Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYBh2AAMuD07iWfmb7ikwn6RImI.cer
File: lYBh2AAMuD07iWfmb7ikwn6RImI.cer (raw, json)
Hash identifier: f3rhqTbBC53+wmp7rBoxLsvbP2wjsrVW3SyL0KAiZJs=
Subject key identifier: 95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDC8252817818812B102DD89C7155B172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 10:47:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203760
IP: 185.124.184.0/22
IP: 2a06:b480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:82:52:81:78:18:81:2b:10:2d:d8:9c:71:55:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 10:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=958061d8000cb83d3b8967e66fb8a4c27e912262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:82:47:d1:90:43:8d:49:4c:e3:e8:c2:d8:
36:49:46:20:db:e9:d2:dc:34:c0:aa:0a:65:16:ef:
10:8b:05:94:c5:69:5c:88:b4:55:60:9d:a5:37:8a:
0f:7a:78:89:2f:ff:8f:9a:9a:cc:84:cd:54:98:f3:
d3:68:b9:8d:c2:1b:1e:6d:c6:23:83:66:a1:3d:81:
6f:f8:bf:be:6c:9b:1a:73:1d:0d:ac:f7:ce:82:82:
2d:2f:5b:47:e4:58:71:5e:3a:c4:26:3a:f5:7c:07:
16:af:46:2b:5e:be:b8:80:41:9b:85:d4:24:50:8d:
82:c5:60:35:5c:8d:fb:1d:b3:59:e0:2f:dc:f6:65:
c8:c5:cf:bc:75:75:5d:66:04:85:0f:f3:61:4e:50:
a4:bc:a8:7f:4e:9f:2a:7b:17:5a:53:76:19:5f:7b:
64:13:3f:80:bc:e5:d2:b0:ec:4b:aa:6b:4f:73:17:
11:0b:19:ec:93:bf:e3:3a:bb:57:62:09:20:ed:dc:
5c:d0:bf:a1:10:de:14:87:e8:49:4e:b6:ec:e9:01:
89:7a:bf:a0:e5:f3:1d:03:9c:a1:81:16:50:68:b8:
1d:39:a1:70:42:18:ad:94:2b:7d:34:5a:b1:c7:2d:
4e:ee:47:ec:0d:80:3d:58:4b:68:03:5f:a6:75:e6:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:80:61:D8:00:0C:B8:3D:3B:89:67:E6:6F:B8:A4:C2:7E:91:22:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/122f6a-c132-49aa-b496-b92ce21ca409/1/lYBh2AAMuD07iWfmb7ikwn6RImI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.184.0/22
IPv6:
2a06:b480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203760
Signature Algorithm: sha256WithRSAEncryption
3f:36:02:2c:55:db:8c:33:76:75:80:d0:f1:aa:08:08:59:69:
9a:71:d2:f0:a4:74:a4:78:e3:8f:6c:b1:12:20:7f:a9:cb:ee:
11:72:5d:ff:7c:91:22:ad:ec:b4:1e:f8:ce:0b:cf:89:d0:95:
69:5f:9d:da:99:0a:b4:9b:54:9f:8b:88:88:68:ec:da:94:f2:
9b:2c:73:c8:bd:97:4e:23:b2:c5:db:78:50:9b:15:14:63:ed:
78:a3:b9:9c:76:11:44:b5:90:77:40:ef:02:3e:06:a1:a5:fd:
14:39:03:c7:67:26:02:bb:51:36:11:18:e1:a4:66:34:28:51:
f2:3a:a8:ee:09:11:e4:a4:ea:51:81:6a:1b:7e:b9:6b:ac:12:
c1:0e:0f:0b:9b:2e:20:bc:ab:97:09:80:60:a9:36:1a:dd:1c:
d6:28:c9:d1:be:39:a7:fb:b9:2a:41:b5:a1:39:8b:c0:ed:a8:
6f:d8:44:c5:3c:2a:34:d0:9b:da:63:87:07:36:87:ea:b3:e7:
5b:08:0e:2d:a0:59:b8:4a:75:de:e7:28:d7:3d:29:83:a2:33:
11:ab:91:e8:22:d5:0e:a5:27:c4:8e:f9:f8:d6:25:df:23:8d:
a0:4a:54:67:77:8d:31:03:a7:8d:65:5e:96:f3:7e:2d:76:eb:
af:76:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:52 2026 by rpki-client