Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
File: sCJf0DWnzmSnyIveca61YPNIOXQ.cer (raw, json)
Hash identifier: sWBU012sgyF57xLiegm5W5P33xQ7fMja5vNgiQ8Io+w=
Subject key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DF350735CBAA8B51FC04239F83E30738A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 May 2026 14:07:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210528
AS: 210919
IP: 45.151.180.0/22
IP: 85.208.212.0/22
IP: 185.227.152.0/22
IP: 199.241.120.0/21
IP: 2a0f:3ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:50:73:5c:ba:a8:b5:1f:c0:42:39:f8:3e:30:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 4 14:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:57:f6:f5:c3:df:06:15:24:93:0d:17:11:
53:8a:42:be:44:43:17:a0:cc:cd:51:80:48:16:ca:
fc:31:f8:3d:29:06:8e:86:a7:a3:02:bd:a3:b8:cd:
a7:28:a4:40:94:0d:40:61:69:d6:47:d2:c2:30:6f:
ec:6d:a7:a3:67:85:39:48:df:78:95:0c:c6:08:c4:
09:20:61:6b:d0:14:3e:9c:26:cd:c9:e0:07:89:8a:
a2:41:fd:18:1a:90:6c:6b:78:d9:8b:0f:9c:5d:db:
f6:24:49:bc:80:6a:77:ff:4f:37:3c:41:e0:9d:3d:
f5:cc:fc:d1:df:62:6f:99:6b:a4:d7:01:55:fb:48:
b9:e2:14:51:1d:34:08:dc:37:7d:bd:70:79:da:58:
ab:3e:9e:77:c4:d9:cb:80:50:4b:a1:cc:b7:ac:87:
f0:6c:79:ef:d7:4b:52:f6:e0:69:c1:03:71:ef:cf:
9d:9c:b0:4a:41:27:49:e5:e8:f9:54:82:66:34:1d:
b4:92:85:1f:de:13:b0:dd:eb:0a:d6:7f:03:5c:04:
c3:1d:b1:10:9b:05:ed:25:51:46:f7:cf:34:46:48:
e5:ba:65:d1:33:68:14:d3:7b:49:34:5f:43:84:59:
75:bf:af:00:f0:30:c9:93:e4:3e:9d:3e:90:39:a9:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.180.0/22
85.208.212.0/22
185.227.152.0/22
199.241.120.0/21
IPv6:
2a0f:3ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210528
210919
Signature Algorithm: sha256WithRSAEncryption
16:ca:1e:53:2c:25:6e:c1:83:8b:b4:f3:dd:92:b2:55:e3:70:
29:e8:86:e7:49:13:b8:b9:9c:86:30:9b:f8:e8:e2:04:7c:27:
0d:65:55:ff:34:7e:79:4a:08:91:b2:47:cb:c1:36:ee:b3:2b:
0e:14:9a:5e:0a:a3:a1:5d:38:44:e7:0b:ef:7b:f1:f8:5e:6a:
c9:09:0c:7d:b0:a1:51:11:8b:8c:31:f7:c5:f0:b7:f8:ad:2d:
5a:e0:f3:80:6c:67:5f:1d:f2:b3:33:3d:35:ac:1b:0f:d8:6f:
40:7c:75:eb:5c:91:da:77:72:8a:bf:24:68:ee:ed:ae:52:f3:
b6:d7:d2:4a:d5:0e:33:74:7d:9c:3e:89:bf:d0:96:f4:57:c7:
53:ea:bd:3d:39:3c:4a:63:b1:c8:50:11:de:3e:be:85:8c:04:
74:8a:c7:27:03:98:cc:6c:03:59:49:af:79:55:f4:79:61:7c:
cf:40:24:7f:62:3f:f8:09:f8:b8:20:48:0c:72:ec:46:aa:92:
27:39:37:a2:b6:04:c0:0c:c8:65:5e:88:f7:52:c3:34:1d:65:
43:6b:03:13:93:1b:f5:0f:82:2a:c8:5f:89:2a:c1:39:bb:4c:
84:ed:50:b7:e4:36:44:d0:b2:8c:59:be:39:28:8c:9f:fc:7f:
d5:cf:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:37 2026 by rpki-client