Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
File: CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer (raw, json)
Hash identifier: c7ainJcDecHuYvflbhFRYsninPKUNKnqtedcMGFGllg=
Subject key identifier: 0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C56FB5A454C341528A4F77A57D35A2BAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Feb 2026 12:30:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29231
IP: 212.4.96.0/19
IP: 2a02:2740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:fb:5a:45:4c:34:15:28:a4:f7:7a:57:d3:5a:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 12:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2049f6ca7cfdadaf3cb3c71e48b083df0b73fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:06:a8:d6:fe:6d:83:52:e2:d8:77:aa:a7:
6c:85:d5:b1:dd:38:52:bf:76:76:4b:9f:25:cd:3c:
77:2f:58:e4:30:1e:cc:32:d2:dc:b1:52:cd:46:9a:
76:90:5d:69:a5:95:00:96:d1:94:65:8c:7c:e5:20:
02:e0:ca:0d:93:22:15:04:96:3e:a0:53:df:1e:08:
31:75:30:d1:88:12:82:7e:2f:30:c9:1d:e4:8c:e2:
60:f4:7c:f7:e3:17:45:af:81:1c:b7:c6:ff:b4:1f:
03:6e:f3:fd:5c:7b:a9:4b:6e:80:d8:88:38:2f:4e:
30:49:8a:9c:c1:30:de:66:b6:96:7e:87:50:cd:7e:
41:e1:1a:8b:63:dc:cb:db:ef:c9:2e:b3:b5:b1:ea:
30:ab:62:cf:21:de:e0:ad:f3:ea:6f:47:8e:0e:93:
4e:3b:66:34:d4:2f:a3:38:0a:dc:9f:da:dd:7f:da:
4f:f5:4e:27:82:b4:fe:fe:0f:06:00:20:59:67:f3:
68:07:d9:9f:88:24:40:81:b1:b2:4b:17:6f:15:1a:
5b:24:0a:57:43:c5:6b:60:07:4f:b2:c7:e4:dd:d5:
4d:74:c5:11:c6:02:65:85:ad:e7:5c:1d:f5:3f:6e:
c8:fc:71:b0:6a:71:1d:04:b0:02:15:a8:17:b0:01:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.4.96.0/19
IPv6:
2a02:2740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29231
Signature Algorithm: sha256WithRSAEncryption
01:e3:2d:39:a8:08:cf:05:83:84:bc:43:46:bf:b3:5a:a9:0a:
c7:98:cf:44:c5:db:3b:eb:87:6c:57:db:de:1d:5c:01:b1:f5:
b3:f4:98:8e:02:0f:7b:63:e8:07:8f:12:77:60:6c:fd:3d:43:
ba:a9:b4:b2:90:a0:ea:9f:3a:b2:b0:10:76:5f:a1:48:78:51:
a3:f1:f8:b7:ad:1b:90:14:cb:df:0c:f2:cc:2d:82:3b:d6:48:
c4:f0:d1:67:58:3d:71:95:68:3c:7d:44:00:93:de:88:20:b6:
79:77:77:4d:34:56:9e:32:30:47:d6:b0:36:d8:8d:2e:31:4f:
3a:76:91:81:81:00:cb:d8:aa:a1:27:c7:b1:ba:df:83:c1:d1:
1b:50:ee:8d:b6:7f:c5:e6:ab:13:c9:41:86:18:34:59:22:a9:
5a:9f:e3:db:60:3c:84:4c:1a:c8:51:e0:23:a5:5c:56:1b:4f:
05:ec:9f:12:fc:92:c1:7e:6a:29:df:d0:60:0d:ef:e4:bc:d4:
bb:42:75:0a:76:c9:16:cc:6b:af:7e:53:d7:49:fb:75:14:44:
f3:aa:ba:f1:0a:74:50:46:26:87:b4:b8:b5:41:93:62:a5:80:
6e:50:eb:4c:2d:d5:99:0f:a6:f1:77:e5:22:10:b8:59:84:0a:
d5:5d:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:05 2026 by rpki-client