Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
File: WqMimeK05SO32u82O36srTLFxkk.cer (raw, json)
Hash identifier: MrDHYkOZO1gyWjc0UIG+C/OMLWkgKeFV8VE18FwePoA=
Subject key identifier: 5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB58751EF94EEF08AE16BD776EC8CAF61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Mar 2026 21:07:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205838
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:87:51:ef:94:ee:f0:8a:e1:6b:d7:76:ec:8c:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 21:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aa32299e2b4e523b7daef363b7eacad32c5c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:fa:a2:95:f7:76:08:00:3c:d4:8a:62:35:
56:64:b2:7f:e3:00:37:d6:6e:ff:1b:79:b6:4a:b8:
4a:69:aa:21:ff:f8:ed:91:ca:67:0b:e6:e0:40:f7:
f9:ed:a3:27:00:5a:01:67:2f:d3:8a:45:3e:57:b4:
aa:c2:b0:0b:76:0e:4a:0f:f7:f4:53:c2:66:ef:5f:
91:5c:c1:2a:d6:35:76:48:b7:0e:39:fa:f6:1d:18:
bc:02:2e:72:49:43:a4:12:e6:d5:34:27:74:86:15:
d0:7d:2d:92:a5:15:1b:fc:a7:8c:17:19:cb:d1:6e:
4f:19:94:93:46:98:14:00:55:28:a4:c1:d7:87:84:
59:f7:c9:60:57:8f:f9:73:6b:5e:e8:6c:2a:a1:38:
08:e0:ed:f7:68:08:13:2e:82:ad:c9:53:07:6f:f3:
0d:36:29:91:11:6d:2d:31:30:07:fd:18:86:41:58:
9b:ec:9f:c8:cd:76:21:fc:f3:50:97:76:28:22:6b:
1b:ee:47:83:b8:e1:31:f4:f0:db:f9:b0:97:d6:72:
6a:d6:66:80:ae:c0:d7:db:cb:c3:9b:30:1f:12:b3:
b6:e4:da:9e:f8:f1:ec:11:2b:60:60:91:93:8c:24:
b2:b7:3a:09:c3:b2:75:02:8e:a1:9b:56:c8:8a:ca:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205838
Signature Algorithm: sha256WithRSAEncryption
10:20:80:a4:64:14:9c:18:a0:f4:96:a3:7e:b1:5f:56:4c:d1:
dc:1f:22:c9:c7:6d:46:08:aa:66:d4:38:34:6d:2d:66:1f:7b:
e1:12:15:75:e5:81:77:2a:56:6b:86:f2:ab:df:7c:56:18:5c:
5f:e2:20:78:ee:4f:ad:ea:ae:18:0b:05:ef:81:84:ec:ae:8b:
49:8a:d8:0e:3d:e4:e8:8c:14:3d:01:e6:ed:db:85:ce:57:df:
9e:94:3f:d4:1d:3d:73:56:1e:e9:cf:b5:c1:80:c1:30:ef:2f:
86:93:ed:4a:03:63:ff:83:b1:ce:1e:f6:98:92:38:47:e3:1f:
6c:c0:9f:a1:93:28:84:02:27:e2:6d:11:13:11:3a:2a:77:ab:
22:29:5c:1b:76:d9:ef:6f:77:ca:d3:6e:67:2b:8f:52:57:bb:
ad:9e:0d:98:7b:e0:04:98:8d:29:ff:1b:90:ae:22:f5:f4:2a:
a8:50:20:22:dd:d6:de:75:7d:60:a8:c5:bd:d8:88:29:44:93:
94:b2:53:6d:55:88:78:43:76:9d:cb:6b:d8:17:f5:fb:7e:bd:
ff:0e:15:ad:71:b5:fa:8f:f4:98:53:a9:4b:22:65:90:61:c9:
ee:6c:ca:5b:83:ba:58:69:dc:e3:fe:64:3f:3b:91:17:3b:08:
95:94:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:30 2026 by rpki-client