Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
File:                     _RuNPQUHZm87sDyaWGV9xSl1fZc.cer (raw, json)
Hash identifier:          PJ50BzG71VaNJLVtK/63q2Q6W/NsdsQRIR0Eej0GmO8=
Subject key identifier:   FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019FB8C36AA707E71A954D9B1734B51FB449
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 15:20:42 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 219090
                          IP: 2001:678:12d8::/48
                          IP: 2001:678:12dc::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b8:c3:6a:a7:07:e7:1a:95:4d:9b:17:34:b5:1f:b4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 31 15:20:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:65:c5:d1:3d:28:fc:86:8e:ff:a4:9b:20:
                    35:cc:38:31:e6:fb:48:fe:ce:07:69:f0:9b:f1:cf:
                    34:4f:1f:3b:df:2e:24:05:d9:ae:a6:43:01:46:49:
                    92:fc:4b:29:a2:8f:31:ea:78:20:8e:e8:70:1b:59:
                    cc:70:8b:b9:ca:ae:15:64:30:a7:ae:e1:04:67:f3:
                    c2:04:2e:77:ef:ba:70:7b:6c:36:04:df:fc:0d:45:
                    4b:4b:b5:fb:c9:60:a8:cd:18:3b:f6:98:03:67:80:
                    7f:22:29:6a:09:92:78:31:5e:6c:34:f1:3c:e6:23:
                    c9:59:58:f0:14:0c:d1:d1:77:2a:10:ce:99:9d:8c:
                    cf:2a:37:67:0e:57:14:63:dc:df:8a:3d:7d:ce:7c:
                    7b:ef:a4:05:31:6d:cd:d3:d9:a2:63:12:b2:af:a7:
                    bc:c4:8f:6e:57:fd:5a:4b:0e:76:17:19:b3:1b:ca:
                    a7:96:d1:6e:e2:2b:0a:ea:f8:b9:0b:e9:fc:80:82:
                    95:c5:c9:69:1c:10:b8:f3:c9:8f:99:68:c1:02:9a:
                    79:7d:b8:08:38:fe:b6:ff:8c:15:8c:e5:4c:cf:9d:
                    c1:e5:83:49:3f:1d:fc:43:4e:91:16:c4:4f:5b:89:
                    a1:db:9f:89:d3:2c:dc:f8:ff:3f:7d:3f:6e:ed:4b:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:12d8::/48
                  2001:678:12dc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219090

    Signature Algorithm: sha256WithRSAEncryption
         23:83:d0:11:5b:8d:5c:4e:1a:93:14:b1:2c:32:39:1a:cc:1d:
         f4:b9:83:df:30:de:3d:f6:84:b6:de:04:34:fb:34:97:97:0d:
         c5:d1:61:a1:d0:77:f3:64:46:c6:4b:ef:6e:ab:e5:f6:eb:6e:
         6d:62:93:fd:c2:cd:30:01:f4:9e:15:77:9f:cc:b1:15:a6:72:
         fd:d1:69:18:ae:2b:c8:32:1d:94:e0:cb:0e:91:87:f6:69:5e:
         3c:df:44:a3:0d:93:b7:27:09:77:a8:20:21:82:c9:61:2a:9e:
         08:b9:c9:13:0e:cb:da:5c:44:e2:a2:f6:b8:d8:2a:80:98:3a:
         4a:08:27:9f:9e:a7:08:9d:38:8f:cc:fe:69:4b:ef:92:a9:15:
         11:73:38:e6:4e:db:8b:2a:45:73:8e:93:86:e1:ae:e6:41:97:
         ac:4c:06:ed:01:e7:2e:d2:54:ac:1a:2d:eb:59:fc:74:79:25:
         35:58:b9:64:02:52:27:65:39:fc:09:e1:4b:ac:86:f2:8e:9d:
         e3:71:5a:22:4f:8f:a3:c1:93:5c:ae:3b:a2:55:0b:03:12:e9:
         3a:c9:71:82:0d:8e:0a:89:06:b1:ad:08:bf:be:44:b7:be:f0:
         9c:3e:ba:a6:42:ac:af:35:09:4c:f1:3c:68:55:d1:14:34:7f:
         8e:94:01:ab
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZ+4w2qnB+calU2bFzS1H7RJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzMxMTUyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDFiOGQzZDA1MDc2NjZmM2JiMDNjOWE1ODY1N2RjNTI5NzU3ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQZlxdE9KPyGjv+kmyA1zDgx5vtI
/s4HafCb8c80Tx873y4kBdmupkMBRkmS/Espoo8x6nggjuhwG1nMcIu5yq4VZDCn
ruEEZ/PCBC5377pwe2w2BN/8DUVLS7X7yWCozRg79pgDZ4B/IilqCZJ4MV5sNPE8
5iPJWVjwFAzR0XcqEM6ZnYzPKjdnDlcUY9zfij19znx776QFMW3N09miYxKyr6e8
xI9uV/1aSw52FxmzG8qnltFu4isK6vi5C+n8gIKVxclpHBC488mPmWjBApp5fbgI
OP62/4wVjOVMz53B5YNJPx38Q06RFsRPW4mh25+J0yzc+P8/fT9u7UvWVQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFP0bjT0FB2ZvO7A8mlhlfcUpdX2XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzY4YWIx
Mi1kZDUyLTQ4MWUtODZhNi01Yjg4YmRlNTI4ZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNjhhYjEy
LWRkNTItNDgxZS04NmE2LTViODhiZGU1MjhmZi8xL19SdU5QUVVIWm04N3NEeWFX
R1Y5eFNsMWZaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeBLYAwcAIAEGeBLcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwNX0jANBgkqhkiG9w0BAQsFAAOCAQEAI4PQEVuNXE4akxSx
LDI5Gswd9LmD3zDePfaEtt4ENPs0l5cNxdFhodB382RGxkvvbqvl9utubWKT/cLN
MAH0nhV3n8yxFaZy/dFpGK4ryDIdlODLDpGH9mlePN9Eow2TtycJd6ggIYLJYSqe
CLnJEw7L2lxE4qL2uNgqgJg6Sggnn56nCJ04j8z+aUvvkqkVEXM45k7biypFc46T
huGu5kGXrEwG7QHnLtJUrBot61n8dHklNVi5ZAJSJ2U5/AnhS6yG8o6d43FaIk+P
o8GTXK47olULAxLpOslxgg2OCokGsa0Iv75Et77wnD66pkKsrzUJTPE8aFXRFDR/
jpQBqw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:43:00 2026 by rpki-client