Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
File: BkYy7w6lXgDeU3azwIR2mrZykew.cer (raw, json)
Hash identifier: dRvTLnRKNy2UYeRDv8v8gCQ7rYBKhM4bKqd5cdmpp0o=
Subject key identifier: 06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DAAEB689A2E1359F9ACF9A81D15876195
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Apr 2026 12:44:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44997
AS: 203515
IP: 185.1.55.0/24
IP: 185.1.65.0/24
IP: 2001:7f8:12::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:eb:68:9a:2e:13:59:f9:ac:f9:a8:1d:15:87:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 12:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=064632ef0ea55e00de5376b3c084769ab67291ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:29:ee:bf:55:be:a0:8f:bf:ae:87:37:88:
b7:4b:77:0b:8d:c6:7f:05:ac:4e:8f:9e:82:96:75:
2e:d7:71:e7:0a:bb:f3:0b:20:94:ed:85:fa:92:4b:
21:9a:bd:b8:3d:7f:1b:1e:06:29:e2:d5:32:ad:de:
b9:11:1a:ec:7d:e6:3c:7e:01:25:f4:e8:6f:30:e2:
72:dc:8a:9c:c0:05:a7:d7:91:2b:d9:b6:9c:b8:1c:
15:ff:41:69:2c:08:e6:dc:da:15:b8:fb:20:51:ae:
e2:be:2e:e1:6f:03:bf:ce:01:95:9c:e4:7d:b0:b5:
d6:46:ba:c3:cb:08:33:ff:e8:03:93:0f:d4:4a:cf:
d4:6a:71:3a:d7:62:6e:69:23:78:e0:10:63:03:3b:
39:8b:d5:79:4b:22:00:20:e4:aa:85:06:51:d9:80:
fc:1b:c0:15:3c:ef:15:57:05:72:9a:58:a5:c9:09:
7a:d3:39:bf:57:0a:ca:ae:9a:ae:12:b1:cb:02:b5:
80:2d:8a:86:6b:a8:9c:b2:db:3d:9f:bc:e0:42:14:
fe:a8:aa:c4:ad:6a:f5:78:62:a6:6e:7e:da:07:dc:
5b:4a:e0:81:0e:ec:6a:50:ba:26:52:14:66:57:14:
38:11:60:7e:10:45:01:64:20:27:7e:dd:89:2f:8e:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.55.0/24
185.1.65.0/24
IPv6:
2001:7f8:12::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44997
203515
Signature Algorithm: sha256WithRSAEncryption
99:64:a7:9e:64:44:e5:ec:47:f9:b5:3d:aa:5f:d2:23:bc:b9:
fa:c2:88:1c:6a:c9:5d:ae:29:f4:5e:3e:b3:ba:eb:84:7d:01:
74:25:29:b1:a3:b3:63:63:7a:39:62:0b:d0:39:f0:e3:7b:4d:
03:ed:49:b6:18:0e:ab:e5:ec:40:16:50:8c:3f:4a:05:90:d7:
52:d4:3d:f9:e1:ff:a6:57:86:bb:5a:c6:59:0b:09:3b:58:ee:
49:98:88:63:29:20:c3:37:35:78:f9:fa:e5:6d:be:47:32:ea:
be:e5:24:0a:4b:50:52:c9:08:08:fd:eb:7e:a7:fd:ba:88:f1:
15:1c:f4:72:1f:06:63:c6:90:8e:0a:e5:2a:9b:b1:30:4f:0b:
ef:a6:b9:0f:fc:db:38:41:7b:52:d0:d1:e4:aa:c1:f6:4c:e6:
c9:4e:5a:d9:7c:f1:26:b4:45:03:6b:19:d1:a5:ed:a0:f7:7e:
89:03:a7:6b:c8:59:a1:42:0a:0c:53:46:c6:1b:43:ea:a6:78:
92:87:e3:b0:3b:dd:1e:33:ba:47:ea:28:e6:f9:a8:fe:a0:73:
01:18:d2:86:24:15:52:52:ae:0b:98:da:6a:d5:57:5e:e8:40:
67:5d:b3:be:d9:bb:d9:2a:1a:38:4b:0c:f4:39:6f:19:d0:b7:
80:ae:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:30 2026 by rpki-client