cRynIrBGx0PSsrDWx3xrqWqGvgTO7aCRdUP1amKTYto=
Subject key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1ABBDB75E7373856A88BAA1F3E7ED5EDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Nov 2026 12:44:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59874
IP: 94.126.120.0/21
IP: 185.68.36.0/22
IP: 2a05:1580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:bd:b7:5e:73:73:85:6a:88:ba:a1:f3:e7:ed:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 12:44:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:06:4f:96:49:31:b6:6e:28:fe:fe:9b:58:
25:8c:81:84:55:69:6e:ba:94:21:3a:8a:70:c9:28:
f4:e6:bf:63:74:1b:2c:d5:a8:98:06:a3:95:4c:fc:
f7:3b:8e:6f:2e:45:7e:2f:54:e5:8e:31:d1:cc:74:
ab:6a:6c:c5:12:35:68:51:d3:0f:66:53:7c:3e:67:
dc:f3:cd:3d:b4:81:50:ff:f6:14:32:e4:ac:00:21:
af:2b:43:02:e8:63:4c:41:b4:fd:c4:cf:cc:02:b5:
9b:6b:e6:9d:3c:02:6b:ed:c4:32:5a:1c:e9:78:3f:
d3:a4:2b:dd:aa:1a:8b:f5:ec:62:15:8b:54:aa:e7:
e0:eb:ca:49:cb:3b:68:ff:8d:be:0b:65:6d:50:76:
3c:a9:81:be:4c:6e:c4:77:76:04:e7:5b:78:16:60:
dd:6a:2d:4a:65:ef:55:b3:a0:11:c3:eb:b6:a9:45:
85:b0:70:4d:f8:51:1c:fa:df:88:c3:02:87:56:c2:
dd:9a:5c:71:95:27:75:a6:f8:58:e4:c5:08:85:79:
f1:6c:67:83:14:6a:69:fe:da:ea:a2:8e:e6:d1:aa:
96:cf:96:17:6e:14:31:63:be:da:7d:3f:63:f9:ea:
bd:11:da:09:12:ff:18:cb:5d:67:ea:5f:61:47:20:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.120.0/21
185.68.36.0/22
IPv6:
2a05:1580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59874
Signature Algorithm: sha256WithRSAEncryption
05:89:b4:08:d8:f4:74:fe:1a:6e:70:ce:fe:b1:05:a3:ae:f7:
ef:16:43:13:31:ac:ef:23:39:35:64:ff:9d:08:1a:5a:e2:8d:
72:ac:64:e9:e6:f1:8d:21:a8:53:ca:d5:62:9b:70:e7:49:ca:
a3:a6:48:be:e4:98:95:f9:37:99:54:60:2c:b8:bc:c4:bf:91:
53:43:1b:9e:2c:f2:9d:97:54:e7:6b:6f:cf:66:c2:df:bc:cd:
fc:cf:b4:23:a4:06:a1:e9:bf:7c:48:0b:88:50:cf:59:86:e5:
84:f0:1b:5b:7d:56:e8:3f:53:f5:06:90:b8:57:65:57:65:17:
eb:9e:99:a2:61:33:0c:2e:f4:98:c0:75:79:64:07:2f:6d:2b:
15:c9:06:03:98:0d:1d:62:96:15:99:b7:61:31:63:c6:fc:97:
3e:17:35:7e:20:61:02:7e:3d:ff:58:5a:63:a5:3d:e4:51:20:
98:71:9b:4c:9b:3a:e5:07:76:8b:4d:55:5d:62:ec:f6:e7:64:
5b:dc:b3:56:db:3a:1c:da:a5:ac:e3:a5:05:b4:e0:ee:4b:a3:
20:6c:ca:07:0c:e0:b5:b1:29:b1:ed:43:c0:c7:79:3e:61:38:
3d:a5:d5:59:8b:51:00:98:fa:54:7d:e0:e9:c5:07:0b:30:e3:
8f:54:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:47 2026 by rpki-client