Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
File: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer (raw, json)
Hash identifier: BpW91Bzuo9+H92RH1vIcUwGIP8rxUvJE6aXLYccLRq8=
Subject key identifier: C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CD63EEFC2108E96E6676FCEBE0FE2D5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 08:31:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198723
IP: 134.225.0.0/16
IP: 192.100.154.0/24
IP: 192.133.244.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:63:ee:fc:21:08:e9:6e:66:76:fc:eb:e0:fe:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 08:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:9d:6a:7d:60:5a:9e:9b:5d:c6:15:ed:b1:
fe:62:e4:d8:b9:25:96:62:e6:00:77:44:65:e9:cd:
69:ae:b3:a0:33:1c:aa:07:06:2b:81:c6:33:5f:69:
86:20:ae:2b:54:64:31:a8:39:66:34:73:e1:24:b1:
36:06:2e:35:15:3c:fb:52:6b:01:aa:b7:b1:28:a2:
13:9b:cf:fe:d6:4b:00:00:83:58:65:0f:52:16:44:
95:fd:1c:3c:d9:da:af:7d:03:30:43:60:8c:0d:be:
53:9e:dc:b7:4d:47:64:08:48:9e:98:5d:36:e4:d2:
94:d6:66:08:4b:a2:89:cf:ee:c6:ed:75:1d:8a:06:
b8:c6:f3:ef:a7:91:86:2a:57:fc:7f:99:c2:17:af:
06:c6:6b:14:52:7b:71:e5:58:9c:e3:0d:d9:77:bb:
bf:61:f4:b8:9d:35:b5:55:d6:d3:3c:21:7a:f3:87:
0f:13:2b:93:67:ff:9c:9e:3f:3c:4f:c0:1b:c0:fb:
67:02:6d:58:f7:8b:6f:82:09:63:af:42:5b:78:6f:
0a:87:a5:ce:4c:2c:81:23:ef:34:db:0f:be:de:e9:
1f:bf:da:bb:2e:44:02:cd:27:1a:5e:1f:ec:96:78:
2e:b4:a6:2d:8b:c7:0f:c9:74:bc:85:7a:cd:54:d6:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.225.0.0/16
192.100.154.0/24
192.133.244.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198723
Signature Algorithm: sha256WithRSAEncryption
7a:80:da:2f:c9:92:29:f7:96:57:f9:ea:43:6d:38:e9:2c:a1:
ff:e4:0d:a3:13:ce:22:e1:a0:76:89:bc:29:4e:45:b8:8c:1d:
6b:1a:ba:08:83:fe:b9:32:a9:54:b6:37:4e:60:c1:0a:16:f7:
fc:69:42:a9:b2:38:48:f2:05:a4:0d:90:24:ec:2d:c0:23:ee:
13:7b:7e:8b:da:64:9c:4d:e0:b2:83:0f:37:3b:0b:42:a6:5d:
5a:0b:40:88:33:de:97:03:f2:21:0b:de:53:04:2a:ed:82:aa:
4e:a9:45:91:c4:83:54:7c:08:fd:1b:05:15:28:78:99:fe:5a:
91:72:cb:2b:54:48:1d:95:5e:a0:da:e2:e9:98:8a:a6:ea:8f:
73:ce:91:ba:eb:88:eb:03:b1:23:97:d8:9d:d9:da:9b:e7:3f:
22:60:f1:ea:47:04:21:fd:31:39:9c:4f:2a:95:86:52:5a:54:
35:be:77:89:6d:18:3a:c5:95:11:45:9a:d1:50:e1:a8:89:3d:
cd:79:b2:db:3b:bf:43:f4:9f:e3:d4:7d:e1:6a:39:3d:94:73:
2b:04:ec:bd:b9:d8:7a:b3:0b:42:4b:08:94:fa:9b:05:d9:2a:
2c:67:d0:09:7a:6c:98:78:a8:af:4a:a1:6f:27:43:49:45:22:
7a:ea:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:32:47 2026 by rpki-client