Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer (raw, json)
Hash identifier: brdfKkgiuavbETJVrIN8icv2Up6aXAV20Zh82XQ4T8M=
Subject key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F5FA49DE7B9A3C91E921381599C6BD4E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jul 2026 08:00:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35337
IP: 91.216.224.0/24
IP: 194.56.211.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:a4:9d:e7:b9:a3:c9:1e:92:13:81:59:9c:6b:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 08:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:98:fa:10:1a:ce:ea:fb:00:b7:48:11:33:
e7:d9:86:f1:65:5e:3f:fd:c3:b2:0a:95:70:c2:3a:
0c:e9:a2:fd:ab:e8:7c:eb:42:6e:bb:fa:d6:09:02:
e0:32:ae:1d:d9:e0:ae:b7:ba:85:1d:35:fd:0c:99:
ae:28:61:9d:07:94:e7:b0:c5:14:f6:56:19:4b:f5:
3d:80:35:70:c1:bd:3d:83:17:cf:91:a8:ac:6c:40:
7e:07:35:a3:f4:14:25:c9:5d:e3:e5:ed:5b:f4:7e:
da:a0:d1:75:d0:d5:d8:95:b0:14:dc:a0:cf:2b:82:
44:58:51:75:a5:bf:e2:93:e0:6b:34:2d:4f:09:9b:
80:7c:33:f4:a4:17:68:bb:0b:be:79:f7:bf:98:49:
ab:f7:69:04:92:8e:5b:a3:c4:d1:db:c6:4a:30:a2:
79:ce:a6:a2:38:8a:e2:29:aa:90:73:94:67:e7:8e:
5e:10:9b:ce:39:a8:a1:a0:f3:46:2d:ac:0d:36:6d:
72:b7:f0:17:22:21:af:de:8b:d3:89:fa:11:af:ca:
ee:dc:f7:b9:1b:50:ac:b5:6e:4d:b0:2d:a6:2e:06:
d4:8b:78:00:c1:22:12:3f:f7:c4:8e:a4:48:45:f0:
39:42:66:c9:a3:81:70:83:42:d6:e5:d2:f1:26:00:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.224.0/24
194.56.211.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35337
Signature Algorithm: sha256WithRSAEncryption
54:6c:af:43:87:6e:d8:35:f4:1b:46:f6:13:73:3e:e9:1e:47:
15:94:9c:30:e5:82:ff:58:d0:1e:e2:93:75:1c:64:22:67:a9:
98:4a:af:36:7d:bb:7f:05:f4:6e:0f:d9:23:04:b3:d4:39:ba:
75:ce:2c:64:c8:4b:3a:60:3c:67:9e:d6:82:37:36:73:9f:e5:
5a:f5:00:cd:73:53:58:85:ed:f1:82:d5:d1:57:1e:5e:b8:09:
da:c3:a3:87:22:63:d9:55:3d:da:e7:9e:a8:43:d2:87:9a:ed:
65:ee:07:31:7c:d1:1c:8f:2d:41:24:f5:e3:34:8c:a1:b9:54:
48:93:8c:79:fc:e2:ba:b8:a0:46:4c:a1:a9:50:17:a2:e5:6a:
6b:da:9a:79:73:4c:db:f6:77:3e:7a:d2:ec:43:0a:f4:72:0e:
0a:52:6b:39:c4:c7:38:ed:54:2a:0e:cb:04:3b:b6:2d:20:9c:
34:f2:a4:64:6b:29:b9:e3:5d:12:99:9a:d6:8a:ec:33:48:57:
6d:7d:b9:06:2b:e8:5f:03:66:6e:37:2c:9e:14:73:d1:19:12:
08:90:56:d6:55:62:ca:2c:86:7c:32:87:e2:b1:6c:ad:d5:a5:
c6:8f:02:9d:95:73:f5:c4:23:d2:c3:e1:69:4f:ef:4e:f2:b5:
e6:78:f7:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:35:58 2026 by rpki-client