Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
File: A_P-YHUIK-jliDKbQ9dhv257AdA.cer (raw, json)
Hash identifier: Gsb1RtFKEwKS8nZCr3Y4UMxS2HiBEqaShVoVzf5ZfX0=
Subject key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B791056CF905F3AFB6DCC7D0029BC882E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209823
IP: 195.24.245.0/24
IP: 2a12:5540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:56:cf:90:5f:3a:fb:6d:cc:7d:00:29:bc:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:80:27:29:3e:b8:b1:bd:c7:d8:9d:1b:cf:
ef:c6:fb:0f:10:21:83:49:67:db:01:ea:8d:b9:5e:
27:bc:30:f0:17:54:27:80:0f:6e:03:26:0f:36:c3:
07:3d:1f:f1:65:af:97:d3:e1:67:09:2e:24:e3:a9:
ac:e1:07:10:d5:b3:05:f3:77:4e:51:e8:b3:22:aa:
f4:9b:61:e1:eb:80:a1:86:51:18:c1:78:aa:f3:71:
95:a8:b5:b4:88:f2:09:77:d8:1d:21:2f:e5:21:d0:
a5:18:86:37:58:ae:63:c9:f3:36:5d:eb:43:4c:06:
93:ff:fe:b3:88:0f:cb:2d:b8:e9:a8:d1:e0:6a:17:
26:8c:8e:a0:b9:e7:f5:70:09:db:70:51:49:98:db:
1e:61:3e:e2:3f:32:9c:3f:a0:7f:f2:f2:75:5b:37:
d5:60:be:21:ce:c8:8b:d1:2d:34:19:64:c6:2b:1c:
63:aa:36:3f:5b:29:6e:5a:5c:77:d7:e6:64:e4:03:
69:b2:46:fc:a7:27:65:e2:33:d9:3c:39:d1:3b:5a:
6a:e0:ea:dd:ee:8b:85:d5:1c:98:1c:f3:aa:c5:da:
c3:8b:9d:cc:28:fc:80:93:36:5e:cc:bb:1d:f3:b9:
22:85:22:8c:58:73:54:e8:43:f1:ef:50:50:bd:f9:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209823
Signature Algorithm: sha256WithRSAEncryption
58:f0:6f:8a:6a:a0:e3:b1:de:30:92:c1:d4:eb:77:e6:ae:8f:
e5:a7:00:11:13:cb:7b:bf:74:17:fb:ac:a9:f1:4c:6e:b7:a6:
36:1a:a9:96:cd:65:e0:64:58:73:0e:38:ba:fd:17:c0:27:8c:
0d:4b:0a:c2:52:dc:30:9c:d5:08:d2:de:79:4c:88:a4:92:b1:
54:3b:8e:9b:4a:fd:80:44:c0:18:28:54:a6:53:a5:25:d0:b0:
09:7a:a2:ef:c7:75:b6:9f:dd:4c:48:c7:0d:9a:70:95:59:a1:
67:52:28:3d:6d:db:57:7c:a2:b9:65:ac:39:f1:26:0d:dd:b7:
ed:12:df:41:31:3d:13:0e:ae:6a:30:68:3c:29:bb:ea:66:c8:
bb:f9:c6:63:7f:e2:bb:07:4e:f0:3f:d7:ae:a1:7d:90:54:10:
54:92:47:7d:15:24:eb:11:24:29:06:56:fb:a5:c0:ae:05:7a:
b7:73:02:55:96:e6:f6:fd:99:55:d6:06:c1:87:38:fa:9a:49:
d8:97:08:2d:cd:e5:51:6b:c4:89:2b:28:fd:53:4f:75:91:4b:
d0:23:e5:6f:63:aa:3a:cd:f6:8b:da:d2:b0:c3:21:04:61:ff:
f1:4f:23:1c:e8:ad:7c:ae:25:66:16:98:cc:e8:5e:05:17:c6:
1a:6a:af:4c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt5EFbPkF86+23MfQApvIguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2YzZmU2MDc1MDgyYmU4ZTU4ODMyOWI0M2Q3NjFiZjZlN2IwMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowyAJyk+uLG9x9idG8/vxvsPECGD
SWfbAeqNuV4nvDDwF1QngA9uAyYPNsMHPR/xZa+X0+FnCS4k46ms4QcQ1bMF83dO
UeizIqr0m2Hh64ChhlEYwXiq83GVqLW0iPIJd9gdIS/lIdClGIY3WK5jyfM2XetD
TAaT//6ziA/LLbjpqNHgahcmjI6guef1cAnbcFFJmNseYT7iPzKcP6B/8vJ1WzfV
YL4hzsiL0S00GWTGKxxjqjY/WyluWlx31+Zk5ANpskb8pydl4jPZPDnRO1pq4Ord
7ouF1RyYHPOqxdrDi53MKPyAkzZezLsd87kihSKMWHNU6EPx71BQvfn4gQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAPz/mB1CCvo5Ygym0PXYb9uewHQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzhiZjdl
YS04ODNhLTRjNDMtOTQ2Yy04MmRhZmUxMDRiYzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvOGJmN2Vh
LTg4M2EtNGM0My05NDZjLTgyZGFmZTEwNGJjNS8xL0FfUC1ZSFVJSy1qbGlES2JR
OWRodjI1N0FkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwxj1MA0EAgACMAcDBQMqElVAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMznzANBgkqhkiG9w0BAQsFAAOCAQEAWPBvimqg47He
MJLB1Ot35q6P5acAERPLe790F/usqfFMbremNhqpls1l4GRYcw44uv0XwCeMDUsK
wlLcMJzVCNLeeUyIpJKxVDuOm0r9gETAGChUplOlJdCwCXqi78d1tp/dTEjHDZpw
lVmhZ1IoPW3bV3yiuWWsOfEmDd237RLfQTE9Ew6uajBoPCm76mbIu/nGY3/iuwdO
8D/XrqF9kFQQVJJHfRUk6xEkKQZW+6XArgV6t3MCVZbm9v2ZVdYGwYc4+ppJ2JcI
Lc3lUWvEiSso/VNPdZFL0CPlb2OqOs32i9rSsMMhBGH/8U8jHOitfK4lZhaYzOhe
BRfGGmqvTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:06:51 2026 by rpki-client