Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
File: SY_UU_XjX5x30dcG5WUTit-CJWo.cer (raw, json)
Hash identifier: iQrDv1yotg2OXHiMuruKHAK0iXKarwQN0jcVAG7DhlU=
Subject key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15CF28F082CFA4DB7E009238237206
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203931
IP: 217.29.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:cf:28:f0:82:cf:a4:db:7e:00:92:38:23:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:55:0c:4a:12:82:f8:51:96:c0:52:1b:2f:
3b:4b:e7:66:99:13:e8:27:7b:08:a0:38:ab:b9:20:
e1:db:71:03:be:57:a9:e9:01:b9:a9:c3:dc:ec:ae:
03:46:69:34:a9:a3:cd:bc:89:04:31:fb:84:7b:a0:
5a:ab:f5:21:52:33:07:71:79:b4:db:9a:75:9b:58:
72:86:9d:53:0a:22:4c:3a:6b:29:c6:1a:23:9c:33:
df:0a:ce:10:a8:1b:92:2d:47:ce:88:59:54:0c:f2:
1e:cb:dd:0e:e0:e2:9d:94:6b:2e:2e:4a:f7:9b:fb:
50:49:a6:9d:eb:3f:4a:d9:d3:4e:6a:b9:63:53:9d:
a8:41:64:ff:e9:01:0a:91:ec:c8:07:2a:ca:63:be:
be:94:88:2c:6c:8f:0c:53:59:e2:23:a7:b6:15:19:
97:31:a3:17:36:ab:d8:9c:12:86:1e:e0:d9:7c:cb:
91:4a:93:57:35:42:00:e2:f9:38:99:0d:cf:d9:aa:
44:29:29:2b:88:a5:b9:9f:6f:26:bd:f9:34:75:2d:
57:ef:60:d1:e3:d9:b2:27:2f:06:60:31:59:ea:a8:
b2:6f:40:37:68:b7:8f:dc:f9:a9:f2:28:f5:28:5b:
ee:ff:f5:a2:43:10:0a:ab:dc:28:62:05:7f:76:d3:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203931
Signature Algorithm: sha256WithRSAEncryption
38:45:5e:78:eb:20:70:5e:09:88:3c:d1:9c:df:9a:fd:6d:d1:
ca:cb:1e:66:ae:b5:2c:63:7d:b1:1a:3d:a5:05:94:f6:80:d2:
73:11:96:fe:01:fc:ce:80:a0:37:fa:31:8b:b4:59:01:9b:b8:
d3:05:b3:d1:2c:ef:e2:36:0e:2f:ce:06:e9:69:1f:17:41:0c:
ca:e3:28:6c:41:ad:8c:5e:12:e1:6b:80:67:29:96:9d:35:09:
9d:7a:0d:94:88:5b:35:2f:b1:65:e0:78:9d:d0:b9:9e:65:d0:
68:5b:6c:ad:80:e1:c8:9e:15:99:d3:06:f2:3a:09:bf:a2:64:
13:05:5b:f7:9d:b4:e1:2b:4f:ed:c0:47:fe:34:9d:0d:72:f1:
1f:1e:56:8d:1c:26:42:e0:ac:75:76:cf:91:68:52:b5:fe:52:
92:bc:5d:61:4f:41:65:88:f5:84:72:5c:9e:87:3e:cd:de:62:
9a:66:b3:3e:08:20:e8:83:31:9f:ce:fb:60:c3:3c:60:d8:59:
d1:d9:a5:5c:87:e0:88:38:64:f3:3b:7a:66:5a:82:3d:a5:b7:
3f:c3:34:6f:e3:26:6a:21:45:e8:42:78:4d:68:2b:22:07:72:
49:67:13:e7:7e:40:67:68:d9:31:44:78:2f:e4:79:8f:8e:ca:
e0:32:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:47 2026 by rpki-client