Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
File: FycuwT2kL1s2HxB0xnUcw1RZPn8.cer (raw, json)
Hash identifier: kMCQFNjllGrzQ4Hj89FDFWUYsYc9NM70s3Chec/Oo9g=
Subject key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F4275822667E426293C3B42450634
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:19:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200434
IP: 59.153.36.0/22
IP: 185.107.104.0/22
IP: 2a06:44c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:42:75:82:26:67:e4:26:29:3c:3b:42:45:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17272ec13da42f5b361f1074c6751cc354593e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:83:d2:3c:c8:87:16:5b:cb:87:d7:99:ca:
c0:d7:59:7f:22:b5:3f:2e:4c:be:0e:39:39:1f:b8:
09:17:1a:2a:0f:47:90:76:09:d4:d9:ba:91:b3:60:
cd:cb:ec:7b:14:76:d3:b0:6a:92:66:d1:da:7e:9a:
98:1c:ac:f6:dd:f8:d2:2c:ce:bf:54:02:0e:b9:44:
35:0f:33:c5:be:fe:f5:28:1c:44:59:80:0a:c0:e9:
c4:db:30:2b:65:68:e6:70:cf:19:f5:d5:6e:13:da:
37:17:20:5a:da:01:29:60:61:91:0e:5b:f4:15:0f:
eb:3f:37:61:94:a6:ee:50:6d:18:ab:d8:d9:8b:bd:
f0:92:c7:43:20:d3:39:84:18:44:27:1c:24:aa:67:
5b:11:50:c4:a2:80:e6:e7:1c:85:1b:cf:41:e9:5e:
5f:27:16:1f:90:43:60:10:74:44:cc:88:cf:bc:e5:
14:01:89:26:3d:2b:61:e1:7f:74:58:ec:ec:16:69:
2b:3e:26:f6:a5:8b:b7:b7:a5:3d:29:96:4c:59:bd:
fe:27:c7:2f:18:27:96:9b:47:d4:8a:3e:67:a7:ca:
74:bc:5c:92:44:28:fb:a9:53:f1:4c:3d:3e:ca:cb:
2f:8a:7d:87:8a:fc:a8:3b:65:c2:98:65:d6:fb:20:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.36.0/22
185.107.104.0/22
IPv6:
2a06:44c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200434
Signature Algorithm: sha256WithRSAEncryption
9e:17:3e:79:f8:01:af:3d:fb:dc:ce:a4:ad:a6:09:f3:1e:77:
5f:5a:6a:7e:1e:b3:9f:fa:84:f1:ad:fe:42:27:34:c9:d6:57:
70:2c:b1:96:82:12:15:e1:3d:26:96:05:a3:3c:67:73:74:a5:
00:25:81:84:f6:b1:a7:aa:58:95:8c:e6:6a:f0:79:54:69:52:
e2:b9:99:cf:49:ad:a6:a9:c3:3e:0c:38:5b:d0:8e:7f:7a:6f:
47:aa:7e:cc:fa:1b:5e:6c:17:34:55:b3:7d:d5:65:d2:67:88:
19:9b:87:9a:93:3c:b3:f2:32:fe:44:f3:a4:d4:a8:25:d1:f9:
ab:d5:06:60:32:84:c2:2d:84:43:3f:ae:0d:fe:00:cd:1a:c3:
cf:c8:2a:2f:a3:bd:54:f4:da:fc:19:e3:f8:96:7a:42:23:52:
59:2c:05:d4:8c:3f:79:c5:1e:d4:0a:3c:b8:0e:33:f7:c8:77:
20:57:f5:12:d9:ab:0b:df:3e:8c:ea:1a:97:c0:27:20:f8:37:
01:99:06:05:2f:df:77:0b:11:ba:11:e3:27:02:1e:0e:98:89:
22:fe:cb:70:bc:3b:75:0b:35:fd:22:29:81:79:37:76:12:6f:
28:3e:ef:de:ac:58:52:50:9b:a5:e2:8a:67:8f:78:f7:e2:ce:
38:8f:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:43 2026 by rpki-client