Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
File: lYs6eEkk73mV168fvRdniKbCt1Q.cer (raw, json)
Hash identifier: xOqDQVhSUM5VgZg07HnoS4UIf7utMRHs0qJ9Tmwiops=
Subject key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F96DA4DFBE082318C4503B0E966631
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 30758
AS: 50540
AS: 59887
AS: 62077
AS: 62095
IP: 185.48.24.0/22
IP: 2a04:b140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:6d:a4:df:be:08:23:18:c4:50:3b:0e:96:66:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:ab:b0:47:0f:10:a9:0d:4d:79:d7:20:3a:
12:f2:2a:19:d8:c4:c7:52:74:c1:dc:c2:4f:b6:57:
fd:6f:da:43:f6:ef:cd:cd:f8:ef:72:bc:39:e2:0b:
53:d2:ee:05:a9:19:33:48:2d:61:3d:84:31:7e:d2:
0c:81:00:e1:04:ed:17:f6:ee:2e:e6:f8:67:b7:d5:
8e:6c:2d:93:c8:c3:d0:9d:69:38:09:6f:c1:09:2e:
ca:89:a4:0c:ff:46:44:4a:ca:74:5a:72:9e:2f:2d:
4f:b4:51:d1:0a:77:b6:d9:b3:94:52:8e:bc:ad:98:
53:ce:86:ec:cc:e0:8d:08:b5:bc:cc:3f:b5:c4:cc:
6f:eb:f9:ad:b3:89:8f:3f:b7:7a:5c:32:0f:ff:e3:
bb:a3:e7:29:0c:b0:b9:28:49:76:c9:84:4c:b7:9f:
ad:fd:f5:cc:0c:a7:12:cd:72:5b:ab:fc:69:49:9d:
0e:45:a4:dc:40:92:31:99:df:83:23:1e:de:fc:43:
14:e2:79:ac:1d:c6:58:f0:80:22:23:5c:cb:4f:fd:
a5:09:22:e1:50:4d:f4:d4:da:b6:46:b9:0b:0c:c7:
24:b8:ef:fb:e9:ab:58:5b:c8:88:3e:44:a6:42:21:
c9:29:ce:b4:04:63:6c:86:17:4b:e5:f1:bf:91:cd:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/22
IPv6:
2a04:b140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30758
50540
59887
62077
62095
Signature Algorithm: sha256WithRSAEncryption
28:07:c6:a6:91:cb:63:73:7b:75:60:97:aa:6c:ed:41:1d:91:
1f:ac:3e:38:1a:da:1e:d0:ba:07:4a:1c:d4:d3:e0:14:40:8b:
c2:85:9d:e2:53:a5:ce:da:52:ef:d2:31:4d:82:dc:c1:1d:03:
94:f9:b6:f6:29:5f:00:7d:8d:fb:4a:8f:e9:b4:5d:c9:c0:b4:
6d:48:29:07:c2:f3:d6:a7:25:2b:b3:c9:c7:2a:b5:52:f5:e8:
24:3d:3f:14:f0:e9:9b:8f:ad:6c:a5:96:a0:03:a3:38:33:c6:
a1:74:21:fa:4f:4a:9a:af:e7:4f:bd:48:6a:a5:d2:1e:d8:d2:
bc:72:4b:bc:7f:10:4a:a3:cc:61:60:92:00:4c:4c:b4:6d:6b:
5a:59:95:7b:72:e5:46:c3:5b:80:d7:8a:91:08:13:1b:60:8f:
d0:bd:76:23:68:b6:dc:61:a0:1d:dd:de:51:be:f3:50:8d:bf:
bc:0f:16:1f:22:46:26:d4:ac:4c:92:63:60:13:93:65:c2:25:
2f:84:9f:af:83:02:f6:f1:f0:a7:41:71:30:dc:3c:cc:03:86:
55:63:2c:89:28:d9:7d:cd:2c:8d:4e:a9:fb:e4:b1:1e:5e:63:
91:0e:a7:ff:b4:76:6b:f5:d8:d9:98:21:62:53:bc:73:59:8e:
d3:7a:6c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:23 2026 by rpki-client