Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
File: TYJcWjaxil5MorUyJtWgW1kN3J4.cer (raw, json)
Hash identifier: PL+cSTU4kbOcu8iI0Cxt4rGeW3bI0JWe6j9lFvJnagM=
Subject key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758DEA387D0C67BEFC65D09328EE117
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8435
AS: 49758
IP: 141.92.0.0/16
IP: 159.34.0.0/16
IP: 193.32.250.0 -- 193.32.253.255
IP: 193.34.230.0/23
IP: 193.164.233.0/24
IP: 195.60.95.128/25
IP: 2a07:e200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:de:a3:87:d0:c6:7b:ef:c6:5d:09:32:8e:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:1a:9f:36:40:fa:a5:b4:cf:f5:fb:e8:15:
e5:bd:4b:12:15:a6:65:12:86:18:7c:64:f9:f2:d3:
a3:1f:d1:8f:64:b4:04:cd:1f:d6:3c:62:6c:d4:84:
50:ca:87:fd:31:23:e4:52:89:d3:a7:27:21:9a:0c:
88:54:00:60:98:bd:91:cf:d8:8d:b7:16:54:e8:ce:
32:02:97:b6:07:13:8e:62:ed:8e:d8:f1:4b:6c:02:
b0:77:3a:34:bb:5e:cd:90:a9:bc:24:b7:d1:49:80:
70:ee:ff:c1:48:09:b6:2d:89:78:a1:b0:98:45:df:
f6:b5:43:42:08:1d:9d:77:cf:70:6b:2f:91:c5:19:
96:d4:9a:0d:82:9f:ef:6b:fc:47:2f:29:80:10:ce:
73:4f:57:91:66:f9:1a:44:8c:a4:b0:32:e6:30:24:
21:c5:95:db:01:9f:89:9e:97:ef:4c:2b:4b:99:10:
32:84:05:cd:74:7a:82:e2:41:a6:1e:da:d8:91:26:
23:26:9c:35:91:95:5f:13:4c:cd:95:c7:27:b8:cd:
99:e2:cb:fe:d5:c8:c6:4e:9d:6c:2e:1d:f4:f2:63:
8a:8f:ee:3f:15:58:4f:fb:d1:b4:32:80:a7:0e:35:
e6:8a:0e:c8:76:cc:03:72:15:e7:01:ac:a7:22:ce:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.92.0.0/16
159.34.0.0/16
193.32.250.0-193.32.253.255
193.34.230.0/23
193.164.233.0/24
195.60.95.128/25
IPv6:
2a07:e200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8435
49758
Signature Algorithm: sha256WithRSAEncryption
40:74:82:fe:13:a2:9a:d8:a9:0c:99:8c:a5:9c:4f:7d:55:cc:
00:18:7e:a2:32:a3:ba:fd:54:54:23:45:fa:88:8a:eb:b2:ab:
84:05:0e:c3:c3:22:2b:6d:2e:8a:d9:b8:05:1a:60:ab:03:10:
7f:60:a1:11:08:6f:3e:d4:af:2f:4a:76:67:c6:13:cd:be:df:
93:0c:ac:aa:32:7c:55:0c:c8:00:38:03:a0:06:c4:77:3e:d9:
f1:2b:1d:41:7b:ed:ed:1a:81:36:7c:d4:41:cd:3a:97:6c:4e:
2b:fb:dd:46:df:02:4a:54:ce:9d:2d:9f:a0:80:7d:04:4d:26:
c6:86:c3:83:45:d9:5f:d7:27:e4:46:21:53:66:e3:f8:cf:7f:
aa:90:91:22:b1:86:4e:98:7b:73:d0:de:d7:10:78:a9:6a:34:
29:04:88:54:9c:92:65:5e:e1:64:e5:55:08:fb:aa:74:67:e1:
d5:12:d2:48:a6:e4:d1:4f:9c:30:e4:96:49:bc:c7:e1:37:24:
18:f6:ed:36:c6:04:18:9d:52:73:37:ca:73:90:a3:16:e9:92:
26:b9:6c:15:8b:3a:af:67:1e:1e:2a:d1:ed:5e:19:d4:ea:9b:
ea:82:1e:86:47:b8:ef:f9:72:e4:e7:a3:04:02:6a:4b:f1:79:
3f:22:68:41
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAZt3WN6jh9DGe+/GXQkyjuEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDgyNWM1YTM2YjE4YTVlNGNhMmI1MzIyNmQ1YTA1YjU5MGRkYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIanzZA+qW0z/X76BXlvUsSFaZl
EoYYfGT58tOjH9GPZLQEzR/WPGJs1IRQyof9MSPkUonTpychmgyIVABgmL2Rz9iN
txZU6M4yApe2BxOOYu2O2PFLbAKwdzo0u17NkKm8JLfRSYBw7v/BSAm2LYl4obCY
Rd/2tUNCCB2dd89way+RxRmW1JoNgp/va/xHLymAEM5zT1eRZvkaRIyksDLmMCQh
xZXbAZ+JnpfvTCtLmRAyhAXNdHqC4kGmHtrYkSYjJpw1kZVfE0zNlccnuM2Z4sv+
1cjGTp1sLh308mOKj+4/FVhP+9G0MoCnDjXmig7IdswDchXnAaynIs5cewIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFE2CXFo2sYpeTKK1MibVoFtZDdyeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2E0ZWQ4
ZS05ZGU4LTRlMTEtYjEzZS1lZmVjYTQzMTczYTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTRlZDhl
LTlkZTgtNGUxMS1iMTNlLWVmZWNhNDMxNzNhOC8xL1RZSmNXamF4aWw1TW9yVXlK
dFdnVzFrTjNKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF
BwEHAQH/BEQwQjAxBAIAATArAwMAjVwDAwCfIjAMAwQBwSD6AwQBwSD8AwQBwSLm
AwQAwaTpAwUHwzxfgDANBAIAAjAHAwUDKgfiADAeBggrBgEFBQcBCAEB/wQPMA2g
CzAJAgIg8wIDAMJeMA0GCSqGSIb3DQEBCwUAA4IBAQBAdIL+E6Ka2KkMmYylnE99
VcwAGH6iMqO6/VRUI0X6iIrrsquEBQ7DwyIrbS6K2bgFGmCrAxB/YKERCG8+1K8v
SnZnxhPNvt+TDKyqMnxVDMgAOAOgBsR3PtnxKx1Be+3tGoE2fNRBzTqXbE4r+91G
3wJKVM6dLZ+ggH0ETSbGhsODRdlf1yfkRiFTZuP4z3+qkJEisYZOmHtz0N7XEHip
ajQpBIhUnJJlXuFk5VUI+6p0Z+HVEtJIpuTRT5ww5JZJvMfhNyQY9u02xgQYnVJz
N8pzkKMW6ZImuWwVizqvZx4eKtHtXhnU6pvqgh6GR7jv+XLk56MEAmpL8Xk/ImhB
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:24 2026 by rpki-client