Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
File: wur6ows0Ds-BCky5rztRxwJWZZg.cer (raw, json)
Hash identifier: JGt9Gu6qAQSLErjKX4ZsK4HVO4oacgZ7VFh0EcT+zDQ=
Subject key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DDE9B69F0EEDF217A8D55B4DA6C75403F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Apr 2026 13:37:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8410
IP: 194.0.120.0/24
IP: 194.0.122.0/23
IP: 194.55.161.0/24
IP: 194.55.163.0/24
IP: 194.55.168.0/24
IP: 194.55.171.0/24
IP: 195.140.180.0/22
IP: 212.15.32.0/19
IP: 2a01:8240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:9b:69:f0:ee:df:21:7a:8d:55:b4:da:6c:75:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 13:37:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9c:fc:23:78:93:07:3d:ff:95:32:e8:d5:19:
aa:26:d4:02:d1:13:73:e4:a0:f4:ff:72:73:ae:f1:
86:5f:37:f7:96:54:ae:cb:cc:d8:5b:38:a9:cb:a9:
6c:6f:65:bd:f8:19:02:9e:55:34:24:03:d2:83:dc:
4b:c4:53:cd:70:0a:d6:67:54:98:c0:2e:50:05:43:
37:9e:46:77:60:71:7a:52:cf:22:92:d7:b0:eb:a6:
63:54:53:e8:84:8a:e7:79:53:84:41:e8:ab:36:f3:
4b:7a:bd:d4:8d:e3:bd:4f:f1:9e:3c:41:1c:8a:4a:
60:c0:2f:d8:6f:0b:a3:83:d9:00:88:e1:a1:3e:f3:
c6:ec:2a:4b:a1:69:d8:9f:e3:1c:26:d2:06:15:08:
da:d3:33:cf:fa:a4:bc:23:65:ab:85:20:b9:1a:1e:
88:e2:7e:50:40:36:f6:af:03:23:35:55:7e:da:41:
13:ce:78:de:58:0a:81:4c:37:89:a5:fc:e9:a0:8a:
75:70:f2:f9:84:7b:d2:94:32:22:27:b7:9b:ad:c8:
8b:d8:c6:77:32:0b:59:62:9c:5d:f7:d2:b5:80:f3:
3f:50:00:d9:2a:c2:bf:05:a0:da:90:20:03:b8:f9:
d1:11:7e:2f:da:42:38:df:e1:dd:a0:ed:11:43:79:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/24
194.0.122.0/23
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0/19
IPv6:
2a01:8240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8410
Signature Algorithm: sha256WithRSAEncryption
51:3d:48:19:cf:db:a9:a8:e7:c1:86:71:56:c6:21:de:dd:49:
2b:3a:14:a1:8f:1e:ce:cb:3a:3c:55:30:c8:0a:ce:e1:09:01:
7c:ad:ed:3f:60:85:df:6d:95:f9:bb:81:e4:c9:e2:05:83:06:
94:7d:0e:52:6d:15:92:50:15:f7:6b:a4:ba:58:7b:7c:31:c9:
4b:a8:b1:dc:30:f1:f0:a3:81:35:c4:38:07:fc:e7:75:23:cb:
81:3b:c7:b7:3d:c0:7f:b5:9e:a8:fa:72:d9:5a:b9:c9:7e:30:
41:2e:50:15:c7:8c:bd:55:41:a7:18:a2:d7:2e:39:47:50:89:
a7:58:c0:b1:e7:5b:fe:97:86:e8:34:8c:86:fe:67:bc:70:eb:
95:7f:e8:39:cd:64:2e:fa:be:8c:85:dd:36:bd:26:be:7e:a7:
8f:8b:90:5b:d7:48:4f:28:ff:e2:b5:4a:18:db:57:fd:37:67:
88:96:22:ae:96:18:2e:fa:e2:bf:7d:cc:6d:e7:bd:5d:77:69:
c0:07:7e:38:dc:ea:63:69:5e:62:20:b6:1a:99:e8:9c:7d:2d:
5e:da:22:62:65:23:1b:bc:d4:de:04:d9:5a:00:eb:1f:38:7c:
49:67:ba:fb:9d:02:f4:55:d2:9c:4a:e7:fe:b4:3f:d0:5a:8f:
e8:be:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:58 2026 by rpki-client