Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
File: 5yDwN_iWTLWjefXfgbr493OC8zo.cer (raw, json)
Hash identifier: uYJ7r/8TzaxABhS3USnK9RoCA1VW+kSGaIDuG+y5P5E=
Subject key identifier: E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F985EA39A4AA38EE4967BA5C63705D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49014
IP: 194.107.232.0 -- 194.107.247.255
IP: 2001:67c:2c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:85:ea:39:a4:aa:38:ee:49:67:ba:5c:63:70:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e720f037f8964cb5a379f5df81baf8f77382f33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:90:1d:e3:d2:b8:46:1c:37:7e:c5:d2:76:
f7:02:9e:27:b9:31:74:19:9a:08:08:0e:9f:5d:52:
35:d7:30:a2:72:11:b3:da:e7:93:de:9f:cf:5b:c3:
b2:74:e6:0e:cc:7b:cb:ac:e2:fb:85:73:5c:ab:f4:
98:c2:f7:1e:52:07:c4:a2:01:6c:32:e3:a2:c5:59:
61:21:a1:76:95:b6:53:01:1d:2a:6c:23:24:57:10:
24:06:a8:0c:75:8d:52:b1:6e:72:5c:78:72:99:07:
c0:8f:56:f6:36:8b:bc:e8:77:35:be:32:1f:65:0d:
84:01:8c:ce:f3:21:f5:78:2a:ff:a7:6b:9b:a6:4e:
37:29:3b:86:e5:18:46:b0:7a:ab:5b:72:e9:77:14:
63:cd:44:8c:92:ba:f9:88:8b:81:47:f0:87:97:8b:
df:59:58:f1:f9:53:f6:0a:25:a0:b2:80:90:d7:4b:
bc:c1:92:27:66:36:17:2f:4e:18:a9:e4:f3:5c:3b:
11:9b:81:af:1e:11:4a:85:c8:90:28:d7:d1:ca:bf:
70:9c:3e:63:90:2c:42:96:1b:a7:84:d8:6a:8e:b0:
2f:57:d2:67:04:6c:6b:7d:c4:45:a4:49:14:e4:61:
97:81:d8:2a:6f:b0:45:f2:9a:ad:92:ec:68:15:d7:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.232.0-194.107.247.255
IPv6:
2001:67c:2c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49014
Signature Algorithm: sha256WithRSAEncryption
3e:d9:1a:9e:8a:12:70:20:cf:a2:1e:42:9f:3c:ca:f6:df:72:
76:2c:cd:8e:37:7c:9e:25:69:a0:ba:7c:2a:9b:c9:70:9f:ff:
14:9f:df:d3:f1:2f:cd:34:17:37:fa:ff:01:0f:a0:35:03:6c:
26:79:de:4b:ee:bb:e8:fb:5c:95:e9:ec:d1:03:66:05:98:b5:
17:79:9b:0a:78:69:92:b2:c8:58:e0:b1:90:de:0e:ae:39:91:
f2:aa:d3:e7:3c:c0:ce:ef:7e:47:26:26:e4:35:62:41:5f:26:
38:74:5c:e1:15:09:1f:54:ec:7c:d2:1c:32:08:cc:03:9e:71:
93:52:e0:e6:9a:db:66:e1:44:e6:5f:e2:a4:3c:42:8b:74:b8:
af:d1:96:77:b9:08:66:92:56:fc:ef:6e:24:6e:12:12:6c:99:
4b:4d:3c:61:1b:95:c3:90:11:f0:11:04:ad:f6:06:08:fd:07:
8a:39:8c:a8:30:76:2f:0b:52:79:40:9d:89:6d:12:91:9e:01:
5f:37:39:19:12:f1:c7:7e:33:b4:f7:77:c1:6f:35:58:ca:97:
29:ef:26:7e:8c:1f:6e:a2:af:23:89:2e:ac:2f:27:10:8b:50:
cd:a7:26:29:ab:6c:5c:d7:38:f4:56:b0:0f:90:75:d5:5a:42:
49:cf:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:30 2026 by rpki-client