Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer (raw, json)
Hash identifier: VZ8QCsOeVIbRK0mMaJaGzhUt13KBlsO4hHOpc7GGgvM=
Subject key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE4D109CB0AE677E4A08EEE0FFA257
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206901
IP: 185.72.140.0/22
IP: 2a03:3fa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:4d:10:9c:b0:ae:67:7e:4a:08:ee:e0:ff:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:24:00:36:7f:cd:fc:ce:63:5c:e5:99:f8:
ed:69:16:c0:ae:58:ef:ab:5f:9b:35:9e:67:1a:c6:
e7:d9:7d:75:a4:0d:f7:da:c0:ef:71:66:6f:45:18:
b7:07:da:56:ea:5b:09:65:5f:81:e8:26:66:72:64:
f7:63:ac:9d:f6:18:c1:6d:b0:a0:27:d3:83:6f:e9:
a9:49:4c:d0:aa:70:1e:27:b8:6a:0c:6b:98:82:31:
f2:fe:94:50:d0:e0:da:12:1d:35:6f:0a:dd:53:d9:
de:ff:a3:d4:cc:96:23:33:65:4a:90:f8:37:fd:2a:
89:47:f6:75:68:69:29:92:7b:24:09:55:f4:88:45:
3a:c0:2e:0d:45:31:41:5c:7f:ab:a8:db:90:6e:2b:
0d:6c:83:cd:5d:d2:23:14:cf:d1:16:2c:66:5c:fd:
2c:27:e1:e1:d2:ca:aa:2e:69:33:05:7d:9a:af:1d:
67:69:ac:7a:db:09:59:6a:91:3f:5a:4c:98:37:87:
24:e9:b7:36:72:ea:c4:62:5f:71:c6:7e:0e:bf:89:
46:80:69:a9:08:9f:02:c3:52:07:5e:25:d3:d5:ef:
1b:eb:b3:5a:82:0e:df:f6:8f:46:96:29:9e:19:2c:
23:04:aa:f8:1e:01:56:d3:47:65:20:8b:05:93:06:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.140.0/22
IPv6:
2a03:3fa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206901
Signature Algorithm: sha256WithRSAEncryption
5d:20:bb:19:17:36:60:ed:67:f0:b7:e2:c7:c1:38:ae:36:58:
26:a8:86:d5:85:f8:48:f9:7b:cc:8c:58:41:d2:dc:c6:74:70:
94:70:40:44:6b:4e:2e:65:96:c1:b9:3f:45:1d:db:af:19:48:
a6:17:14:5a:6c:2b:52:f3:57:d1:39:46:a9:ef:e6:c6:86:29:
a8:b0:28:99:d7:cb:1d:23:b5:33:6c:3c:46:f4:b6:30:e5:af:
28:10:b6:b6:56:54:02:1d:5c:ed:71:59:4d:a3:2c:e4:57:95:
7b:9a:74:da:8e:06:1e:1f:58:ea:54:79:a0:56:80:9c:8e:d1:
0b:c8:14:8a:bc:24:49:6b:2e:bd:3d:1b:8e:7a:47:5f:17:c8:
a0:dc:7f:eb:59:e1:33:c6:16:49:79:86:0c:f1:da:de:fd:06:
52:2c:c1:db:bf:4f:17:b2:d5:5f:90:7a:b1:68:5f:42:2a:fc:
6f:f3:d6:15:4e:1d:b0:53:87:95:7e:3a:7d:27:ab:ec:85:8a:
20:81:e2:02:3a:d5:59:57:a5:d8:0d:43:0b:62:7f:58:d7:8c:
c8:96:5b:8d:e3:b7:44:13:e9:0f:5b:a7:05:53:46:ff:26:d0:
5b:9d:82:3e:de:7e:70:b7:66:79:a7:71:57:c7:d2:98:aa:82:
63:3a:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:05 2026 by rpki-client