Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
File: LyYGSS1O272szm3JIfOG1idM8RY.cer (raw, json)
Hash identifier: 9R49mYwkLGgiB9VfW98cMQ2Xxk/FlmwKqlk0urij0+Y=
Subject key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D007FC5C1A24DD5DB58483605AEAC15B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Mar 2026 10:31:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50882
IP: 194.28.8.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:7f:c5:c1:a2:4d:d5:db:58:48:36:05:ae:ac:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 10:31:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:70:77:40:06:ce:c4:fc:2d:11:1d:b3:45:
b9:c5:2e:42:90:b5:90:df:d9:dc:68:98:72:5b:a6:
9b:c1:b5:07:48:67:66:b0:89:16:1c:9f:9a:ec:8e:
72:11:b2:bd:63:53:36:04:a0:31:4f:a8:74:f6:b0:
64:62:87:c2:9b:a0:2c:05:f0:5f:c5:9d:1d:ce:ef:
a5:8c:ed:e8:4f:f9:97:4d:78:39:b9:cc:e4:cb:9e:
ca:00:5b:95:e6:b8:c4:85:4e:33:83:a1:b0:ea:ac:
1d:4f:aa:91:82:18:c9:e4:8a:00:2c:00:89:26:00:
c8:2e:f0:94:df:85:09:d8:d3:64:ea:cf:67:2f:03:
cf:c5:ca:56:e2:a4:26:ec:e6:82:f2:02:2f:01:a2:
e8:87:38:6a:bf:20:86:f4:99:2d:de:9c:02:49:8a:
71:75:7e:fe:d9:84:bc:f4:c9:14:2a:19:70:60:4b:
2c:86:39:fd:8c:10:67:10:d8:2c:9b:a6:71:fb:82:
68:da:9e:d4:26:b2:cf:6a:b8:eb:ee:b9:66:ce:42:
73:54:c5:24:9a:bc:10:c3:7f:1e:89:4c:c1:c4:10:
87:d0:f3:5b:b2:96:86:33:a3:6f:d7:06:21:74:de:
17:18:12:9a:c8:90:4b:04:54:9d:99:ee:35:e3:b5:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.8.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50882
Signature Algorithm: sha256WithRSAEncryption
3b:18:5e:90:bb:9d:9a:2e:7c:f4:43:8d:5c:b4:a0:d3:68:6a:
17:db:d0:8c:20:79:3b:2d:b9:a8:78:73:1a:f9:bc:94:34:48:
44:1a:07:20:96:ef:55:29:c6:4b:72:2f:96:8b:24:97:16:4c:
1e:2d:22:e1:2f:59:31:0a:82:56:36:84:81:24:9f:3b:33:fb:
86:95:76:02:95:c3:08:59:44:03:3a:2e:f3:7f:45:ca:3c:96:
90:28:db:76:d3:68:94:74:03:de:09:d6:d7:b5:53:df:d1:43:
74:f4:9c:47:c4:90:47:bf:1d:13:0c:f2:75:82:ba:d7:8d:ef:
af:de:d3:e4:88:a0:43:8f:2e:10:94:a0:3f:41:e8:49:e6:a5:
f1:4a:a3:c8:21:49:04:e7:68:c8:dc:69:69:a1:09:5d:b0:4b:
8f:c9:b5:df:8c:3b:6c:3e:59:8d:34:8e:3c:03:64:d5:66:86:
5f:7f:59:66:f7:30:be:0f:34:8c:3c:39:0b:42:f3:2c:86:67:
c5:de:da:0a:0b:fc:89:12:3d:98:3e:e0:6d:b6:90:41:80:9c:
f7:ce:34:20:70:27:46:a5:68:e1:b2:79:60:b6:dc:41:a2:c5:
8c:8a:38:ac:80:3c:99:78:d2:90:da:2b:63:63:a2:a6:e2:d9:
40:b4:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:21 2026 by rpki-client