Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
File: jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer (raw, json)
Hash identifier: /BDAx5se1+M2gkQqJdzLM9BzOlcpTp/vx4LbmFEBQTI=
Subject key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F33AF60665000A0C5200E9181704ABF59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 05 Jul 2026 19:09:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59763
IP: 185.192.84.0/22
IP: 2a0a:29c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:af:60:66:50:00:a0:c5:20:0e:91:81:70:4a:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 5 19:09:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:a2:e8:e8:48:ab:2d:1d:df:f3:aa:6f:da:
38:bc:8d:7c:d2:7c:c1:60:e7:b9:90:c9:12:12:46:
03:9d:ad:9d:a7:ca:60:90:1c:a4:2e:e3:dc:d8:11:
47:45:a7:bc:93:e2:d0:66:31:89:a9:c8:bc:90:9c:
cf:f5:5f:ca:fc:10:a4:7b:c1:e9:a3:d3:ed:d5:fe:
b4:d2:0c:c6:67:62:44:d9:63:5f:d5:e4:88:69:52:
8b:c9:e2:0b:7b:57:f0:4b:63:fa:5f:b6:bd:17:42:
c2:5f:cf:90:6d:77:0e:aa:e7:cc:d9:d0:93:4c:e9:
85:2d:30:88:29:ce:37:e2:b0:f6:cb:e3:c4:6a:a3:
3f:c9:fa:46:1d:23:79:5b:6d:67:ad:8f:5f:3f:81:
0b:94:8f:a1:ab:20:be:fd:75:c4:d9:77:d0:57:2d:
c3:2c:86:6f:52:0d:e0:2d:32:32:76:ea:5c:b4:dc:
37:f4:0e:e3:9f:74:e0:b4:49:56:58:0b:b4:cd:5f:
93:c8:29:49:d0:bf:bd:84:bc:2a:c3:91:47:df:c5:
28:97:dd:2a:0a:b4:31:cf:d1:f6:dd:da:54:8a:81:
5d:29:a5:4e:24:52:d8:fe:13:ad:35:97:ff:cd:77:
d1:ec:9c:37:bc:b2:45:ad:97:10:a0:c1:f1:ff:f7:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.84.0/22
IPv6:
2a0a:29c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59763
Signature Algorithm: sha256WithRSAEncryption
67:d0:a7:b4:ce:9f:dc:de:61:72:56:fd:f5:14:d9:dd:36:79:
38:3e:ae:ce:98:a2:c3:a6:48:7b:e1:7d:6f:84:9a:06:fa:fb:
e4:2b:e7:ae:33:7b:03:ea:2c:51:ed:44:76:60:ce:1f:5c:51:
c0:93:53:e6:16:c2:92:97:b0:d7:8e:5a:36:4f:ac:63:30:b0:
3d:e8:9f:4e:81:ff:9c:f6:26:ae:2e:ea:d6:65:f6:3f:1c:85:
64:8d:ee:83:60:2f:8e:98:58:22:d3:c3:40:f2:ae:01:e0:b7:
ac:81:54:b9:8f:11:2a:93:f4:75:04:35:67:6b:33:45:ed:b1:
b7:a4:3e:f8:1a:f7:99:02:8f:ff:1a:ee:aa:47:d9:3e:1d:a6:
8d:ff:28:ba:08:3f:62:78:49:69:27:b2:74:01:d1:38:a0:97:
9d:dd:b6:97:58:cf:3d:a0:21:df:09:7b:fd:e6:b7:d8:c0:75:
7f:5e:4c:9e:57:66:7d:46:68:d0:43:7b:da:c7:67:27:34:29:
8f:3c:36:72:be:d2:08:4c:ad:f5:42:ca:ef:60:6c:b1:bc:26:
6b:7d:ca:19:55:c0:cf:7c:34:53:83:b9:c6:6b:2b:7b:a1:61:
95:0f:3c:97:cf:86:80:c1:71:e0:af:09:01:20:0b:e0:f8:de:
dd:03:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:34 2026 by rpki-client