Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
File:                     jJED0ak0JRu5ixHxacuLK97Gojk.cer (raw, json)
Hash identifier:          sh0V22mCPNKi7Z5utOawL/fcYJLyYDXt9eE9qT5Iv6c=
Subject key identifier:   8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18FB180EEC45AE1F01D12E810B09E553
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:42:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 42199
                          AS: 42402
                          IP: 91.189.56.0/21
                          IP: 2001:678:10a4::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:fb:18:0e:ec:45:ae:1f:01:d1:2e:81:0b:09:e5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:42:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:bf:c3:1b:f8:ce:06:83:21:a6:91:f5:95:
                    76:0f:f1:4f:92:05:29:a5:72:ad:a6:a8:e0:a1:a4:
                    8b:e6:36:c6:be:d3:c0:98:77:7e:f9:e8:37:b8:e2:
                    34:19:fb:8e:d7:22:a6:e5:ee:05:f4:09:73:ee:65:
                    98:d9:28:16:eb:49:7d:78:7f:4e:95:c1:11:b5:94:
                    e6:45:f8:5d:38:0a:d5:28:14:50:f3:e9:d9:2a:24:
                    e2:a7:21:7c:51:38:be:6d:b8:14:b0:6b:19:17:bf:
                    2a:a8:f2:e0:43:87:c0:5d:5e:ba:3d:07:3d:f3:5f:
                    93:7a:72:4f:24:87:e3:88:0b:8f:27:21:44:27:b2:
                    7e:78:86:b2:81:55:e2:81:58:e5:ff:39:ea:a6:ee:
                    4a:5d:d6:2f:83:e4:0b:35:a3:52:70:72:1d:b8:ac:
                    31:32:de:33:df:d5:e1:2a:66:c3:a1:f5:b2:38:91:
                    a5:91:03:45:11:2a:0a:d9:35:0f:9b:4e:57:6e:c4:
                    d5:11:11:96:5c:8f:4b:97:ac:61:2a:e8:0f:76:07:
                    59:10:9b:58:c9:11:18:d6:35:e9:ec:44:8b:3e:90:
                    64:e5:bd:22:a1:75:43:22:ae:b6:a8:5c:29:41:0c:
                    6e:9a:19:2a:7f:fa:0e:35:3e:4e:26:88:c0:46:7f:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.189.56.0/21
                IPv6:
                  2001:678:10a4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42199
                  42402

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:0a:31:af:5f:d0:b8:47:7c:fa:95:8f:cc:b6:8f:99:73:
         67:c5:c2:1f:52:9f:80:0c:c7:76:9c:ac:8e:fc:32:26:9d:ea:
         40:00:6c:c4:55:8e:52:cd:f2:d9:4d:af:26:03:ad:6b:f7:73:
         53:1e:c2:bb:a7:6b:27:91:5a:e7:15:e3:91:1b:28:7b:81:e0:
         fb:48:1a:4f:82:e5:25:eb:a0:95:5d:df:7a:7f:c3:a9:ac:36:
         df:17:6e:11:64:d9:11:0e:34:ec:e4:ba:7a:7e:10:fd:5a:55:
         f9:48:4d:b5:ca:09:0f:ad:6e:6c:83:7c:1a:ba:1c:4a:9d:d2:
         a8:05:3f:9c:d0:b6:bf:20:a4:c0:69:f1:62:1d:61:ac:52:2a:
         cf:42:d6:6b:e4:54:d3:37:47:8a:42:8d:f2:a7:ef:1f:f1:7e:
         7f:28:4f:91:66:40:00:8d:d9:70:93:09:f8:e4:60:a0:85:2e:
         28:af:fe:b8:06:a7:b8:a3:25:17:b9:47:91:b6:75:2a:df:bf:
         df:98:6a:65:66:f2:f1:2e:64:fd:1c:e1:29:0e:d5:a3:58:56:
         3e:86:2c:6e:2d:12:ff:a3:48:38:bb:5a:dc:23:f1:9d:bc:88:
         1d:6c:4d:cd:05:86:af:9e:ed:af:0d:1d:4e:84:37:cd:c4:89:
         62:8f:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:40 2026 by rpki-client