Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
File: sWOSIkDRQLZn9joYNNHaNBAI57E.cer (raw, json)
Hash identifier: cJn6PPIPIl2ZWMn3DbiYiJFMwi+f9SexM4Kufa78BqM=
Subject key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D06897AF1FE5CAE06955C0DDBA4507AA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Mar 2026 14:39:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200386
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:89:7a:f1:fe:5c:ae:06:95:5c:0d:db:a4:50:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 14:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b163922240d140b667f63a1834d1da341008e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:dd:67:4f:52:36:2a:d9:e3:39:6d:f4:8f:
ea:e8:10:48:99:1e:77:8c:85:04:b0:3e:a9:f6:4e:
6d:10:02:2f:fe:59:ae:28:c3:70:be:f1:ea:47:d5:
7f:67:ea:cf:6a:82:32:c8:56:f6:57:0c:2f:29:13:
e6:be:e3:31:33:0c:04:d3:b1:bf:97:80:23:bf:f7:
62:fb:98:35:24:55:c1:89:91:59:c5:83:0d:eb:7d:
28:98:fc:e0:66:01:ce:11:44:c8:9f:9e:e6:bb:c6:
9a:bb:1c:15:d1:2e:67:f0:a4:5a:2f:4f:ba:f6:72:
c4:14:bc:ea:cb:cd:e5:60:2b:7e:47:80:d7:d9:33:
4c:7b:57:11:c3:13:6f:1d:3b:61:b9:04:47:0d:2a:
8c:be:d4:41:47:37:e9:23:87:d8:91:68:9d:76:07:
07:4b:b5:47:7d:d6:3f:c0:2c:21:a5:a2:db:e8:3b:
71:cf:39:6e:53:c3:e2:0c:d0:72:d5:06:5b:01:92:
2c:b7:aa:49:55:4e:b4:de:e9:f7:22:d0:d9:27:4a:
00:50:bb:a0:e6:ff:ed:eb:f3:b5:5b:b2:f4:6d:be:
85:34:9c:f7:f3:36:9a:4f:60:68:70:eb:6b:62:5b:
ed:16:b9:2b:0f:35:66:48:37:55:2b:ac:aa:29:81:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200386
Signature Algorithm: sha256WithRSAEncryption
5c:b6:ee:54:98:8b:b0:f6:a4:e0:21:08:bb:d1:89:08:95:26:
25:f7:d6:73:d8:9f:55:2a:51:9b:81:ba:ce:70:e6:b4:36:f7:
63:8e:2e:c0:31:20:26:01:8e:22:ae:f6:67:cb:a1:1f:fa:2e:
ac:d5:d0:7a:97:4e:7f:83:f4:fe:f6:f3:0b:d8:bb:12:a1:44:
b4:07:4a:60:c8:9e:43:f4:41:e9:27:a0:90:45:9b:84:62:3e:
87:91:c8:43:41:47:01:32:b2:e5:83:44:76:76:fe:d5:70:71:
51:a1:72:16:a9:f3:57:fe:26:67:e5:1e:0e:11:08:ef:9d:4e:
b4:e6:ca:95:fa:0a:05:b3:da:52:4d:db:01:f0:aa:d3:43:d6:
5c:ef:30:c0:b9:cc:c5:60:9e:f0:69:b5:35:2d:f9:23:5a:bc:
67:0a:b2:62:32:a0:41:88:9d:93:00:4b:48:ae:8a:84:28:22:
d8:45:3a:a9:7f:3e:96:ae:d6:79:3d:08:08:61:5b:c4:44:64:
2f:9a:eb:4c:41:2e:64:2e:e1:6c:2d:76:7f:78:98:23:09:c2:
17:0c:80:e6:b5:ee:ee:d3:3a:d6:a1:51:12:1b:32:c4:bd:ce:
7c:b9:e5:81:d5:39:e1:df:8e:9e:82:09:bc:5e:7b:86:7e:2e:
f9:22:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:14 2026 by rpki-client