Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
File:                     75YI_56fSNVLIJcl1I9nyEh1FHo.cer (raw, json)
Hash identifier:          rLwchHa3r7m+vnUBCk8MbiHlbbwFA/bcxTpdezIHGiM=
Subject key identifier:   EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18F936F286AF1E87C7CE9D678B4424C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:40:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 50316
                          IP: 45.135.24.0/22
                          IP: 45.147.236.0/22
                          IP: 46.234.192.0/19
                          IP: 185.10.188.0/22
                          IP: 185.43.164.0/22
                          IP: 185.74.188.0/22
                          IP: 185.96.96.0/22
                          IP: 185.121.32.0/22
                          IP: 185.142.122.0/23
                          IP: 185.157.24.0/22
                          IP: 185.158.140.0/22
                          IP: 185.193.252.0/22
                          IP: 185.219.44.0/22
                          IP: 185.245.120.0/22
                          IP: 193.3.245.0/24
                          IP: 193.5.31.0/24
                          IP: 193.5.39.0/24
                          IP: 193.5.41.0/24
                          IP: 193.5.120.0/24
                          IP: 193.38.132.0/22
                          IP: 193.47.52.0/22
                          IP: 195.184.74.0/24
                          IP: 212.6.59.0/24
                          IP: 213.187.0.0/19
                          IP: 2a00:1f48::/29
                          IP: 2a01:6d60::/29
                          IP: 2a05:4a00::/29
                          IP: 2a06:9c80::/29
                          IP: 2a07:a2c0::/29
                          IP: 2a07:adc0::/29
                          IP: 2a0a:2480::/29
                          IP: 2a0a:41c0::/29
                          IP: 2a0a:c180::/29
                          IP: 2a0a:fb40::/29
                          IP: 2a0b:e040::/29
                          IP: 2a0d:5780::/29
                          IP: 2a0d:e540::/29
                          IP: 2a0e:85c0::/29
                          IP: 2a0f:3c00::/29
                          IP: 2a0f:73c0::/29
                          IP: 2a10:be00::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:f9:36:f2:86:af:1e:87:c7:ce:9d:67:8b:44:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:40:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef9608ff9e9f48d54b209725d48f67c84875147a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:9c:a1:c5:74:15:d1:18:5c:8d:d2:d3:2d:
                    ef:58:2a:13:db:16:e6:9b:77:b2:f2:00:fe:8e:6a:
                    7e:5a:42:98:68:c3:b5:9f:84:eb:d0:d5:f0:27:5c:
                    cc:9b:34:1a:bf:d1:ef:e5:af:9a:07:ff:af:2a:4c:
                    fd:37:8c:6b:d8:51:56:9a:35:89:d7:bd:51:fd:d0:
                    56:cb:f7:b9:4c:5b:de:0c:24:fa:4f:05:cf:1f:4a:
                    dd:19:76:32:51:5f:47:be:42:13:8e:64:b2:27:2c:
                    7f:63:09:39:70:9e:a5:74:d0:88:75:00:fb:91:98:
                    4b:0c:f5:6c:0f:ff:d8:53:aa:3e:77:fb:0e:fe:4e:
                    f5:6b:d4:e9:a0:20:f8:f4:44:ba:0c:40:eb:7f:ec:
                    2c:b7:e9:65:1a:84:08:ac:1a:f7:99:26:10:2d:05:
                    a6:0c:00:34:fa:f9:92:de:49:c1:53:f1:af:48:59:
                    3e:f5:43:e4:8f:c2:15:6c:b9:e1:99:4e:89:1c:76:
                    e7:8e:0f:29:bb:e5:ea:20:6b:1d:57:25:5a:41:ef:
                    f3:d3:9f:8c:e3:d8:02:65:ab:1e:87:09:d7:8b:78:
                    7c:80:eb:1a:c3:b6:c0:5f:24:2e:82:32:d7:52:96:
                    4d:d4:3b:52:44:cf:49:a8:54:c2:a0:4c:fc:1e:59:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.24.0/22
                  45.147.236.0/22
                  46.234.192.0/19
                  185.10.188.0/22
                  185.43.164.0/22
                  185.74.188.0/22
                  185.96.96.0/22
                  185.121.32.0/22
                  185.142.122.0/23
                  185.157.24.0/22
                  185.158.140.0/22
                  185.193.252.0/22
                  185.219.44.0/22
                  185.245.120.0/22
                  193.3.245.0/24
                  193.5.31.0/24
                  193.5.39.0/24
                  193.5.41.0/24
                  193.5.120.0/24
                  193.38.132.0/22
                  193.47.52.0/22
                  195.184.74.0/24
                  212.6.59.0/24
                  213.187.0.0/19
                IPv6:
                  2a00:1f48::/29
                  2a01:6d60::/29
                  2a05:4a00::/29
                  2a06:9c80::/29
                  2a07:a2c0::/29
                  2a07:adc0::/29
                  2a0a:2480::/29
                  2a0a:41c0::/29
                  2a0a:c180::/29
                  2a0a:fb40::/29
                  2a0b:e040::/29
                  2a0d:5780::/29
                  2a0d:e540::/29
                  2a0e:85c0::/29
                  2a0f:3c00::/29
                  2a0f:73c0::/29
                  2a10:be00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50316

    Signature Algorithm: sha256WithRSAEncryption
         17:07:d1:80:9a:91:bb:02:a4:73:dc:d9:66:0a:d0:30:65:75:
         ae:a0:4e:cc:09:6e:77:d6:05:c4:87:c3:0d:7d:32:aa:8d:47:
         ef:d3:41:b4:49:cc:5e:36:f9:66:5b:6a:e5:7d:0a:f0:9e:30:
         fa:20:b7:0e:fc:f6:ea:f3:f3:63:2f:e6:e6:94:33:06:7b:6d:
         67:74:bb:6b:ac:89:38:fc:46:06:7f:5e:a9:7f:c3:cb:01:e3:
         d8:53:7b:ff:80:4f:e9:ee:ce:94:61:b9:a1:60:4f:bd:9c:d6:
         b8:47:4d:7c:8f:47:1c:1e:de:a0:36:7c:b5:68:21:06:b3:8b:
         3e:8c:b0:6a:f5:de:45:d2:2d:f6:6a:32:9c:5c:27:89:56:4b:
         40:4a:8a:e1:ff:ba:7f:a3:e5:c4:8f:ef:cc:f5:07:07:c6:c8:
         d9:0e:f9:6e:c9:13:27:ff:83:08:9e:2d:a7:95:2c:ae:c9:b3:
         d9:50:bf:00:fe:8e:c6:89:13:e9:e0:42:03:8f:ee:96:e1:92:
         8e:40:09:0d:7c:ee:10:45:5b:e8:be:fd:cb:f4:b4:19:8f:50:
         48:0b:d5:bb:9a:ec:07:4b:8a:2c:c7:bd:bd:81:83:10:32:4a:
         e8:84:41:bc:2b:f7:c9:04:50:b3:99:c0:f5:c4:a0:ea:66:42:
         b3:4b:ce:53
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgISAZ8Y+Tbyhq8eh8fOnWeLRCTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk2MDhmZjllOWY0OGQ1NGIyMDk3MjVkNDhmNjdjODQ4NzUxNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p2cocV0FdEYXI3S0y3vWCoT2xbm
m3ey8gD+jmp+WkKYaMO1n4Tr0NXwJ1zMmzQav9Hv5a+aB/+vKkz9N4xr2FFWmjWJ
171R/dBWy/e5TFveDCT6TwXPH0rdGXYyUV9HvkITjmSyJyx/Ywk5cJ6ldNCIdQD7
kZhLDPVsD//YU6o+d/sO/k71a9TpoCD49ES6DEDrf+wst+llGoQIrBr3mSYQLQWm
DAA0+vmS3knBU/GvSFk+9UPkj8IVbLnhmU6JHHbnjg8pu+XqIGsdVyVaQe/z05+M
49gCZasehwnXi3h8gOsaw7bAXyQugjLXUpZN1DtSRM9JqFTCoEz8HllIsQIDAQAB
o4IDsTCCA60wHQYDVR0OBBYEFO+WCP+en0jVSyCXJdSPZ8hIdRR6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2NmMjRi
ZC1jMTViLTQ4NGMtOTczMi0wNGIzODEzZjNiM2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvY2YyNGJk
LWMxNWItNDg0Yy05NzMyLTA0YjM4MTNmM2IzZC8xLzc1WUlfNTZmU05WTElKY2wx
STlueUVoMUZIby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBLgYIKwYB
BQUHAQcBAf8EggEdMIIBGTCBlwQCAAEwgZADBAIthxgDBAItk+wDBAUu6sADBAK5
CrwDBAK5K6QDBAK5SrwDBAK5YGADBAK5eSADBAG5jnoDBAK5nRgDBAK5nowDBAK5
wfwDBAK52ywDBAK59XgDBADBA/UDBADBBR8DBADBBScDBADBBSkDBADBBXgDBALB
JoQDBALBLzQDBADDuEoDBADUBjsDBAXVuwAwfQQCAAIwdwMFAyoAH0gDBQMqAW1g
AwUDKgVKAAMFAyoGnIADBQMqB6LAAwUDKgetwAMFAyoKJIADBQMqCkHAAwUDKgrB
gAMFAyoK+0ADBQMqC+BAAwUDKg1XgAMFAyoN5UADBQMqDoXAAwUDKg88AAMFAyoP
c8ADBQMqEL4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEjDANBgkqhkiG9w0B
AQsFAAOCAQEAFwfRgJqRuwKkc9zZZgrQMGV1rqBOzAlud9YFxIfDDX0yqo1H79NB
tEnMXjb5Zltq5X0K8J4w+iC3Dvz26vPzYy/m5pQzBnttZ3S7a6yJOPxGBn9eqX/D
ywHj2FN7/4BP6e7OlGG5oWBPvZzWuEdNfI9HHB7eoDZ8tWghBrOLPoywavXeRdIt
9moynFwniVZLQEqK4f+6f6PlxI/vzPUHB8bI2Q75bskTJ/+DCJ4tp5Usrsmz2VC/
AP6OxokT6eBCA4/uluGSjkAJDXzuEEVb6L79y/S0GY9QSAvVu5rsB0uKLMe9vYGD
EDJK6IRBvCv3yQRQs5nA9cSg6mZCs0vOUw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:03 2026 by rpki-client