Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer (raw, json)
Hash identifier: Yn0NsAQqe6vKD7z1uaNckSSIQBtGX0uu7mEQyn+enKw=
Subject key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EBC0270F982D43C3D4A02E82B389A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:17:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50769
AS: 201978
AS: 208425
IP: 185.1.132.0/24
IP: 185.50.68.0/22
IP: 185.114.20.0/22
IP: 185.146.88.0/22
IP: 185.169.52.0/22
IP: 194.61.116.0/22
IP: 217.28.139.0/24
IP: 2a01:a420::/29
IP: 2a0a:3900::/29
IP: 2a0f:d500::/29
IP: 2a12:3c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:c0:27:0f:98:2d:43:c3:d4:a0:2e:82:b3:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:ef:56:48:bc:45:26:d3:ca:9f:2b:15:
95:af:53:ab:5c:dc:66:9e:c7:62:89:0f:73:5c:f2:
2b:85:ed:79:45:01:66:2e:59:14:f6:43:73:80:54:
2a:26:06:d1:fa:ab:43:cb:9f:d4:6a:cc:80:2f:00:
c0:ae:38:bd:88:ed:7e:dc:66:cd:bc:fd:47:76:00:
fc:f6:18:3e:43:d5:9f:13:05:59:01:de:0e:68:8c:
69:34:46:a4:79:c7:8b:a0:ef:52:4d:84:6b:16:5c:
bd:4f:85:89:c8:80:2d:6a:43:25:4d:a9:12:39:39:
a3:da:70:ed:ea:2e:3b:9b:6c:5e:15:02:39:c6:f5:
c5:e1:1a:d6:a2:6a:40:8e:65:0e:c1:b0:61:f4:af:
82:f1:b1:8f:15:f3:43:ac:78:df:d0:c8:a5:bb:e7:
e9:71:c3:48:22:fe:70:a8:61:73:5e:3d:2b:bd:d1:
ed:c3:8c:4b:a4:73:55:e1:a7:0e:3b:f2:62:b3:55:
bb:f5:5a:c0:58:13:9b:47:1f:a6:ab:e3:d3:29:6a:
a2:49:a8:d4:18:b9:fd:2e:72:9d:72:0d:ed:ac:37:
11:91:8d:36:8d:39:d9:f7:6f:3b:4e:76:74:1b:cf:
af:0c:f7:0d:23:9c:3d:75:32:f1:dd:86:05:ba:02:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
217.28.139.0/24
IPv6:
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
2a12:3c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50769
201978
208425
Signature Algorithm: sha256WithRSAEncryption
6d:f7:88:11:26:cc:e2:b9:e3:5a:c8:f7:17:3a:96:2c:31:a9:
ab:1c:65:90:0d:af:fa:fe:da:8f:1b:d5:82:59:d6:df:cb:47:
f8:97:ff:1d:04:f2:8a:c5:9f:7c:cb:a6:c1:b5:07:e3:43:3b:
86:0f:9f:61:98:be:f0:7f:5e:f3:87:f7:61:3b:84:a0:d8:a8:
ce:ba:6d:c1:56:d4:a1:3f:e5:f0:76:59:bd:8a:67:a1:1b:62:
e9:15:2e:29:e2:b2:41:4c:76:30:e8:a6:27:d4:92:0c:16:1d:
86:ed:bd:5d:d0:d2:82:27:35:be:30:39:13:98:82:de:5d:1b:
00:f4:d1:74:b7:ff:1d:f4:51:86:25:e5:51:39:ae:ff:9b:b8:
d7:df:02:e3:1c:13:62:86:2f:b5:69:27:ee:04:56:a1:38:d1:
fc:6d:fa:4c:cd:10:41:e8:08:56:7c:60:8b:c2:21:6a:45:d7:
96:9d:ae:99:be:46:1c:70:f0:2f:e7:19:2b:bb:f4:02:12:f1:
68:d8:a3:7a:1b:61:02:34:db:89:13:5f:de:dd:d7:24:6e:e0:
bd:20:c3:5c:90:13:2a:dc:5f:38:f2:43:2a:bf:c5:ce:a1:98:
63:2c:e9:0f:4a:23:e8:6a:f7:be:18:d0:3c:53:a1:f4:cc:90:
87:25:de:ef
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAZt568AnD5gtQ8PUoC6Cs4moMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzg2MjlmNWY2MWZiMjU1NjQyODRmYmZlZmZiOTNjM2VkNDRiZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGjC71ZIvEUm08qfKxWVr1OrXNxm
nsdiiQ9zXPIrhe15RQFmLlkU9kNzgFQqJgbR+qtDy5/UasyALwDArji9iO1+3GbN
vP1HdgD89hg+Q9WfEwVZAd4OaIxpNEakeceLoO9STYRrFly9T4WJyIAtakMlTakS
OTmj2nDt6i47m2xeFQI5xvXF4RrWompAjmUOwbBh9K+C8bGPFfNDrHjf0Milu+fp
ccNIIv5wqGFzXj0rvdHtw4xLpHNV4acOO/Jis1W79VrAWBObRx+mq+PTKWqiSajU
GLn9LnKdcg3trDcRkY02jTnZ9287TnZ0G8+vDPcNI5w9dTLx3YYFugJJNQIDAQAB
o4IC8jCCAu4wHQYDVR0OBBYEFAeGKfX2H7JVZChPv+/7k8PtRL/iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzA2MThl
NC03YTY0LTQ2MGMtYWFmOS02M2FmMmM0ZjQwMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMDYxOGU0
LTdhNjQtNDYwYy1hYWY5LTYzYWYyYzRmNDAyMC8xL0I0WXA5Zllmc2xWa0tFLV83
X3VUdy0xRXYtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF
BwEHAQH/BFgwVjAwBAIAATAqAwQAuQGEAwQCuTJEAwQCuXIUAwQCuZJYAwQCuak0
AwQCwj10AwQA2RyLMCIEAgACMBwDBQMqAaQgAwUDKgo5AAMFAyoP1QADBQMqEjxA
MCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDGUQIDAxT6AgMDLikwDQYJKoZIhvcN
AQELBQADggEBAG33iBEmzOK541rI9xc6liwxqascZZANr/r+2o8b1YJZ1t/LR/iX
/x0E8orFn3zLpsG1B+NDO4YPn2GYvvB/XvOH92E7hKDYqM66bcFW1KE/5fB2Wb2K
Z6EbYukVLiniskFMdjDopifUkgwWHYbtvV3Q0oInNb4wOROYgt5dGwD00XS3/x30
UYYl5VE5rv+buNffAuMcE2KGL7VpJ+4EVqE40fxt+kzNEEHoCFZ8YIvCIWpF15ad
rpm+Rhxw8C/nGSu79AIS8WjYo3obYQI024kTX97d1yRu4L0gw1yQEyrcXzjyQyq/
xc6hmGMs6Q9KI+hq974Y0DxTofTMkIcl3u8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:13 2026 by rpki-client