Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
File: YD_oCeL10u60HZRqO69E3oR4Aa8.cer (raw, json)
Hash identifier: fzmkZL2Z7DrxQOkm0Cz83GFItyLJQWmk4z8tK2YgdoM=
Subject key identifier: 60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11B9E579E3A6AB0C3AD5786DD5CF98DD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:05:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.193.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:9e:57:9e:3a:6a:b0:c3:ad:57:86:dd:5c:f9:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 13:05:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=603fe809e2f5d2eeb41d946a3baf44de847801af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:33:25:18:64:37:70:11:7c:72:2d:6f:e8:
32:f8:37:d4:22:a4:e4:f0:1f:f2:51:36:16:7c:34:
a5:4d:24:b6:7a:e3:9e:6b:b3:6a:1c:87:7b:77:bf:
fe:12:bc:9f:0a:2c:5a:2c:50:60:fb:f5:3e:2f:e0:
b2:60:40:b7:96:21:55:96:68:03:64:38:48:fa:58:
32:47:2e:43:89:c1:ab:9e:60:d0:2b:a3:bd:a4:08:
37:17:04:d8:8f:bb:f2:ef:11:6e:7e:f5:fd:31:35:
84:2c:55:63:da:30:49:e6:69:45:34:c0:ee:b0:55:
07:2c:b4:18:83:8f:27:9b:de:7a:13:75:6b:c4:2e:
e1:e4:68:69:41:ed:82:f2:9d:49:75:40:32:c3:34:
11:e7:b8:49:ab:79:c7:f8:d5:19:c7:0b:bb:2f:cd:
2f:df:52:cd:cb:49:d1:3b:e6:15:8e:f0:66:54:be:
e9:ff:f1:11:41:bb:59:4e:b8:01:a4:84:74:d3:7a:
a7:b0:04:74:2e:19:b8:4c:5d:6d:94:1b:9c:f6:23:
36:6f:07:27:1b:10:1e:a8:d5:09:66:d0:63:92:fa:
4e:08:49:3f:a1:81:56:e0:0b:02:3b:aa:93:6b:cf:
10:8e:b8:a1:2c:df:b2:9f:ea:a1:2c:68:bf:56:92:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:0c:29:4a:93:8e:f9:2d:32:c9:92:17:89:83:97:a9:1e:c5:
10:60:1f:c9:ff:a8:5e:e0:d1:04:42:95:52:5c:aa:07:20:6a:
88:41:ca:f3:cc:69:0b:b3:df:59:6e:c5:25:a7:87:d7:f2:21:
b9:63:2b:54:1a:07:5f:e5:76:2d:4c:5a:b6:8d:83:da:ba:6a:
48:f5:3b:ca:ba:bf:a3:05:7b:eb:b9:17:09:f5:82:ae:00:a5:
3b:ba:d7:59:7b:c5:99:ef:8a:dd:25:95:f8:93:37:00:41:73:
39:2c:68:1e:15:7d:71:d5:25:46:32:66:58:56:65:46:67:03:
1a:d0:78:c9:13:45:68:7c:d3:01:68:c4:43:99:06:2f:aa:6b:
f1:4f:1b:c8:e5:65:41:4f:e1:c4:79:2c:07:a2:e2:e5:7c:8d:
11:44:0f:3d:a5:60:b5:2e:95:69:c6:c4:b7:a3:ad:ce:28:cd:
87:ab:24:73:0c:17:3a:e8:1a:6c:a2:17:a2:29:70:28:3f:01:
83:09:f2:77:c5:f4:cc:13:b3:e9:b4:96:3f:ba:b9:45:2d:3c:
97:c7:9b:06:d7:9f:e6:18:f3:cf:a3:52:e0:3a:90:14:4e:81:
a2:eb:42:72:df:2d:4e:eb:75:0c:39:ff:37:c6:0f:d6:8e:d7:
ff:14:68:ae
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaEbnleeOmqww61Xht1c+Y3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTMwNTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDNmZTgwOWUyZjVkMmVlYjQxZDk0NmEzYmFmNDRkZTg0NzgwMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjozJRhkN3ARfHItb+gy+DfUIqTk
8B/yUTYWfDSlTSS2euOea7NqHId7d7/+EryfCixaLFBg+/U+L+CyYEC3liFVlmgD
ZDhI+lgyRy5DicGrnmDQK6O9pAg3FwTYj7vy7xFufvX9MTWELFVj2jBJ5mlFNMDu
sFUHLLQYg48nm956E3VrxC7h5GhpQe2C8p1JdUAywzQR57hJq3nH+NUZxwu7L80v
31LNy0nRO+YVjvBmVL7p//ERQbtZTrgBpIR003qnsAR0Lhm4TF1tlBuc9iM2bwcn
GxAeqNUJZtBjkvpOCEk/oYFW4AsCO6qTa88QjrihLN+yn+qhLGi/VpKrWwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGA/6Ani9dLutB2UajuvRN6EeAGvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2Q1NzQ3
My01YjAxLTRmNmQtODk3MS1hYjM2ZjQyMTkwYmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZDU3NDcz
LTViMDEtNGY2ZC04OTcxLWFiMzZmNDIxOTBiZS8xL1lEX29DZUwxMHU2MEhaUnFP
NjlFM29SNEFhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW8GEMA0GCSqGSIb3DQEBCwUAA4IBAQBtDClK
k475LTLJkheJg5epHsUQYB/J/6he4NEEQpVSXKoHIGqIQcrzzGkLs99ZbsUlp4fX
8iG5YytUGgdf5XYtTFq2jYPaumpI9TvKur+jBXvruRcJ9YKuAKU7utdZe8WZ74rd
JZX4kzcAQXM5LGgeFX1x1SVGMmZYVmVGZwMa0HjJE0VofNMBaMRDmQYvqmvxTxvI
5WVBT+HEeSwHouLlfI0RRA89pWC1LpVpxsS3o63OKM2HqyRzDBc66BpsoheiKXAo
PwGDCfJ3xfTME7PptJY/urlFLTyXx5sG15/mGPPPo1LgOpAUToGi60Jy3y1O63UM
Of83xg/Wjtf/FGiu
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:52 2026 by rpki-client