Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
File: juAVoDODWjT8FmKMXFuAQ0IW8k4.cer (raw, json)
Hash identifier: rejZpmbcHORT8G00Eqii9vqGYkdxz04uxXgp057aqqc=
Subject key identifier: 8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6BC6C369D39B65919F2D5F7CCF44612E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 13:25:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204197
IP: 185.204.148.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:c6:c3:69:d3:9b:65:91:9f:2d:5f:7c:cf:44:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 13:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee015a033835a34fc16628c5c5b80434216f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:14:be:33:98:c7:92:c0:8b:d6:34:e6:3b:
e0:c7:6e:5e:91:25:93:53:ec:cf:4b:bf:74:e6:51:
14:9e:43:2b:7a:10:27:5d:37:a6:24:84:5e:9a:7a:
7a:60:a7:5a:16:29:7d:c1:d7:77:8a:47:1d:92:b7:
df:b2:7b:61:42:49:51:6f:f2:1f:c9:73:6f:9a:a0:
28:3b:11:16:aa:c2:33:0d:18:02:cd:b3:64:00:f8:
29:b6:73:71:76:ac:83:91:72:69:df:a0:b3:33:a7:
74:c1:2a:1d:bf:6d:b1:fd:55:90:32:ae:44:68:d9:
50:ea:d4:15:e6:28:b6:a6:3b:b1:a4:8e:95:62:c0:
b8:f4:dc:f4:98:ba:44:fa:21:d1:5a:d1:3b:24:4a:
32:d2:85:48:4d:e3:89:5b:39:97:a2:82:2f:31:96:
9c:04:a5:31:9b:3a:1e:bf:a2:6a:f0:79:8a:23:51:
0b:ad:fa:52:ec:a3:c5:cd:ca:a3:25:1d:87:2f:62:
37:27:c5:16:1b:e6:c9:08:99:eb:ce:66:e8:c1:e5:
87:3b:65:ab:86:02:81:b5:30:bd:e6:9e:26:b6:94:
9d:45:9d:c0:46:fe:fd:ef:92:14:d9:d2:bc:ad:3e:
c8:81:2c:35:2b:6a:00:be:8b:6e:20:3c:95:83:b7:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.148.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204197
Signature Algorithm: sha256WithRSAEncryption
9a:ad:38:82:c6:53:e0:5d:45:87:3c:d0:52:d8:df:bc:27:bc:
b2:d7:c0:1a:25:69:b3:22:96:74:8b:d5:02:9e:32:e3:b4:ba:
bb:53:e8:27:e8:67:5d:ee:e0:33:0b:0d:8a:06:94:97:5e:da:
c6:aa:fd:ee:c4:00:1e:27:21:2d:cf:e2:87:e3:cc:23:38:a1:
71:8f:71:1a:0e:0c:23:1c:d4:0b:5e:02:bc:52:0a:84:28:26:
90:28:fe:d3:e1:04:ad:7a:3e:91:88:5d:3a:24:91:8a:76:89:
cb:07:a2:ec:ed:61:b3:c8:66:62:45:1d:bd:34:ed:a9:01:47:
94:7c:5d:df:a5:3f:4c:5c:87:cd:fa:af:23:d1:18:03:d8:b6:
e3:6c:17:79:ed:5e:6f:83:3a:fc:87:28:bc:39:80:76:5f:bb:
c4:9e:ff:45:d4:3c:2d:1e:89:5c:ac:95:6f:0f:40:4e:36:67:
5b:14:d3:37:b3:87:8a:b4:e4:fe:e2:af:9e:53:72:ae:d6:a1:
12:9f:6d:4f:66:20:55:f7:ea:22:83:18:a6:56:a2:c1:09:8e:
b4:68:27:b1:be:97:33:01:60:59:34:c7:c4:5e:28:97:58:fd:
5f:32:d0:05:42:de:b7:4c:27:7a:c7:3f:a9:0c:28:5d:6d:f5:
cb:bc:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:12 2026 by rpki-client