Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
File: Su_P7VH_FY--aMzWC3s5vl8-riA.cer (raw, json)
Hash identifier: PCYZ29lpEaEQ8tJeFANeLpOFmoqzVuiLAVDoy0/eMEM=
Subject key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA34834F7D3DD145CF7E3E71014C6C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39202
IP: 81.20.48.0/20
IP: 2a01:6000::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:48:34:f7:d3:dd:14:5c:f7:e3:e7:10:14:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:a3:d4:1e:18:e6:05:77:45:16:c3:e3:2b:
5b:52:a7:fb:c0:67:bf:c5:98:99:9a:b5:08:71:ea:
14:64:ad:48:d3:81:0a:a5:11:50:f5:d6:9f:67:6e:
d1:9c:3d:7a:70:44:fc:17:63:03:c5:da:be:4c:3c:
65:78:96:15:15:4b:a3:fc:6c:19:ca:29:ba:3f:df:
07:ec:30:90:61:f4:87:96:63:b6:74:55:7e:05:7a:
a4:b9:c6:8f:b9:59:61:50:ea:7b:d3:77:03:29:dd:
11:91:36:35:47:e5:68:52:47:53:f1:05:2c:c4:2d:
b5:d5:a8:d1:27:35:36:34:9d:96:6b:eb:ff:d9:4f:
df:29:f7:2e:e8:e7:20:85:8b:fa:e0:60:02:28:1e:
66:5a:b1:c8:13:b8:6e:24:a3:8b:41:fb:61:a4:21:
47:2f:f9:43:4c:41:55:16:79:19:d0:69:0e:96:0b:
ff:4e:70:35:f4:0c:80:65:6b:49:5a:28:ea:e0:2d:
c3:1f:98:82:34:94:ea:0f:bb:f5:84:22:d2:20:e0:
cb:0e:14:d8:9c:08:b8:f8:03:65:06:b7:4c:9f:b1:
82:5f:ae:87:a6:24:db:05:8e:c0:65:e0:39:a2:a4:
4d:44:90:3c:86:a8:03:34:3f:f7:bc:a1:ba:9d:80:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.48.0/20
IPv6:
2a01:6000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39202
Signature Algorithm: sha256WithRSAEncryption
31:97:70:25:60:d5:1a:0e:5e:41:23:19:b5:9d:6b:8c:40:b0:
96:5a:a1:44:91:49:92:9c:2c:98:17:b7:42:3f:4d:7d:9a:5c:
82:13:5d:51:94:91:22:59:37:70:ad:f9:34:06:06:8a:2d:55:
28:7d:0c:6f:fc:d2:0d:19:5a:01:59:77:4e:b9:6b:06:6e:f4:
87:43:81:80:e3:25:28:ce:d5:ad:52:d3:c4:bf:d0:8e:83:a4:
1e:59:41:54:b0:ce:6e:9b:ba:25:e0:a3:30:84:a3:de:55:db:
73:21:3f:96:57:d2:2e:d0:45:9a:39:6b:e9:35:e0:d6:8a:03:
88:e4:9d:72:ba:42:72:57:8e:f6:48:00:ff:cf:a0:b7:0a:27:
39:04:a4:d7:48:9a:99:92:8e:67:8f:af:f5:0d:59:e4:88:5d:
e7:cd:a6:80:8b:a1:b1:83:3b:f3:6e:e7:f1:2a:dd:b0:3b:29:
7a:86:4c:8c:74:67:c9:dc:a3:d8:73:a7:9e:0e:38:c9:f6:27:
dd:7e:ef:b0:12:34:e5:af:d3:f9:04:d9:dd:fe:8f:1c:c4:b1:
30:54:2d:fb:58:dc:bd:e5:c5:71:ac:af:a6:ad:08:b6:3f:de:
f8:f9:2b:a9:b0:f9:ac:42:11:d1:2b:a2:c5:25:77:88:ed:1f:
0d:71:e0:61
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt7o0g099PdFFz34+cQFMbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWVmY2ZlZDUxZmYxNThmYmU2OGNjZDYwYjdiMzliZTVmM2VhZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTOj1B4Y5gV3RRbD4ytbUqf7wGe/
xZiZmrUIceoUZK1I04EKpRFQ9dafZ27RnD16cET8F2MDxdq+TDxleJYVFUuj/GwZ
yim6P98H7DCQYfSHlmO2dFV+BXqkucaPuVlhUOp703cDKd0RkTY1R+VoUkdT8QUs
xC211ajRJzU2NJ2Wa+v/2U/fKfcu6OcghYv64GACKB5mWrHIE7huJKOLQfthpCFH
L/lDTEFVFnkZ0GkOlgv/TnA19AyAZWtJWijq4C3DH5iCNJTqD7v1hCLSIODLDhTY
nAi4+ANlBrdMn7GCX66HpiTbBY7AZeA5oqRNRJA8hqgDND/3vKG6nYDeSQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFErvz+1R/xWPvmjM1gt7Ob5fPq4gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzhlNTU3
Ni0zM2M4LTQwMDItYTQzNy1kYjY2NzFhYzc2NzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvOGU1NTc2
LTMzYzgtNDAwMi1hNDM3LWRiNjY3MWFjNzY3Mi8xL1N1X1A3VkhfRlktLWFNeldD
M3M1dmw4LXJpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEURQwMA0EAgACMAcDBQAqAWAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCZIjANBgkqhkiG9w0BAQsFAAOCAQEAMZdwJWDVGg5e
QSMZtZ1rjECwllqhRJFJkpwsmBe3Qj9NfZpcghNdUZSRIlk3cK35NAYGii1VKH0M
b/zSDRlaAVl3TrlrBm70h0OBgOMlKM7VrVLTxL/QjoOkHllBVLDObpu6JeCjMISj
3lXbcyE/llfSLtBFmjlr6TXg1ooDiOSdcrpCcleO9kgA/8+gtwonOQSk10iamZKO
Z4+v9Q1Z5Ihd582mgIuhsYM7827n8SrdsDspeoZMjHRnydyj2HOnng44yfYn3X7v
sBI05a/T+QTZ3f6PHMSxMFQt+1jcveXFcayvpq0Itj/e+PkrqbD5rEIR0SuixSV3
iO0fDXHgYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:52 2026 by rpki-client