Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
File: yA3IsMZQm8dryF5n9D7giooUyXU.cer (raw, json)
Hash identifier: 4c8UB89LQ27nCKbRO6wGPb0WLxzkvb/Hnx0yv1h/s1o=
Subject key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E1B4FAB1580FB8670D05E7950372ACB33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 08:31:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197791
IP: 2001:67c:88::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:4f:ab:15:80:fb:86:70:d0:5e:79:50:37:2a:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 08:31:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:c7:c0:05:c4:72:7a:3e:d7:0d:9a:cc:77:
fa:e8:4d:17:59:47:08:d5:f2:e3:be:6f:18:5b:8e:
e0:df:13:ac:2b:4a:c8:69:e3:b5:15:6e:24:60:52:
62:90:a0:73:3d:24:aa:56:56:45:a8:02:f6:68:1b:
eb:38:ed:ac:c6:62:15:88:68:dc:6d:b5:aa:50:7d:
f4:c6:18:28:f7:0a:ee:44:af:2a:a3:a9:19:2b:8d:
74:b4:98:2f:b3:e9:7a:3d:23:5c:39:e0:39:73:dc:
6d:47:bc:d6:62:09:2d:58:e1:b5:6f:d3:22:9a:03:
35:47:c3:90:5c:f9:4e:72:ab:af:98:a2:08:1f:94:
95:4a:4d:2d:8f:55:76:49:42:79:3b:67:55:35:24:
dc:20:87:30:d6:16:d8:72:47:d0:e6:e5:62:1b:a9:
70:7d:d3:f6:72:c2:05:ca:23:23:17:f5:45:28:38:
b3:41:f1:e2:23:d8:2c:ee:f9:64:ec:36:4a:e6:d6:
3e:61:18:7f:97:87:46:c8:5c:83:67:0f:8a:11:16:
81:7b:04:d3:8e:32:c4:37:bc:25:3a:0e:45:b1:70:
7b:62:35:d8:9d:0c:32:69:7f:71:77:de:8c:f5:2d:
82:a7:42:e0:b5:ed:4b:27:34:9f:b9:08:5d:94:09:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:88::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197791
Signature Algorithm: sha256WithRSAEncryption
55:12:b4:6f:bd:fb:1a:29:50:69:69:5c:42:13:36:bd:1a:a4:
3d:d2:b2:d2:e5:ef:b7:9f:75:d5:d1:c7:18:e8:16:f6:06:d6:
49:13:a6:72:77:42:87:d4:b3:27:f1:5b:a0:e8:93:ef:a1:a5:
b5:ce:74:03:91:3c:14:75:a9:da:ec:41:18:d6:95:2d:4d:ff:
b1:33:98:68:6b:d0:32:a8:81:38:e5:58:66:01:94:ad:da:d6:
a0:13:25:c6:07:a8:3c:ea:ac:df:bd:18:52:f2:be:1f:cc:92:
90:1d:3e:2d:42:c4:0f:07:a0:1c:95:75:64:b7:63:e6:f9:f2:
ac:d0:72:f4:d3:bc:f8:24:d8:30:e7:d3:60:39:91:5c:8d:42:
65:07:43:df:4a:3d:8a:89:a2:ea:15:15:4f:ee:a0:c8:26:da:
c6:8a:87:07:bc:4d:e0:8a:68:7e:2e:61:31:fb:50:cf:b3:90:
13:7c:aa:62:e0:55:c2:72:27:14:7b:f6:47:12:c0:bb:66:46:
0b:cb:16:95:a4:85:78:87:47:f0:3f:a3:d9:13:77:3a:a8:53:
46:1d:04:51:c7:23:a9:81:d8:8d:ca:31:a4:f4:bc:15:8b:4a:
55:87:b5:42:16:ef:12:1c:63:dc:72:f7:c0:ae:da:30:2a:60:
0d:e5:f4:a9
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ4bT6sVgPuGcNBeeVA3KsszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTEyMDgzMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODBkYzhiMGM2NTA5YmM3NmJjODVlNjdmNDNlZTA4YThhMTRjOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn07HwAXEcno+1w2azHf66E0XWUcI
1fLjvm8YW47g3xOsK0rIaeO1FW4kYFJikKBzPSSqVlZFqAL2aBvrOO2sxmIViGjc
bbWqUH30xhgo9wruRK8qo6kZK410tJgvs+l6PSNcOeA5c9xtR7zWYgktWOG1b9Mi
mgM1R8OQXPlOcquvmKIIH5SVSk0tj1V2SUJ5O2dVNSTcIIcw1hbYckfQ5uViG6lw
fdP2csIFyiMjF/VFKDizQfHiI9gs7vlk7DZK5tY+YRh/l4dGyFyDZw+KERaBewTT
jjLEN7wlOg5FsXB7YjXYnQwyaX9xd96M9S2Cp0Lgte1LJzSfuQhdlAn+LQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFMgNyLDGUJvHa8heZ/Q+4IqKFMl1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzA4MDM3
Yi01YjY3LTQwN2MtOTEwNS00YzRlYTA2YWNmZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMDgwMzdi
LTViNjctNDA3Yy05MTA1LTRjNGVhMDZhY2ZlOS8xL3lBM0lzTVpRbThkcnlGNW45
RDdnaW9vVXlYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfACIMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMEnzANBgkqhkiG9w0BAQsFAAOCAQEAVRK0b737GilQaWlcQhM2vRqkPdKy
0uXvt5911dHHGOgW9gbWSROmcndCh9SzJ/FboOiT76Gltc50A5E8FHWp2uxBGNaV
LU3/sTOYaGvQMqiBOOVYZgGUrdrWoBMlxgeoPOqs370YUvK+H8ySkB0+LULEDweg
HJV1ZLdj5vnyrNBy9NO8+CTYMOfTYDmRXI1CZQdD30o9iomi6hUVT+6gyCbaxoqH
B7xN4Ipofi5hMftQz7OQE3yqYuBVwnInFHv2RxLAu2ZGC8sWlaSFeIdH8D+j2RN3
OqhTRh0EUccjqYHYjcoxpPS8FYtKVYe1QhbvEhxj3HL3wK7aMCpgDeX0qQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:17 2026 by rpki-client