Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer (raw, json)
Hash identifier: tAO/pB7sSoT8k/ZN2uYhXqQSrYFdc2zzQ0ArH9UlNVQ=
Subject key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11C93E22E9F732FB05738070D73D16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202777
AS: 203764
IP: 185.235.141.0/24
IP: 2a06:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:c9:3e:22:e9:f7:32:fb:05:73:80:70:d7:3d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:40:9e:73:76:eb:64:85:56:62:51:d0:8d:
ee:56:33:13:98:73:2d:f2:ed:47:4b:73:da:9a:f1:
83:ad:d4:7f:72:7a:7f:60:e6:45:4d:a4:a4:6a:4d:
d6:d3:e2:7c:6a:11:c0:77:1a:f0:90:8e:7d:cb:97:
db:e9:a6:ea:88:4d:2e:d5:29:4d:9d:c1:05:9b:49:
1e:f0:cf:00:5c:df:29:04:c8:77:82:a4:8b:56:a0:
c4:db:47:ba:57:9e:b2:81:01:e7:1f:43:29:64:be:
8d:82:fb:a8:37:a1:a2:4c:4c:a4:c2:83:ce:52:ee:
88:63:26:13:1b:db:28:7f:fa:d1:aa:81:a7:5b:6f:
d3:4b:d5:d7:d9:52:7e:52:a7:67:56:26:5d:57:9f:
7f:fe:fe:00:1b:86:f5:6e:69:8b:b2:84:b1:54:80:
19:c2:6f:61:81:d7:ff:a6:9a:81:a4:a0:24:a0:a9:
1c:93:d9:0f:96:05:77:49:a2:e4:ea:7e:95:3c:91:
ca:04:8c:ea:b2:01:59:47:08:65:27:64:bf:98:31:
8c:e5:8e:ec:9a:00:9b:2e:be:17:f2:24:ce:01:31:
2a:3c:14:1a:8b:37:68:70:47:8c:bc:1c:f9:e5:17:
0e:e7:69:f9:56:d2:17:d9:b3:35:6c:ef:3a:b0:19:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.141.0/24
IPv6:
2a06:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202777
203764
Signature Algorithm: sha256WithRSAEncryption
5e:33:e3:99:8f:d7:ca:58:ef:8a:33:71:81:0b:e2:a2:97:3e:
05:ba:0e:66:d7:30:cc:3a:39:94:62:8c:e3:ad:ef:11:42:95:
cb:d8:b9:91:dc:cd:f8:19:c5:37:dc:b1:bf:be:30:f5:f5:67:
5c:87:1a:2b:a5:d7:8e:19:04:63:27:1e:3d:c9:bd:b9:2b:fb:
13:3e:db:9a:45:df:f8:0d:12:34:b5:7e:c2:5b:7c:46:97:29:
4c:e8:36:bf:20:1b:3e:4c:7a:63:1f:db:8a:96:93:8d:af:59:
45:a1:d8:76:14:0f:aa:5f:76:3d:ce:e0:21:f5:ec:8d:06:6c:
77:ce:e3:a3:cf:32:f2:3b:33:c6:dd:a3:bf:d5:ac:1c:a9:d5:
f6:3e:39:46:a3:5c:32:57:59:1a:4b:4e:e1:15:7c:c0:e3:b0:
b0:9e:14:8b:08:28:9e:80:cd:07:6d:f1:fc:b1:35:a9:66:4f:
0b:7d:26:1f:8a:d9:d1:83:4b:be:1e:a1:b7:f3:88:75:92:62:
3f:b5:23:e5:3a:34:1d:ff:f9:a5:23:9f:d4:eb:0b:1c:17:b3:
b4:35:e7:29:71:59:27:d2:95:67:43:4c:1c:61:a4:07:3e:6a:
a4:11:71:bf:ae:23:86:f3:9c:7c:f8:45:69:e4:a3:b8:fe:00:
be:2e:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:26:09 2026 by rpki-client