Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
File:                     510D73UIMrK8zukAl6l-m65W1UI.cer (raw, json)
Hash identifier:          yuGZhqbrzztdDe3/KPAALl7De90UYgGhDdtGhIQ90MU=
Subject key identifier:   E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019ED6449C9E661A0BE91E9592A7BB38094E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 Jun 2026 15:48:01 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 197675
                          IP: 92.255.68.0/22
                          IP: 2a04:3480::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d6:44:9c:9e:66:1a:0b:e9:1e:95:92:a7:bb:38:09:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 17 15:48:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e75d03ef750832b2bccee90097a97e9bae56d542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:79:57:79:f1:74:c5:2d:26:44:9b:18:1d:
                    24:90:59:00:29:6c:49:4b:49:ba:de:24:03:05:89:
                    e9:8a:c9:6b:4a:23:4e:b0:46:b0:64:92:aa:54:60:
                    e0:ea:1b:7a:a2:5a:32:3e:66:35:d2:c7:47:6e:fe:
                    76:90:9a:da:c2:34:af:3d:e6:8f:73:0b:53:2a:e6:
                    89:34:79:c1:7b:b2:59:8d:13:91:99:05:45:c5:23:
                    30:46:f4:cb:6f:41:14:81:20:54:02:7f:a9:f4:77:
                    0b:60:9e:e8:c6:cc:c1:5d:bb:5b:6b:8b:6c:73:49:
                    50:ed:f6:ec:07:68:8b:29:01:01:27:b3:44:45:44:
                    ac:b8:b7:39:1b:39:e3:1f:4c:05:f9:f9:5b:9a:19:
                    c8:84:6c:d0:bc:91:06:e6:c6:26:c8:55:11:02:d1:
                    3f:f5:e0:c5:a4:21:fe:28:4a:96:ad:f1:62:50:4f:
                    93:eb:ba:7f:4e:6e:97:dc:4a:ca:f9:cb:2e:58:37:
                    1a:6f:3d:f6:a0:07:ea:92:57:57:9d:76:bd:38:38:
                    a3:63:4f:cc:3c:cc:29:71:0d:94:1e:20:82:62:78:
                    8f:23:a6:41:97:ba:84:bc:f1:50:a0:e8:cd:1e:81:
                    4d:43:3a:75:4b:2d:ad:e5:59:ab:ed:4d:35:51:95:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.255.68.0/22
                IPv6:
                  2a04:3480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197675

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:2c:ab:54:b2:a8:df:14:89:f4:34:05:55:5a:5e:3a:e3:
         0b:ec:72:27:3f:9e:e5:71:4c:e2:71:75:38:37:61:88:7e:93:
         b7:c0:50:1d:95:05:37:4c:8f:61:0f:df:15:e4:d8:31:58:e9:
         5b:1e:e0:fd:c5:ae:10:80:24:82:5c:78:c9:7c:1f:ee:08:0b:
         ee:7a:89:9c:45:bc:95:6a:ad:d4:bc:07:04:68:54:35:4e:98:
         59:a4:93:64:a6:4e:d6:51:ee:62:85:0f:20:f1:5a:45:c1:c3:
         45:f2:f3:e0:14:47:ba:c1:ee:63:31:4d:ea:c1:33:09:e6:76:
         05:26:fc:34:ab:63:06:5d:39:76:34:14:61:6a:af:08:be:3a:
         bf:09:9b:0b:5f:e8:87:44:46:68:6e:36:09:d0:c9:07:0a:43:
         c6:ca:b9:85:76:3d:37:1a:30:2b:4f:8f:30:cd:a7:23:59:21:
         8e:7b:c6:bb:6b:ff:ae:2e:d6:f9:74:88:45:7b:c9:65:22:ec:
         72:4d:02:92:68:60:3c:3d:38:a9:66:ae:a6:eb:37:3d:55:19:
         c3:01:46:a4:e6:c8:78:d7:3a:56:e8:be:3e:87:46:39:2f:01:
         25:1d:f0:bd:12:6f:62:01:0c:4f:79:75:c1:19:21:55:cd:9e:
         c2:e9:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:22 2026 by rpki-client