Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.cer (raw, json)
Hash identifier: TjcSp27IcDB3Jd0ubcuah+sNd5dmSSQveA//JxNiao0=
Subject key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E6ED33AB493BE0E9C45E3890C77036C34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 May 2026 13:43:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42969
AS: 208843
AS: 215778
IP: 45.83.64.0/22
IP: 46.247.60.0/23
IP: 158.94.186.0/23
IP: 158.94.218.0/23
IP: 194.187.176.0/22
IP: 2a0e:7b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:d3:3a:b4:93:be:0e:9c:45:e3:89:0c:77:03:6c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 13:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:cf:e0:c6:18:0a:93:85:24:fc:14:c5:66:
1e:95:6a:56:04:e5:07:c8:d7:e7:30:d9:b2:ad:0a:
96:5d:d6:20:0a:12:ef:c6:b6:40:72:07:32:46:0c:
e1:28:dc:18:2d:9c:92:f8:53:c3:da:c0:db:19:9c:
6c:42:e0:ca:60:ea:40:0c:3f:fc:b7:51:1b:91:d6:
19:d8:61:43:7e:03:ee:66:b3:b5:f2:7f:1a:e8:3a:
6c:cd:07:05:a7:e5:f3:39:8c:e4:e0:a5:54:7b:c0:
b5:2d:ff:ec:ca:f8:ba:02:c5:c3:e1:7a:8e:ba:88:
de:7f:20:54:18:ca:e9:ba:27:db:56:59:38:08:d4:
62:e5:db:eb:d9:25:fe:78:fc:ff:4c:98:56:50:ac:
60:b5:34:83:15:26:f1:12:a1:68:57:92:09:13:c2:
5c:92:16:4d:a3:2c:55:ad:58:da:69:b2:c9:7c:4e:
f3:03:dd:34:3c:20:fc:9c:1f:66:c4:d7:27:43:a6:
14:51:b4:0b:cc:34:f4:28:14:6a:40:75:4d:34:95:
3d:4c:56:d0:73:91:f1:e4:cb:83:ef:f4:86:1e:7a:
09:08:7d:7c:1e:4e:cb:1c:94:35:73:2b:3e:ee:82:
67:85:c8:c2:09:b8:43:18:23:5f:d9:95:8b:9f:89:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.64.0/22
46.247.60.0/23
158.94.186.0/23
158.94.218.0/23
194.187.176.0/22
IPv6:
2a0e:7b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42969
208843
215778
Signature Algorithm: sha256WithRSAEncryption
5b:38:c5:d3:f6:67:e3:49:92:81:c4:dc:3e:e1:fd:a3:be:d5:
1b:27:84:64:87:b7:ad:5c:88:33:97:d9:6a:99:3d:12:d2:0e:
c6:a5:c5:f6:36:6f:22:05:a3:9f:56:bf:5f:05:53:f4:e3:66:
af:63:ea:10:cc:90:f8:a3:44:0e:b4:30:d2:12:5d:8e:b2:d6:
33:78:0c:c5:ef:6a:f4:97:24:30:d0:cc:b9:8c:99:97:51:9b:
6f:8c:74:26:3a:88:43:89:c6:96:c5:86:e1:39:06:8b:c4:2c:
b8:9b:b5:3c:ff:cf:23:cf:1a:19:a5:bb:fa:4e:fc:0d:3a:85:
84:18:fc:10:90:3d:5a:7c:15:45:36:d5:30:89:09:fb:60:87:
5a:28:45:59:a9:4e:51:75:77:2c:bc:72:54:83:5d:a0:fb:be:
2d:5b:18:86:b5:a7:21:2f:fc:86:f4:5c:72:96:89:c4:54:53:
f5:df:4e:ef:60:44:b4:01:32:97:3f:bd:bc:4a:3a:cf:ce:f2:
bb:bf:94:27:dc:d0:f2:95:ea:8c:b3:9d:40:50:4a:a0:67:56:
49:06:a7:6a:fa:46:cb:d9:4f:7d:45:f3:35:32:59:f5:d6:ac:
b3:99:0f:e8:e0:b6:6e:d0:8f:45:ef:1d:fe:7f:c9:34:6f:59:
ab:e9:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:32:06 2026 by rpki-client