Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer (raw, json)
Hash identifier: 0p2U21FcRpCuurC+QslwwK7e7aPoK3oYrbb7ATide+8=
Subject key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDD6D5A8202A854CD40F45AE53AA5E30B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 15:04:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202157
IP: 95.111.133.0/24
IP: 171.22.145.0/24
IP: 185.171.160.0/24
IP: 185.243.129.0/24
IP: 195.149.74.0/24
IP: 2a01:f180::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:6d:5a:82:02:a8:54:cd:40:f4:5a:e5:3a:a5:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 15:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:56:ab:78:d6:84:c2:19:1d:46:9b:d3:cb:
ec:45:42:97:ca:b5:a2:12:d3:d5:f2:ee:0f:58:13:
7d:0f:5e:8b:90:81:9a:95:78:bf:b2:af:9e:c0:1a:
c9:73:07:12:be:22:19:9a:35:eb:de:fb:16:b0:67:
5d:95:d3:30:3f:c8:ed:1a:36:29:77:72:28:b9:2b:
60:7e:b3:0f:32:19:d6:49:a5:b8:3b:12:97:b6:59:
a7:24:74:fb:81:c0:1e:b8:eb:d3:63:ce:e1:ac:06:
ad:8b:3b:25:17:5a:51:7e:29:03:04:58:8e:9c:46:
4c:b3:4c:24:d6:2c:93:e9:4d:4b:cb:47:1d:23:8a:
71:c1:03:da:1e:6e:0e:eb:c9:eb:86:9e:f9:c5:2b:
88:97:e4:c3:b0:55:9c:ac:ea:82:5e:c2:72:20:51:
1b:c8:8a:6f:70:8c:5c:f3:44:70:f4:d0:7e:9d:72:
22:94:c9:40:79:2a:8a:ff:c2:ba:89:d8:c6:a3:a6:
bd:6e:70:1b:6f:3c:63:87:80:ca:3b:d1:07:3b:6c:
91:a1:72:45:85:9a:cb:22:d7:99:97:93:35:5a:a7:
09:6a:d4:cd:09:8b:c1:05:b3:fc:ad:52:8b:ad:f1:
0a:b5:d0:95:d1:94:6a:91:45:38:f1:ca:67:3e:97:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.133.0/24
171.22.145.0/24
185.171.160.0/24
185.243.129.0/24
195.149.74.0/24
IPv6:
2a01:f180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202157
Signature Algorithm: sha256WithRSAEncryption
a0:b8:96:e6:d3:65:0d:2c:79:88:26:ad:00:f3:49:68:78:f3:
4f:11:02:20:bd:50:55:3a:62:be:ee:d8:26:9a:ee:82:33:39:
f3:b6:c1:39:f7:ad:f9:19:79:04:55:c3:07:9c:cd:8f:ef:7d:
48:ad:83:e3:0a:e9:0e:eb:a6:1e:c1:f3:24:08:13:5f:f9:84:
d3:35:b0:58:44:64:c3:78:24:a3:10:fa:eb:f8:c4:bd:43:7d:
2e:01:f8:d5:90:84:08:4f:28:96:aa:b0:1c:d4:40:b5:86:2b:
c8:04:03:d6:05:ea:82:78:f1:82:a3:e8:ab:ef:e4:a6:28:3c:
57:5e:31:ff:3b:66:25:3a:60:06:f1:94:16:5b:22:8a:ab:fa:
9a:99:35:d3:dc:4e:61:ee:f4:60:27:28:cc:02:56:3e:b4:36:
39:82:ba:32:45:d5:82:3d:45:9a:89:32:37:4f:86:c6:02:94:
b2:4b:74:45:9b:a3:20:52:ac:28:f5:5f:7b:df:f8:9f:18:17:
27:f8:eb:0b:09:2e:32:79:02:3b:23:db:d3:e2:8a:91:dd:b1:
d6:ff:28:0d:32:38:e9:72:c8:3d:1b:1f:5f:ee:46:f2:b4:50:
8c:08:a3:55:21:12:60:38:91:8c:37:9a:a3:9a:20:12:e9:10:
ee:72:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:14:50 2026 by rpki-client