Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
File: ByYUTrr5BLgdCju8BLSocHNVBTM.cer (raw, json)
Hash identifier: wNRXG3yAahukTacOfykv7eyR//5UbeXipb3y+ILykOo=
Subject key identifier: 07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07BCAEE79B207D3D619C82A699C3666E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 12:14:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205869
AS: 209623
IP: 45.142.20.0/22
IP: 2a0e:d3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:ca:ee:79:b2:07:d3:d6:19:c8:2a:69:9c:36:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 12:14:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0726144ebaf904b81d0a3bbc04b4a87073550533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:4b:03:35:5f:57:fe:c0:d4:30:e5:e0:24:
64:34:f7:b5:15:84:82:19:9f:89:96:10:d0:20:3f:
0f:be:b1:af:2d:04:25:8a:97:59:9a:6d:d3:ca:5e:
59:0a:78:f9:20:e9:b9:f5:77:fa:8a:d4:3e:c8:c7:
69:04:72:71:00:f8:ce:73:96:09:e6:8d:1c:0d:27:
6c:4f:bb:c9:2f:3b:dd:fd:c6:99:5f:8e:e3:5a:3d:
fb:15:7e:07:f6:71:f1:02:5c:23:18:fc:5d:01:35:
80:cc:50:d2:ad:31:5e:34:45:fb:b4:b4:96:4f:d6:
e7:81:d7:50:6e:63:3a:9d:7a:47:0b:dd:79:0d:b4:
92:df:05:cb:0c:c8:73:5c:22:60:c0:bd:1a:0f:bf:
da:59:32:55:56:d0:2e:49:42:59:f4:d7:61:14:0b:
db:55:ed:20:a2:55:dc:e9:4c:0f:af:cb:16:e4:f7:
b8:14:37:79:83:d5:f3:e8:8b:3d:0e:1e:3d:a0:8e:
68:79:cf:02:b3:bb:de:4e:bd:34:a5:ad:8e:8c:53:
9e:09:95:df:b7:8b:af:8e:93:e8:c2:95:21:13:e1:
e7:c6:d9:dd:01:3a:63:20:66:da:d6:22:47:b3:4c:
48:de:43:dd:2c:e3:0d:0d:9f:d6:4e:51:94:d4:18:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.20.0/22
IPv6:
2a0e:d3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205869
209623
Signature Algorithm: sha256WithRSAEncryption
6e:f4:a4:6a:88:21:f0:0e:fa:8c:d6:dd:c0:86:60:a6:fc:3b:
fe:5d:23:15:d9:62:e5:3a:df:8a:b2:73:1e:8d:27:fd:62:ca:
d3:98:cb:e1:ad:44:76:3c:2b:da:30:13:fc:2d:b6:02:b2:87:
b1:e1:b2:bd:41:99:2b:03:67:26:43:92:43:11:2f:c6:f2:02:
61:84:e7:9e:05:51:2a:84:32:d0:37:e7:a0:ab:b1:8a:e1:77:
ca:9a:50:7e:07:d0:12:c3:6e:bf:46:b3:48:97:b3:b2:4c:ad:
4c:b6:cd:64:cb:6a:50:1b:2a:b2:3f:d7:53:df:4a:88:4c:6b:
70:2b:41:fa:bb:53:5b:c9:85:bd:92:62:8d:71:bc:14:4f:a9:
b0:c3:ee:6e:40:b5:9d:ab:8c:ab:5f:f8:4d:f5:e8:6f:93:a0:
35:2a:6a:b2:5d:2b:75:38:81:9a:e4:96:5a:49:89:4d:9d:81:
b6:d6:dd:15:7c:75:c5:89:d6:f6:1a:07:d0:67:7d:0e:9d:21:
95:43:c9:9f:09:f0:4c:f2:91:71:f1:4d:0c:81:cb:c0:f4:8d:
86:66:84:8a:32:18:23:eb:1c:f8:05:45:d9:98:44:f9:15:64:
37:b4:b8:19:77:54:69:57:af:1d:da:d5:44:3f:66:cf:f4:e8:
00:09:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:23 2026 by rpki-client