Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer (raw, json)
Hash identifier: eMRrT1quilu69fhf1v2vYvZX8O31VYndLPOv7fpjvOo=
Subject key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DF350737D5D04B797B6C85952DC6A726B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 May 2026 14:07:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60527
IP: 185.30.20.0/22
IP: 205.209.28.0/24
IP: 2a04:4840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:50:73:7d:5d:04:b7:97:b6:c8:59:52:dc:6a:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 4 14:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:42:70:50:8c:1d:95:7d:a1:df:ac:60:2d:
cf:6f:cf:cc:19:5e:e2:24:ee:8d:c7:c6:4a:08:0c:
92:42:0e:c5:8c:c5:88:b8:26:ed:bf:40:32:14:87:
e8:29:1a:f6:a8:fc:81:73:4a:68:b3:43:c4:40:63:
87:36:7f:12:32:cd:2e:4c:97:14:2b:32:73:de:bf:
b7:62:42:ca:33:3a:64:62:cc:93:6b:86:1e:fb:c2:
0b:36:a8:87:8e:1e:39:d5:d0:c1:cb:50:ce:0e:7d:
65:2f:fd:7a:60:1a:96:d0:55:09:6e:05:53:7d:62:
2b:91:a5:c9:26:ce:8e:91:14:5b:7a:dc:04:ce:8a:
14:88:b0:92:60:39:70:3f:91:02:f3:69:a1:85:06:
59:04:f7:1a:38:19:ec:1a:68:d1:6a:5c:6c:98:bf:
c2:98:fb:9c:68:db:82:e8:d2:0e:6c:c2:fe:8d:ac:
7f:fe:36:8b:ee:e9:93:c8:0d:1d:a2:dc:db:44:aa:
d5:4d:2a:d8:7c:b2:d2:ea:21:19:10:4a:fa:29:ad:
f7:58:c6:57:98:e1:93:a2:05:b5:0e:7a:b3:8e:92:
f3:cd:c7:b0:8a:e9:f7:41:d5:ac:25:e7:5d:c5:7d:
08:9d:d2:f2:bc:6a:c3:5d:7f:03:2d:00:27:ef:ef:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.20.0/22
205.209.28.0/24
IPv6:
2a04:4840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60527
Signature Algorithm: sha256WithRSAEncryption
54:f4:e5:f5:c8:e0:8c:ec:c9:3a:d9:c1:19:8f:32:4b:c6:91:
0f:10:82:28:53:80:a9:73:be:e5:5b:36:2b:ff:89:1f:a0:f0:
2f:17:91:58:54:95:fe:b4:cd:d6:a8:f7:77:ed:39:2c:fc:ca:
3d:c4:0d:7a:93:6b:c2:3a:87:e0:81:e5:6c:c8:ef:e2:7c:92:
e0:d3:13:95:d0:5d:b8:13:dc:f8:b7:0e:74:ad:ee:14:d6:e3:
41:32:1b:6d:b6:87:bd:4e:28:20:2f:6f:fd:46:43:26:3c:3b:
c4:91:46:c7:83:17:f2:82:ee:38:4d:01:24:f2:35:dd:b4:2e:
89:37:5a:12:47:1a:47:9b:64:03:98:b8:91:65:e8:24:e7:a1:
3c:c0:31:06:0a:b4:9a:57:78:34:a9:74:79:41:59:d2:69:f4:
77:15:67:43:be:38:b2:ea:4d:95:6d:38:3a:08:b4:da:a9:2e:
4c:0e:6c:d2:f0:97:8d:91:66:b6:35:81:85:2b:93:9b:70:6d:
11:86:a4:d9:dd:29:2a:e4:4d:84:4d:68:7c:b1:77:fa:4e:62:
95:1a:54:12:80:b1:f8:11:0b:a7:19:47:84:63:33:e0:e5:d3:
33:61:06:74:16:bd:35:74:2d:5e:21:89:f8:a4:e0:36:c5:3b:
81:4f:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:03:38 2026 by rpki-client