Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YHx8fGSR2ebM-RD6b2na8SgCgC0.cer
File: YHx8fGSR2ebM-RD6b2na8SgCgC0.cer (raw, json)
Hash identifier: xNDpHae0DCqYP4SN6CdhHRlfCk+jyXD1mnZL1eyh+gM=
Subject key identifier: 60:7C:7C:7C:64:91:D9:E6:CC:F9:10:FA:6F:69:DA:F1:28:02:80:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EE705145EA4B62D95D5B73D2E802ED428
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 20 Jun 2026 21:52:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47910
IP: 193.42.142.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:05:14:5e:a4:b6:2d:95:d5:b7:3d:2e:80:2e:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 21:52:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=607c7c7c6491d9e6ccf910fa6f69daf12802802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:fe:d6:b9:a6:7e:e7:00:0b:da:7c:17:25:
b8:c9:f1:20:2f:1f:0d:cd:bd:dd:7a:41:b6:bc:89:
65:32:09:b8:b2:9c:c0:19:05:b1:9d:ac:1e:fb:10:
ae:c8:05:17:2d:c2:cf:76:98:b9:a8:ba:00:14:c2:
7e:37:b7:ac:8d:73:d2:77:45:ca:20:af:bc:ad:f0:
79:80:23:b0:e6:29:8e:7a:71:6d:39:66:e1:cb:94:
7d:a7:30:58:46:17:c5:18:aa:00:6e:86:83:b9:fd:
6a:47:bf:4b:0a:b3:e8:84:bf:6d:31:b3:12:8d:16:
b8:0b:38:3d:39:61:db:c8:c1:55:e2:a6:b1:a0:e7:
59:37:74:2d:fe:ff:73:3f:54:2e:f1:14:93:02:22:
e8:61:0b:37:a2:45:d4:0b:6b:c7:d4:42:d9:e0:1d:
31:d7:c1:f7:ae:16:be:b6:65:99:ba:80:60:ea:17:
ef:db:33:86:34:4a:62:f2:39:2a:41:6c:f5:60:61:
14:59:f6:b0:d6:44:b9:28:ae:5e:22:24:a2:21:16:
52:39:f8:91:9d:52:32:04:9b:60:d7:72:bf:43:65:
d1:a2:78:9c:50:55:d4:b5:1e:b3:d0:73:3a:a2:dc:
3b:50:0d:48:16:02:d9:3a:a1:bc:da:ab:9a:03:51:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:7C:7C:64:91:D9:E6:CC:F9:10:FA:6F:69:DA:F1:28:02:80:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47910
Signature Algorithm: sha256WithRSAEncryption
2e:99:5a:a3:79:76:6a:a7:51:d0:76:46:3d:43:27:70:af:15:
42:a1:6a:81:12:7f:dd:4e:fb:bc:23:54:60:8c:e2:80:22:3f:
de:1c:dc:e2:a6:58:31:f1:3d:6a:40:30:e3:77:d7:0f:ef:38:
4f:0e:62:a8:e1:28:b4:90:8d:a3:1c:28:b3:83:fd:19:7c:c7:
64:84:17:5c:90:f5:3c:29:0f:fb:31:3a:90:1a:31:c2:f5:af:
59:f6:56:f0:01:5b:e2:27:d3:dc:8b:3e:7e:23:de:fb:02:7d:
a4:4b:58:8e:ef:20:36:c6:c5:90:64:d0:a1:7c:4e:84:df:ca:
8f:06:3f:2c:11:69:a3:20:88:39:22:a6:39:fb:58:d1:a3:65:
c3:75:a0:72:21:86:b7:52:55:94:60:5d:0f:12:a6:25:bc:13:
b6:2f:89:29:a7:00:da:71:70:ed:a5:98:30:61:1f:18:7a:82:
9b:9b:16:c4:91:a3:23:17:24:e7:a9:08:43:7f:9a:a6:d4:21:
1b:19:a3:56:d2:48:cc:ed:ed:e4:c5:40:bd:c0:a4:34:35:5d:
c6:6b:bb:27:c3:17:a3:47:23:8b:85:35:36:71:5d:69:eb:7d:
e6:41:62:58:1a:69:cb:dc:94:a5:54:73:69:ef:b1:d7:a8:cf:
6f:7d:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:41 2026 by rpki-client