Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9YYD7vYhE-_3GWmcrFw3vLR1jpA.cer
File: 9YYD7vYhE-_3GWmcrFw3vLR1jpA.cer (raw, json)
Hash identifier: /5rMK6afUzU8b34TyddPSXM3nd6fSQwQuIMesZLMZD0=
Subject key identifier: F5:86:03:EE:F6:21:13:EF:F7:19:69:9C:AC:5C:37:BC:B4:75:8E:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1CA223CC141A19BC16DCC46C117CDEFC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/9YYD7vYhE-_3GWmcrFw3vLR1jpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Nov 2026 10:23:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218121
IP: 209.135.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:22:3c:c1:41:a1:9b:c1:6d:cc:46:c1:17:cd:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 10:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f58603eef62113eff719699cac5c37bcb4758e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:a8:f7:c3:10:8e:fe:53:56:95:90:18:e8:
85:08:8c:68:29:a3:bb:8b:87:8b:93:22:bb:7a:d7:
fe:50:c6:cc:84:7b:76:7e:2a:ac:83:05:55:61:d3:
71:f3:82:45:cb:25:b0:a2:e5:c2:f3:d4:f7:9a:7c:
35:99:aa:9d:29:54:9e:4c:f0:d5:a7:47:b2:f0:e0:
3d:c7:cb:d5:24:bb:74:23:f2:06:7f:55:0f:77:45:
1d:f0:92:9a:c6:64:cd:b7:a3:4f:0c:fd:14:31:47:
2c:78:0b:70:41:dc:68:82:c4:62:d3:ed:a1:b0:9b:
3f:5d:d9:70:27:dc:0b:cf:7d:e5:90:e3:e9:fe:d9:
c9:e9:75:f9:3b:77:ac:40:50:d7:b1:a2:14:77:04:
43:ad:8f:22:b9:a9:e4:db:af:81:77:e3:08:77:63:
65:5f:cd:e8:b0:73:81:30:9f:4a:f1:a3:1c:a0:0e:
31:ac:6d:42:0c:79:90:ac:66:40:fb:21:40:32:41:
c1:d0:fd:e9:4d:11:e6:32:bb:78:88:71:99:e2:89:
a1:f6:2b:66:fe:c4:db:5e:ad:90:32:1f:fd:e8:96:
46:c8:de:45:4c:17:da:b9:ed:a6:0d:81:df:f4:27:
2d:e7:85:75:7c:87:21:1c:77:cf:ac:39:8a:24:ef:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:03:EE:F6:21:13:EF:F7:19:69:9C:AC:5C:37:BC:B4:75:8E:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/9YYD7vYhE-_3GWmcrFw3vLR1jpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.135.139.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218121
Signature Algorithm: sha256WithRSAEncryption
8e:ab:fd:7e:2f:6b:6f:31:cf:c7:da:97:06:50:0b:4c:d4:97:
d4:e3:23:0e:03:72:18:a8:01:49:77:f0:e5:47:af:a2:2d:ef:
95:19:5c:58:08:2b:73:17:ca:7e:db:bb:66:aa:f2:65:ee:eb:
6b:fa:29:f7:f9:88:0d:bd:a6:21:12:7e:11:ed:27:a7:6c:0d:
33:d8:46:cb:b3:1d:e6:39:51:0e:37:c2:f6:59:a5:cb:24:60:
00:a4:39:70:77:10:7c:23:b5:3c:9a:ef:d8:cc:ca:ea:84:0a:
3b:b9:1f:4a:6c:66:43:aa:97:a1:0c:33:04:50:76:cd:19:5a:
b0:88:f8:0e:05:f4:ff:53:63:cf:38:08:6b:cd:44:1a:14:4e:
40:02:f0:21:5e:9c:65:05:04:91:1c:62:89:db:8e:74:64:db:
0d:f4:aa:ea:b3:e8:d1:fa:a2:cf:2a:a3:10:4a:a6:b5:3b:08:
1d:9f:8f:a2:1b:1c:d0:18:3c:70:58:86:a8:5e:08:43:47:2a:
80:9b:67:05:6f:75:c1:00:20:71:07:3c:8b:bd:cb:60:66:6a:
17:01:89:1d:1a:ba:05:c4:ff:5b:b4:d1:b0:a5:f4:64:23:9a:
a8:2e:77:9f:f6:96:34:4e:1b:2e:c0:c9:f5:b1:ca:5c:08:ba:
f6:67:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:13:59 2026 by rpki-client