Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
File: KYijxojo6x_vBsN0p6pc-P13jg8.cer (raw, json)
Hash identifier: 7QYTCu46DXu51n+tC0ZHn5ug87m8wXjgZRRQ1cHQE24=
Subject key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C8034DB1C2841CF8325172A5C22E313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25106
IP: 46.56.0.0/17
IP: 46.216.0.0/16
IP: 134.17.0.0/16
IP: 176.60.0.0/16
IP: 178.168.128.0/17
IP: 185.20.112.0/22
IP: 2a02:bf0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:34:db:1c:28:41:cf:83:25:17:2a:5c:22:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:64:0a:6d:d1:fd:3e:d2:e7:17:05:89:97:
df:11:2d:63:3b:19:5e:9f:5d:ee:dd:9e:e8:9d:01:
ce:26:06:83:cb:54:25:23:45:68:c1:8c:ef:a2:7a:
e7:65:e1:2e:b1:d3:2c:1e:a5:13:57:29:a7:de:fb:
42:28:b3:c8:d0:3c:62:80:19:13:1c:73:3c:b7:b5:
21:c6:41:ff:f1:1e:36:f2:db:1d:50:97:a5:38:47:
32:d0:43:82:fb:a6:2b:78:53:fe:72:01:62:68:5e:
38:a2:a9:57:a1:14:49:e0:8a:5d:2c:06:66:75:e9:
99:02:46:ff:7e:64:4d:5d:1b:38:35:3f:a5:51:88:
35:e8:2b:ca:a6:8c:72:33:b2:8d:cf:1d:b7:ca:c3:
ce:40:a5:dd:44:90:1c:1b:eb:ac:97:41:45:4f:f7:
15:49:cb:c4:bf:84:53:c5:97:2a:bd:7a:9d:18:95:
d6:cc:50:a0:99:a7:14:da:88:08:25:df:ca:b8:fb:
59:7e:02:ec:98:bd:0c:5b:d5:db:6b:4d:11:7e:e6:
b4:8e:13:55:bf:68:5a:b2:1d:77:75:4a:27:45:31:
20:c6:7d:f2:be:b2:e9:0b:03:a1:53:86:03:be:05:
bd:96:a5:cc:e7:10:c4:fb:49:31:c7:bf:a9:fd:7c:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.0.0/17
46.216.0.0/16
134.17.0.0/16
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25106
Signature Algorithm: sha256WithRSAEncryption
1c:c5:58:8d:c0:a8:86:a1:09:d3:f4:da:21:f3:69:c2:9a:93:
24:01:cf:40:b9:96:87:c1:6e:08:a8:ae:7f:e9:d5:22:8c:00:
e8:1d:6d:d0:3f:c7:9e:db:82:ae:51:7c:a4:6a:a3:07:9c:2a:
ff:85:b9:43:05:53:fc:f0:f3:22:8a:c2:2d:7e:ca:77:bc:6a:
ae:f4:64:7a:35:93:93:14:4b:05:17:13:a7:f0:56:32:e5:b7:
55:71:6d:af:ad:a5:ef:6c:54:ce:7e:bc:4b:7b:93:67:fb:03:
d8:81:71:e6:ed:29:66:3f:bb:bf:32:91:a0:8e:9d:d2:20:36:
af:04:11:0b:74:00:28:39:10:79:12:a6:ce:06:0d:56:9b:b8:
bf:c5:06:7a:c2:13:e5:aa:1c:83:a9:6d:33:e8:8a:79:f0:ea:
c6:ce:24:7f:30:f5:12:3b:d9:cc:6d:bb:e6:61:a1:c1:ea:78:
65:a8:14:40:40:6e:75:eb:7d:2e:9c:f0:d0:12:32:6c:7a:10:
66:ed:1b:64:d7:f8:3e:fb:77:ff:89:b7:a0:4f:6d:20:06:1c:
f1:7f:fa:cb:39:02:14:7e:a7:d4:9b:03:9c:f1:7e:a7:12:64:
b5:84:47:7a:8d:0e:c6:ca:a6:22:6d:2a:12:e4:2c:1f:be:d4:
a5:03:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:52 2026 by rpki-client