Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
File: U91LykfekXr0_xEFE5R_gkLzsDY.cer (raw, json)
Hash identifier: PfElrgogqw6SBEbkNXIE5N5UDicVuJFfI2aT/icCAvk=
Subject key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EF2FA8DA65BD212D6046F5FB9EB1A2AAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jun 2026 05:36:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.28.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:fa:8d:a6:5b:d2:12:d6:04:6f:5f:b9:eb:1a:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 05:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53dd4bca47de917af4ff110513947f8242f3b036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:00:9c:ea:ab:be:6d:44:17:9b:e7:c5:78:
85:ce:6e:45:3a:17:95:d4:f5:d0:73:db:6f:79:15:
ad:b3:b3:76:9d:fd:fb:26:4f:af:53:8b:ad:1a:5c:
60:e2:7d:ad:fe:e9:a6:54:e3:8a:f3:ea:97:5a:74:
99:e1:99:37:6c:70:5a:31:bb:85:4b:07:63:62:34:
7c:2b:cf:d3:20:38:99:a6:c3:5b:f8:b9:a1:61:d4:
fe:6f:51:5f:4c:96:02:8f:0e:c9:c1:16:dc:3b:12:
8e:29:a3:e0:a0:94:c5:b6:80:77:52:45:95:67:be:
5e:0c:2c:ac:ac:d9:7d:85:f7:b6:44:4f:e2:bd:81:
59:5d:8c:ce:a3:b2:d4:dd:53:1f:ef:16:e6:33:02:
fb:60:59:86:15:ea:32:c7:58:82:23:7d:cf:9e:f1:
d4:83:f3:63:8f:83:b0:95:3d:b2:ea:a3:df:ed:e1:
a9:03:42:71:7d:ff:09:fc:12:a6:c8:d7:21:d6:28:
84:26:de:b1:d4:df:20:4c:b6:e4:e1:b3:73:39:0e:
6b:dc:dd:33:79:30:4a:73:18:a8:a0:38:4a:cf:1e:
af:5d:ee:f7:1c:53:92:0c:75:f9:f6:8c:78:bd:86:
cd:57:33:28:69:ba:b0:d5:2f:94:9e:a0:49:4c:b6:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.28.171.0/24
Signature Algorithm: sha256WithRSAEncryption
03:27:66:9d:90:21:5d:bd:31:21:62:28:f2:06:82:62:ad:56:
f7:19:a8:89:4d:e1:0f:85:ef:80:fc:76:52:ba:16:52:71:06:
07:26:a6:20:97:73:7a:12:4d:bf:28:4f:fb:6b:9c:ef:10:87:
ff:25:f3:f8:26:f4:62:0e:49:c1:05:19:9c:e7:2d:f0:99:9e:
25:57:2b:20:ff:98:26:d7:4d:b0:2a:09:57:c9:52:b1:83:17:
a5:72:22:ea:ec:12:81:d3:1f:10:a0:da:85:d4:fa:d6:81:a5:
11:0e:8e:f7:dd:71:05:9e:24:5d:45:cc:f9:7f:29:48:eb:6f:
fc:27:a8:aa:d9:a9:63:ff:1f:1b:0b:21:fe:a0:dd:a4:bf:c0:
80:6b:ee:25:96:07:ab:01:92:57:8e:b2:8e:61:e3:84:f7:2c:
6a:bb:3c:dd:06:13:f0:a1:1c:f4:0a:10:2c:97:8b:05:d0:5f:
50:45:18:01:0f:03:e8:bc:a0:ce:bb:5f:09:2a:d3:b7:08:19:
be:d8:6c:87:f3:6e:cb:b1:2d:d6:f1:4e:b0:12:35:b8:13:1b:
1e:5e:9e:0d:1d:22:61:c0:d7:71:cb:78:34:70:3f:f2:48:1e:
9c:99:2d:63:c9:53:b1:c5:11:08:1f:81:4f:84:d1:c3:bc:cf:
17:3f:d8:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ7y+o2mW9IS1gRvX7nrGiqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjIzMDUzNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2RkNGJjYTQ3ZGU5MTdhZjRmZjExMDUxMzk0N2Y4MjQyZjNiMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7oAnOqrvm1EF5vnxXiFzm5FOheV
1PXQc9tveRWts7N2nf37Jk+vU4utGlxg4n2t/ummVOOK8+qXWnSZ4Zk3bHBaMbuF
SwdjYjR8K8/TIDiZpsNb+LmhYdT+b1FfTJYCjw7JwRbcOxKOKaPgoJTFtoB3UkWV
Z75eDCysrNl9hfe2RE/ivYFZXYzOo7LU3VMf7xbmMwL7YFmGFeoyx1iCI33PnvHU
g/Njj4OwlT2y6qPf7eGpA0Jxff8J/BKmyNch1iiEJt6x1N8gTLbk4bNzOQ5r3N0z
eTBKcxiooDhKzx6vXe73HFOSDHX59ox4vYbNVzMoabqw1S+UnqBJTLZ/mwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFPdS8pH3pF69P8RBROUf4JC87A2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzcxZWUw
OC02NjViLTQ1OGEtODcyMS1jNjFmNWU4MjUxZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNzFlZTA4
LTY2NWItNDU4YS04NzIxLWM2MWY1ZTgyNTFlYi8xL1U5MUx5a2Zla1hyMF94RUZF
NVJfZ2tMenNEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAyxyrMA0GCSqGSIb3DQEBCwUAA4IBAQADJ2ad
kCFdvTEhYijyBoJirVb3GaiJTeEPhe+A/HZSuhZScQYHJqYgl3N6Ek2/KE/7a5zv
EIf/JfP4JvRiDknBBRmc5y3wmZ4lVysg/5gm102wKglXyVKxgxelciLq7BKB0x8Q
oNqF1PrWgaURDo733XEFniRdRcz5fylI62/8J6iq2alj/x8bCyH+oN2kv8CAa+4l
lgerAZJXjrKOYeOE9yxquzzdBhPwoRz0ChAsl4sF0F9QRRgBDwPovKDOu18JKtO3
CBm+2GyH827LsS3W8U6wEjW4ExseXp4NHSJhwNdxy3g0cD/ySB6cmS1jyVOxxREI
H4FPhNHDvM8XP9gP
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:06 2026 by rpki-client