Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
File: wA_3yZHBXTi_3_s648uYg1ZSnsI.cer (raw, json)
Hash identifier: h1+WgGweJxnq9KuzKB+YqfqmmPjOYiRsznxo9X1PkEw=
Subject key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F6AFB69FE4709F0218F4D4987D59EE7E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 12:51:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.1.19.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:fb:69:fe:47:09:f0:21:8f:4d:49:87:d5:9e:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 12:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:67:76:91:f7:e2:7b:cc:03:3c:8f:06:d9:
57:83:18:66:e3:4d:af:fa:5d:05:ac:41:f1:8d:ba:
68:c3:81:71:c9:67:39:68:d2:bb:c5:f4:7d:ba:83:
f6:df:57:e5:90:13:a6:35:21:ab:8b:f4:25:4b:cf:
94:14:2b:e7:13:f2:df:5b:92:a1:18:2b:69:6d:55:
84:17:d8:7b:55:12:d5:e0:b5:f1:54:7a:52:de:54:
17:0b:92:4e:85:1e:e6:c1:83:4b:e6:a5:77:3f:ae:
c2:2c:d4:91:31:2e:33:23:43:43:5a:50:3d:b1:75:
65:23:e4:60:f8:c7:d9:0a:fb:85:b5:32:4b:61:9d:
54:a2:ed:74:af:e6:70:17:af:ad:51:ec:b0:c2:eb:
6e:af:dd:2c:bb:5c:93:20:bc:de:6b:b6:10:e4:8a:
aa:1d:f1:ba:e9:0c:39:29:b3:af:10:7c:35:74:86:
42:c6:7d:f0:ea:db:e3:3c:2b:d5:61:53:ed:c3:c0:
92:ac:2c:43:1c:2f:98:f2:4b:00:92:bf:31:38:7c:
34:aa:51:64:e5:71:98:c3:60:4b:50:ae:9b:fb:2a:
56:10:24:f0:8d:00:54:38:b1:05:aa:a9:73:5d:36:
52:d5:4f:ac:bc:1a:39:c2:2c:b3:31:3e:e0:79:9c:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.1.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:43:2c:37:b0:85:ae:81:4d:c1:34:3a:4f:d3:76:44:65:88:
8a:2b:8c:80:3d:c7:6e:61:03:20:08:77:3b:e6:4c:ba:9c:2f:
9c:42:3a:01:93:03:f7:04:95:48:e0:df:8c:15:49:1b:8b:b1:
cb:1d:e2:e6:f2:23:0b:f6:8c:e0:f3:e4:7c:5e:77:46:cc:a0:
3c:c6:d1:66:f8:50:6e:d4:af:58:a3:e1:6e:03:cf:91:6b:83:
99:2d:21:ef:9c:e8:a3:0e:a8:85:f8:76:6b:72:fb:f0:27:09:
0d:96:ab:5a:b1:50:96:74:9d:d1:90:27:dd:0c:39:4c:1c:34:
9a:b1:29:dd:d7:5b:ae:f0:eb:4e:39:50:59:5f:0b:a4:0c:43:
05:75:a3:53:b2:cf:f2:f5:94:d7:34:3a:d7:d3:50:7e:87:5b:
0f:5c:41:d4:be:79:79:59:29:b2:3f:61:ef:84:ec:36:98:b3:
4e:f5:be:ff:41:ef:10:23:78:f5:7c:32:cc:6f:dd:ea:f3:36:
af:d1:c7:f7:a9:0b:ba:bc:13:0f:9c:90:04:b0:d5:55:1f:5e:
3c:a2:74:14:9f:1a:6a:2b:2b:f7:88:50:34:ef:15:1e:c4:fb:
7c:87:41:82:93:80:d9:c3:54:f3:80:33:79:e1:2c:a6:59:b9:
48:47:a0:30
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ9q+2n+RwnwIY9NSYfVnufoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzE2MTI1MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDBmZjdjOTkxYzE1ZDM4YmZkZmZiM2FlM2NiOTg4MzU2NTI5ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUVndpH34nvMAzyPBtlXgxhm402v
+l0FrEHxjbpow4FxyWc5aNK7xfR9uoP231flkBOmNSGri/QlS8+UFCvnE/LfW5Kh
GCtpbVWEF9h7VRLV4LXxVHpS3lQXC5JOhR7mwYNL5qV3P67CLNSRMS4zI0NDWlA9
sXVlI+Rg+MfZCvuFtTJLYZ1Uou10r+ZwF6+tUeywwutur90su1yTILzea7YQ5Iqq
HfG66Qw5KbOvEHw1dIZCxn3w6tvjPCvVYVPtw8CSrCxDHC+Y8ksAkr8xOHw0qlFk
5XGYw2BLUK6b+ypWECTwjQBUOLEFqqlzXTZS1U+svBo5wiyzMT7geZzeawIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMAP98mRwV04v9/7OuPLmINWUp7CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzAyOWEw
Yy0wZTZhLTRhYzItOTUzOC1hZmIwMjU2NzY1MDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMDI5YTBj
LTBlNmEtNGFjMi05NTM4LWFmYjAyNTY3NjUwNS8xL3dBXzN5WkhCWFRpXzNfczY0
OHVZZzFaU25zSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAywETMA0GCSqGSIb3DQEBCwUAA4IBAQCRQyw3
sIWugU3BNDpP03ZEZYiKK4yAPcduYQMgCHc75ky6nC+cQjoBkwP3BJVI4N+MFUkb
i7HLHeLm8iML9ozg8+R8XndGzKA8xtFm+FBu1K9Yo+FuA8+Ra4OZLSHvnOijDqiF
+HZrcvvwJwkNlqtasVCWdJ3RkCfdDDlMHDSasSnd11uu8OtOOVBZXwukDEMFdaNT
ss/y9ZTXNDrX01B+h1sPXEHUvnl5WSmyP2HvhOw2mLNO9b7/Qe8QI3j1fDLMb93q
8zav0cf3qQu6vBMPnJAEsNVVH148onQUnxpqKyv3iFA07xUexPt8h0GCk4DZw1Tz
gDN54SymWblIR6Aw
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:56 2026 by rpki-client