Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
File:                     pdjtUEgIIjS3KoK2E2ydILA27nA.cer (raw, json)
Hash identifier:          +o4SijYq3ra/m2egtHcVuSTHfVeezs5Bunanjh+PTww=
Subject key identifier:   A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18F90142772289572FCC949BF7E0A334
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:39:59 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 52206
                          IP: 91.225.4.0/22
                          IP: 178.159.208.0/20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:f9:01:42:77:22:89:57:2f:cc:94:9b:f7:e0:a3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:39:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:8f:3e:ac:5b:d2:0e:ce:bc:b8:1c:a2:ac:
                    61:c6:40:f7:24:15:1a:48:80:cb:8d:76:64:7d:e0:
                    a2:e4:be:99:04:7c:65:2b:5c:ad:a6:6c:6a:d9:32:
                    7b:7e:25:f9:f6:cd:31:89:96:cb:df:60:7f:f0:36:
                    c8:29:54:29:a6:02:58:17:6c:75:26:a8:a8:a6:e4:
                    a8:14:bf:8c:dd:6f:46:79:88:68:e5:fd:d1:bd:a1:
                    be:b5:8c:ac:8b:01:2b:86:fa:a8:a4:98:b5:04:07:
                    8e:9f:61:3e:3c:31:d0:9e:31:00:9e:98:4a:a1:cd:
                    d8:8f:f4:5c:57:8f:95:ed:50:4a:54:4d:e1:52:16:
                    36:84:9a:f4:23:d6:87:24:a4:33:62:2b:55:19:ca:
                    a6:45:7d:4e:e6:dd:80:21:41:07:89:17:74:45:2f:
                    6b:5f:58:c3:0a:86:a9:94:e6:b6:1c:c7:d6:a1:3c:
                    81:50:f1:23:81:ce:be:10:ef:3c:10:52:82:28:c2:
                    5a:3f:36:36:00:da:5f:76:b1:45:2e:67:90:f0:03:
                    0f:b8:91:be:c5:d0:e7:8e:ec:c7:6a:9d:3e:69:3c:
                    66:78:6c:2b:b0:2d:83:2c:bb:1a:4f:32:8f:57:a3:
                    cf:2a:22:55:e9:07:25:13:7d:ac:d6:d4:88:80:1e:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.225.4.0/22
                  178.159.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52206

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:47:b4:34:4d:e4:fa:af:e9:aa:da:0e:24:d5:c2:59:a5:
         49:a0:b7:58:41:d1:3b:37:da:20:a8:55:c0:68:8d:cf:b6:19:
         02:4e:18:2b:d3:71:ff:13:4f:e1:9f:db:e4:38:d3:c9:a9:0d:
         a0:81:c0:04:1a:d8:c5:e1:ec:af:19:18:b1:cf:f6:7b:0c:3a:
         b1:55:01:dd:0c:c0:c0:b6:7b:b7:f4:a7:ca:64:f1:97:0a:5a:
         24:63:06:de:27:42:97:a9:58:19:0b:06:e5:b2:4e:ca:0d:4f:
         ee:64:fa:f6:be:da:fc:b7:0c:57:be:2a:00:6e:e1:75:c7:96:
         96:fb:06:c2:05:10:c6:6e:2b:77:0c:f5:e0:f2:03:8f:59:77:
         1e:01:54:0a:44:f8:66:01:37:57:2a:a1:94:79:7d:61:4d:fb:
         8f:e3:ec:67:be:59:24:b7:bc:d8:9e:b4:07:9a:f0:21:32:ba:
         be:78:7b:fd:72:41:24:fe:83:f2:3d:dd:aa:da:fb:67:b5:42:
         00:6c:0c:05:a9:e2:87:0a:bf:69:76:4b:d6:89:f8:fa:36:9f:
         80:32:a5:85:de:48:c1:1e:85:48:5f:b2:3b:43:8f:77:c1:30:
         51:0e:25:24:fc:68:3a:4f:f9:22:90:0d:ab:ca:bf:e8:7c:19:
         ad:90:49:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:09 2026 by rpki-client