Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
File: YOPZchUzu192hceOyY34FPrV1nw.cer (raw, json)
Hash identifier: 5FXBUzUIagWRZLUSm0vuDHvCzQEb3bX/3tf8CD5BEO8=
Subject key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DBA8546FD8C71270499BFFB664FBB4EA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Apr 2026 13:26:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203357
IP: 185.135.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:85:46:fd:8c:71:27:04:99:bf:fb:66:4f:bb:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 13:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:08:49:2e:5f:94:87:d8:00:92:8c:88:40:
c3:08:22:53:c7:f3:8e:f8:56:ef:b2:07:80:dc:b6:
dc:14:3b:75:53:a4:e2:1d:74:03:bf:19:0d:bc:3e:
59:c4:ac:10:ef:e2:a0:59:90:0f:0b:ba:64:40:07:
04:d1:b1:d0:1e:1b:ef:61:7c:40:5d:89:02:7f:4b:
78:21:5d:71:11:be:81:a9:d1:99:03:5a:3e:2f:06:
e0:18:81:98:4d:09:f6:9a:9d:28:5a:8b:9a:a3:96:
4e:e1:e1:56:81:88:ea:d8:c2:01:17:91:8d:54:f3:
dc:d1:11:31:56:01:62:fd:91:88:17:e6:f8:df:56:
81:2b:6a:9b:b5:43:29:75:1c:83:08:fa:4f:98:ed:
8a:0a:6a:9a:14:ed:43:4e:e8:bb:50:89:01:91:08:
fe:4c:95:d0:cd:a6:ab:37:8e:38:ac:e3:88:65:ec:
3b:db:3c:73:d7:75:f1:b0:84:fb:47:b1:55:81:ca:
3b:1e:4b:49:ca:40:84:23:50:04:d1:99:31:86:0a:
51:5f:b2:10:40:36:9f:a7:bc:d7:ae:78:e9:2d:e9:
ef:51:be:53:e7:e2:a0:56:39:e1:a1:33:9c:ac:28:
79:6b:e4:87:7b:21:5a:1c:4a:ea:34:bf:11:5b:36:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203357
Signature Algorithm: sha256WithRSAEncryption
a2:56:e6:da:7e:ff:c3:0c:e0:b8:09:48:37:7c:b1:18:4c:7e:
bb:4e:0a:82:8b:91:dd:e1:df:e3:4c:11:47:86:e8:26:1c:68:
78:a1:0e:4b:29:0c:09:5c:ad:ed:0a:a1:2f:86:03:b9:ed:be:
3d:76:aa:32:8a:db:48:1a:38:9d:be:75:60:45:c1:1f:e7:0a:
fe:23:ae:82:f8:4e:56:f9:ae:5c:a7:60:7e:bb:b4:17:f1:cb:
8d:0a:23:36:19:08:7b:6a:31:83:8c:18:d6:d7:b3:b1:a4:1f:
7b:2b:43:af:66:a6:47:10:98:15:13:3c:f6:16:66:c7:70:29:
5e:1e:bb:2d:81:4c:4d:dd:b5:d0:1e:00:ad:9f:6b:79:fc:af:
5f:3d:86:53:dc:01:dc:be:52:bb:31:e1:d0:57:0c:88:97:21:
9f:8f:fe:53:ad:44:4f:f3:3a:91:42:76:61:ca:4c:78:1f:bb:
b6:57:a7:6f:28:98:45:6b:f7:b0:05:16:14:cd:fc:5d:d1:f3:
9c:ae:ea:0b:e5:98:26:55:67:2e:d6:64:c9:c6:d9:ec:40:84:
af:21:81:48:f5:99:46:6c:94:6a:75:53:aa:64:e0:97:6f:bc:
e5:66:93:d4:7c:e3:3d:6c:4b:e5:ad:da:86:0d:83:6f:be:7d:
37:26:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:25 2026 by rpki-client