Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
File: yQOCdRxNpmg2pwsS5vX59gkDcJc.cer (raw, json)
Hash identifier: w0+ZTsX9XhDTrvpPWH3u5uoD8rP7WkjRppiiRowTpjk=
Subject key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE50D4FDC43DCE338B5E0C19A4BDDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25048
AS: 48901
IP: 81.90.128.0/20
IP: 2a00:e20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:50:d4:fd:c4:3d:ce:33:8b:5e:0c:19:a4:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90382751c4da66836a70b12e6f5f9f609037097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:d9:96:67:b4:c1:a1:2b:7f:5d:17:2b:4c:
a3:fd:dc:ce:e2:1e:0b:b2:3d:1d:a2:1a:2d:55:7f:
aa:f0:3a:ce:63:47:70:71:dd:83:4b:b0:2b:6a:15:
98:38:2f:e4:03:d3:c9:88:7b:a7:79:2c:db:b8:8d:
f6:ce:67:90:ee:4f:ad:fd:30:ab:ee:42:47:cd:2d:
3e:f6:2a:f7:4a:3e:e6:38:34:92:5c:36:91:a2:9e:
8d:4c:19:e8:3e:31:0b:ce:99:97:0b:80:1d:12:09:
4a:21:b0:bb:b5:61:6f:56:8c:e2:9d:b5:88:33:2f:
d8:e5:9e:bf:8d:1a:8b:7e:e5:fd:3b:41:61:04:38:
be:7c:fb:43:9c:e3:d4:0e:6a:3c:2c:28:0b:7a:62:
15:94:52:4d:ed:38:aa:5a:57:2e:c0:82:2e:c5:ef:
2d:06:c2:28:68:2e:7a:d9:81:2b:22:47:1a:40:fb:
04:ea:52:8e:fd:3e:e2:27:8d:62:fb:c5:0b:ba:f5:
8e:c8:e6:f9:f4:0c:3a:3e:4a:1f:59:ab:af:65:16:
de:d4:23:00:ec:aa:61:b8:4b:26:c3:cf:2b:80:c3:
78:94:c3:e1:1e:f3:d8:61:1c:9f:24:7a:aa:fc:3b:
bd:a8:d5:08:84:12:16:c5:2b:6f:fa:54:5d:69:75:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.128.0/20
IPv6:
2a00:e20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25048
48901
Signature Algorithm: sha256WithRSAEncryption
43:ac:4c:58:da:73:8b:e2:ef:5b:99:3f:c1:8c:6c:6e:30:1e:
e4:41:10:b4:ce:c5:ee:34:c9:07:30:07:9f:df:cf:18:6f:72:
57:07:3f:ed:ba:47:4c:5b:3a:e3:c7:4a:2e:ec:04:06:cf:1b:
aa:2e:6b:1a:51:30:74:89:92:63:98:78:0b:a4:f4:20:b3:e7:
c4:23:28:84:c8:dc:ad:a8:53:76:32:0a:90:69:56:27:3d:5f:
69:66:2d:ab:4a:ee:c5:6b:b2:c7:6e:d3:7b:b7:60:63:2c:00:
25:6e:b6:0d:0e:06:80:9d:31:d9:70:6f:a2:d0:4e:b4:c6:36:
50:37:ed:69:e9:6a:f0:31:24:1e:e6:33:d9:e4:6a:f9:47:1f:
91:32:f5:27:27:2d:b2:85:17:32:db:db:20:5a:ec:b5:ea:e1:
0c:47:08:82:90:8d:62:e4:c1:1f:70:b8:ff:24:fa:39:5b:c1:
12:8c:dc:df:15:e3:68:a4:0c:8d:95:21:a4:12:8f:d0:11:7f:
08:ea:6c:44:ac:e3:61:b4:a8:f6:ed:f4:ce:fd:27:53:30:59:
29:29:69:5f:3e:cd:47:8b:cc:ed:d1:63:4e:c2:aa:9f:7a:5c:
1c:2d:53:17:89:94:7a:08:f2:99:74:50:7a:50:58:c5:98:a4:
48:21:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:50 2026 by rpki-client