Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
File: jwo9-IOM805fpjnIbdD9WNo5D8o.cer (raw, json)
Hash identifier: 5BxnXKLMo+kXZj8tjahbJJip4WZdJmG04wC/PdGRW6E=
Subject key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE4A5E5AB95DE7134F655259391775
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 37.25.64.0/21
IP: 185.19.232.0/22
IP: 185.29.168.0/22
IP: 213.146.64.0/19
IP: 2a00:4960::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:4a:5e:5a:b9:5d:e7:13:4f:65:52:59:39:17:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:2b:d6:1c:6a:14:f8:1d:38:6d:3d:37:fc:
2f:f1:60:54:fc:67:0e:52:82:0a:f6:39:0d:58:41:
7d:31:6f:eb:36:e6:64:bd:9f:c0:f6:bb:4c:9f:74:
e0:30:95:32:58:10:35:60:ae:85:41:10:ce:43:d3:
2e:a5:30:1e:72:dd:40:14:ba:46:b1:ab:39:84:3a:
48:3c:cf:0d:f8:6b:d8:48:d0:97:d4:00:a5:69:2c:
b4:f8:4c:29:f5:f0:58:65:26:62:47:f4:a2:2f:55:
cd:80:8f:13:55:14:06:7d:4a:10:45:26:34:69:4e:
0e:bd:7b:35:73:45:98:9f:88:30:15:ee:0f:7f:fa:
60:f2:e5:60:02:03:66:68:a5:96:6a:5e:74:94:5c:
bd:45:a7:49:a0:97:0e:c5:c8:65:19:3b:4e:cf:65:
53:54:03:ad:0c:91:0d:8c:35:45:48:cc:43:57:a6:
3e:8d:d6:72:3a:fe:bb:52:c5:9e:4a:83:f3:e3:97:
0b:43:ef:2f:10:0e:09:c2:c0:d7:c0:db:df:91:0b:
a2:4b:bb:a6:2d:df:09:54:0f:4a:57:33:2a:20:e3:
ab:75:a9:20:f3:8e:07:8c:6b:63:f3:f3:f1:4e:75:
e7:df:b6:0e:a8:53:c2:9e:f8:a7:91:6c:a0:0d:c3:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.19.232.0/22
185.29.168.0/22
213.146.64.0/19
IPv6:
2a00:4960::/29
Signature Algorithm: sha256WithRSAEncryption
ad:c5:9e:77:87:1f:3d:d0:9b:87:18:3a:8b:b7:0d:4b:11:14:
27:b9:57:1f:27:e4:26:7b:bd:d8:20:d1:db:a7:89:53:af:63:
a2:32:6b:e3:ec:30:bf:ed:45:75:7d:44:63:40:74:9d:14:74:
b8:41:31:2d:2e:b0:80:2d:c9:df:1f:d6:36:a4:9a:24:58:37:
aa:35:36:fc:c2:63:b0:4c:5e:42:f0:21:36:7f:4a:30:0c:79:
c1:6d:60:6d:c1:9b:75:45:da:cb:57:cb:b0:14:28:8d:11:52:
71:2c:a8:a5:20:72:c3:b5:2b:c2:b6:52:e6:66:52:aa:b7:98:
be:86:fb:b0:61:39:6e:89:ac:f7:5e:28:54:96:bf:f4:9f:ed:
9f:34:3c:b8:4b:71:60:07:0c:a1:31:fd:92:e9:83:2c:b2:18:
d3:35:b7:5a:3d:c1:f2:13:59:82:f1:e0:96:02:24:21:ac:72:
40:12:f4:d4:fb:60:67:04:7f:df:b3:e9:aa:fe:72:b7:54:b2:
47:5e:0e:ea:c3:43:19:bd:6a:35:b1:35:86:1b:42:23:a5:85:
b9:68:52:9b:9d:c3:a3:70:f3:da:e1:4e:3c:21:a0:af:90:ae:
9a:02:e0:4c:9f:dc:bc:5a:c0:45:c5:cb:9d:20:35:99:35:7b:
a9:a4:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:52 2026 by rpki-client