Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
File: U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer (raw, json)
Hash identifier: 3scgq6XfE8Tn/g93kmczRkEiplYRErIEzsi8UCt4R1I=
Subject key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA4BCE1F269B1844A0670E1D2D9C47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200654
IP: 185.100.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:4b:ce:1f:26:9b:18:44:a0:67:0e:1d:2d:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:b3:22:79:b0:47:ee:b4:a0:e2:76:1f:c5:
b0:66:0a:23:b5:de:c6:35:1e:2b:92:f4:16:98:c3:
ef:60:da:c9:db:de:37:af:18:f3:45:61:ea:bb:32:
06:bb:cf:86:4e:99:2d:6d:0b:59:aa:90:50:96:43:
68:95:a6:a0:78:1c:e4:62:20:27:56:5c:96:10:18:
ad:b8:24:db:a7:53:62:ee:5f:c5:a5:c8:05:48:4c:
35:be:ac:33:64:cf:fb:d2:d6:8d:d9:09:27:24:0f:
cd:99:b8:33:02:7d:ad:23:33:fb:9e:b1:01:d7:27:
a1:7d:13:a2:d7:b0:ef:46:94:5c:16:d2:f9:74:2a:
0d:f5:e2:8c:65:e9:9d:65:9e:0c:54:3e:9d:15:de:
ff:93:cb:63:53:a8:86:f3:e7:32:b7:99:95:62:e5:
db:64:72:18:8d:f3:3e:7c:db:b0:63:5b:84:6f:4e:
ee:3c:5c:6e:52:aa:24:22:9c:cc:02:f0:29:47:7a:
5a:f0:87:c8:17:5b:8a:0f:28:92:57:02:93:01:2e:
2e:a6:9e:73:9b:43:2b:b2:2e:b9:71:d4:12:5d:c4:
fa:6c:bb:b5:c3:17:75:5a:a1:9c:6e:db:0a:e0:5a:
49:57:39:93:eb:a3:9e:86:e9:7a:01:47:57:e7:ee:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200654
Signature Algorithm: sha256WithRSAEncryption
af:12:50:7c:f5:b9:54:89:b1:ab:c6:fe:3b:0e:1a:d3:57:ad:
9c:1a:7e:56:7e:56:c2:be:72:f1:c2:7e:21:ab:48:e6:b4:3e:
6a:0a:59:71:dd:41:3d:b2:a7:8d:8c:5b:63:41:cf:00:b7:03:
f7:76:2f:09:2e:d9:5e:2c:11:c7:f9:f7:56:87:19:89:a2:00:
e6:a5:bc:c3:89:34:95:f8:f2:7f:a4:cc:26:29:5a:33:6c:a5:
94:fb:75:d8:3e:4c:6d:0b:73:79:a8:21:de:a1:71:21:80:5e:
85:bc:65:c2:23:c3:50:e9:66:75:94:3e:28:5b:02:39:53:b5:
cb:7d:d0:88:d3:98:3f:25:74:8c:f7:c8:08:65:b0:67:21:bf:
fc:78:6d:a1:22:88:a3:44:46:34:f9:2b:95:10:85:17:fa:0e:
f3:5e:1c:6c:99:ec:64:13:63:b3:58:7e:5d:d9:c3:d7:62:92:
ca:c4:7d:44:50:e9:6a:81:d1:a7:e1:44:2d:94:e0:d1:29:79:
52:80:56:4d:66:3b:54:ec:8b:a4:9d:3d:49:79:27:2e:47:db:
d9:9d:11:73:9f:4b:ff:ae:db:ed:67:1e:da:17:55:96:bc:72:
39:62:c6:42:1c:1a:ee:cf:3e:f6:2d:0f:29:14:4e:02:66:6e:
f0:d7:4c:81
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ8Y+kvOHyabGESgZw4dLZxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzZjOTg1MmE5ZjQ0Y2E5Zjg0N2JiYTFiOGM2ZDBiMTVjYzUyNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd+zInmwR+60oOJ2H8WwZgojtd7G
NR4rkvQWmMPvYNrJ2943rxjzRWHquzIGu8+GTpktbQtZqpBQlkNolaageBzkYiAn
VlyWEBituCTbp1Ni7l/FpcgFSEw1vqwzZM/70taN2QknJA/NmbgzAn2tIzP7nrEB
1yehfROi17DvRpRcFtL5dCoN9eKMZemdZZ4MVD6dFd7/k8tjU6iG8+cyt5mVYuXb
ZHIYjfM+fNuwY1uEb07uPFxuUqokIpzMAvApR3pa8IfIF1uKDyiSVwKTAS4upp5z
m0Mrsi65cdQSXcT6bLu1wxd1WqGcbtsK4FpJVzmT66Oehul6AUdX5+4BEQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFNsmFKp9Eyp+Ee7objG0LFcxSZiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2UyZWU1
MS0xNTIzLTQzNmUtYWM3NS1lZjZiZDI2YTAzMDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTJlZTUx
LTE1MjMtNDM2ZS1hYzc1LWVmNmJkMjZhMDMwNS8xL1UyeVlVcW4wVEtuNFI3dWh1
TWJRc1Z6RkptSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuWQUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMPzjANBgkqhkiG9w0BAQsFAAOCAQEArxJQfPW5VImxq8b+Ow4a01etnBp+Vn5W
wr5y8cJ+IatI5rQ+agpZcd1BPbKnjYxbY0HPALcD93YvCS7ZXiwRx/n3VocZiaIA
5qW8w4k0lfjyf6TMJilaM2yllPt12D5MbQtzeagh3qFxIYBehbxlwiPDUOlmdZQ+
KFsCOVO1y33QiNOYPyV0jPfICGWwZyG//HhtoSKIo0RGNPkrlRCFF/oO814cbJns
ZBNjs1h+XdnD12KSysR9RFDpaoHRp+FELZTg0Sl5UoBWTWY7VOyLpJ09SXknLkfb
2Z0Rc59L/67b7Wce2hdVlrxyOWLGQhwa7s8+9i0PKRROAmZu8NdMgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:20 2026 by rpki-client