Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.cer (raw, json)
Hash identifier: Uf/6wdbg5H61atnVHlOMpUQrm07MBfIH1EsQmIQaPEg=
Subject key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEFAC797BA95E941E8FADB049E02645A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jun 2026 14:11:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35691
IP: 185.185.108.0/22
IP: 212.47.57.0/24
IP: 2a09:c040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:ac:79:7b:a9:5e:94:1e:8f:ad:b0:49:e0:26:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 22 14:11:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:61:5f:43:d9:f3:42:0e:17:ed:b9:c0:1e:
77:5b:d8:55:ab:cb:b7:11:ff:b6:44:92:ec:7a:d6:
d5:41:39:bd:13:dd:aa:c3:23:8a:20:3e:ef:c8:74:
a8:85:ae:42:ef:b9:c7:7c:0f:44:c8:d4:4f:1d:88:
7d:70:99:5a:67:01:92:cf:d0:69:0f:31:06:44:8a:
52:11:b4:e7:22:01:c1:22:c0:5d:89:7b:31:35:8c:
2c:92:2c:a3:1f:d4:b1:c3:cf:f0:11:72:cb:9c:7c:
d6:c0:9c:9f:e1:a0:9b:c5:46:36:75:ca:69:08:a3:
be:22:1b:89:2a:bc:41:65:71:c4:39:2a:64:42:53:
ef:0d:92:be:5f:60:37:04:52:a9:ab:57:51:50:7a:
79:4d:7c:5e:91:55:8c:98:97:b9:cf:bf:94:d2:14:
4a:4c:4c:e0:20:a8:62:6a:da:39:13:aa:c4:11:66:
cc:e8:15:3e:b5:e4:07:c6:06:28:92:3e:28:66:05:
6c:f7:3e:50:12:c5:a5:24:8d:fa:80:d0:13:ea:7d:
03:6c:12:97:b5:fc:36:cd:4b:70:3b:16:82:80:28:
0e:91:53:95:f2:e8:1b:f4:55:21:48:fd:80:ba:d2:
40:90:47:8b:50:03:2d:c2:5b:23:10:cc:ce:4a:50:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.108.0/22
212.47.57.0/24
IPv6:
2a09:c040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35691
Signature Algorithm: sha256WithRSAEncryption
49:ee:83:1e:24:27:23:39:00:06:12:67:b0:f3:ac:1d:2a:d1:
dd:99:ea:da:83:8e:88:5e:8f:f2:9c:dc:d7:59:02:be:b7:94:
5c:e3:6c:b9:6e:13:82:65:6f:1e:f5:7d:b2:c3:ff:cf:62:0f:
c6:51:eb:b1:6d:9c:8d:87:cf:70:98:47:1c:50:bc:74:7f:63:
b4:a9:d9:d2:c4:52:ad:66:42:b8:f8:50:e2:bd:c7:d3:e6:a4:
e1:74:a3:15:51:6c:26:50:57:72:7c:96:53:fa:4b:d5:1c:85:
c3:7e:1d:01:ab:9f:19:00:6f:63:96:c2:58:37:dd:fa:d0:ad:
65:6f:5c:cb:22:31:71:2f:93:06:bc:6e:c6:3b:57:9f:d3:63:
b8:61:40:21:1e:2b:7e:72:d2:18:76:e6:58:22:1c:62:b6:29:
a7:ea:cb:78:aa:2c:e5:0e:74:8a:de:9b:c8:68:15:c4:9f:c6:
c4:f3:37:35:ff:e1:f6:e0:db:18:86:16:3c:59:ed:31:ea:3f:
9a:a0:1c:a5:63:89:46:bb:ac:7d:29:5c:19:86:93:d4:c8:ff:
40:0c:26:40:87:0c:a7:6a:b7:32:67:1e:32:02:ac:e6:c7:e3:
dd:6f:a5:aa:db:1b:5c:1e:7e:2a:80:1f:c5:a9:90:64:bb:e1:
1c:7e:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:15:53 2026 by rpki-client