Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
File: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer (raw, json)
Hash identifier: 0ZxEX9Ayc//pw9l1rWKHXPuHphj5RYjOg3g3WYj8UcM=
Subject key identifier: C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DAB2DACAED7921CFDDA19CE61C25435BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Apr 2026 13:56:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.62.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:2d:ac:ae:d7:92:1c:fd:da:19:ce:61:c2:54:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 13:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:9e:ad:96:88:c4:e1:d8:bf:36:29:24:fd:
00:ad:a8:ae:9e:06:4c:3b:80:ee:27:68:70:54:31:
54:64:f9:29:b0:fe:33:3b:3e:c7:ac:81:84:91:bf:
a9:0c:5c:6c:ea:a3:20:c2:e3:a7:2c:4a:b2:a4:25:
62:c0:cb:db:68:59:ae:30:cd:76:95:c2:60:50:2d:
4d:29:29:19:99:54:ef:58:1f:cb:85:ad:98:41:60:
3a:2e:50:26:23:36:3f:0b:d7:da:ee:c4:6d:1f:99:
dd:de:87:1f:19:bc:f8:7a:61:e3:20:b5:f1:cf:a2:
28:bf:47:9d:56:b7:90:d4:f5:eb:fe:8c:b8:74:8a:
7d:1a:7f:a6:fb:f3:a1:f9:5c:c1:85:1e:98:2d:eb:
e8:a2:66:86:b1:ab:41:8c:76:51:c0:4a:f4:21:80:
62:22:8f:27:e3:7f:35:17:8a:d5:b0:32:34:e1:73:
b3:fe:1e:41:fa:73:73:20:17:15:1a:b4:2f:25:ec:
b0:19:68:7c:df:1f:c0:91:41:9b:38:e6:01:a3:fb:
c3:2a:e9:53:87:4e:1f:72:2e:f7:a9:7c:61:73:c4:
fc:e3:05:9e:43:41:f6:8e:cd:11:e2:fe:86:89:12:
10:d3:6b:a1:3a:0e:f2:1c:cf:62:0f:58:16:29:d1:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:93:2c:98:4e:70:78:40:92:e2:93:7a:1a:04:5f:a3:4e:fa:
dd:75:bf:68:6d:8c:7b:9d:73:7c:95:7e:d6:1b:2c:63:f5:3a:
9d:37:0f:99:42:9b:8e:47:6d:65:99:d5:6b:ae:81:d1:7a:02:
de:0b:26:35:ab:d5:a7:55:60:85:f7:5d:cd:11:52:09:69:2d:
34:be:21:06:8e:3d:9e:98:8e:28:72:8a:50:60:65:dd:1d:24:
06:70:95:d0:06:fe:ac:b6:2f:d7:39:a7:f1:a1:72:79:af:5f:
af:3f:09:f8:62:42:ba:c4:14:37:fb:23:58:1a:4f:f5:bb:4a:
a3:d0:f3:30:ec:52:00:ba:65:ee:16:b0:2e:85:0f:ad:38:f5:
ad:0d:6f:94:79:58:11:4c:4e:39:c2:15:14:ae:14:b6:ab:39:
f3:0a:50:9e:83:bc:17:07:ee:e7:51:f7:d8:ac:d3:30:38:bf:
96:89:df:9a:d9:7b:fe:0f:83:f5:4e:64:14:69:79:9b:dc:95:
29:3b:65:5f:ff:07:e6:cd:f3:dd:84:b7:82:90:cc:ec:8a:45:
cd:d8:84:fe:88:21:89:be:53:e2:0c:7e:f8:49:29:50:c0:7d:
75:63:bf:20:79:36:04:13:53:40:c7:13:7b:1c:85:33:7c:f4:
93:cf:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:26 2026 by rpki-client