Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
File: YAG5U8a-H5GDHWilwBFcIODNf5o.cer (raw, json)
Hash identifier: 9CK2woGeJVaMAtgPAPY8cZoxSnW/pIO9wZLk/TOZMXk=
Subject key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AF03DD3DAA3D1733E68981E4F8CB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42220
IP: 185.214.176.0/22
IP: 217.18.160.0/20
IP: 2a03:9520::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:f0:3d:d3:da:a3:d1:73:3e:68:98:1e:4f:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:b8:fa:4e:83:74:96:0c:36:07:ce:55:28:
fb:b5:5f:86:4a:a1:99:54:1d:45:27:65:98:ef:42:
d7:ac:45:3b:3d:9e:5d:ce:af:e8:58:a6:c9:b6:f1:
f6:dc:6f:55:b0:df:2f:e7:c8:c7:08:30:5c:d1:e2:
ec:f5:80:2a:a6:da:96:5d:d6:6f:04:08:ad:88:89:
0d:fd:85:13:99:b1:2a:d6:02:20:03:c2:17:2a:cb:
ea:a2:8a:4b:88:28:6a:35:60:bc:6d:d6:d6:8b:83:
2f:9a:53:3a:6f:18:1f:17:78:14:3b:0a:7c:f6:d1:
e3:58:ef:76:5b:e8:27:b1:9b:65:bd:95:cb:be:1e:
bb:43:25:aa:2e:69:4b:fe:7a:df:a9:4f:fc:e9:9f:
27:5b:9e:d0:bb:34:4c:b1:66:d1:79:3d:71:18:5e:
20:16:2a:94:a7:e5:f0:c7:44:66:11:c3:5b:22:a2:
a7:c0:e5:00:f8:78:dc:11:ca:bf:55:e3:b4:33:f3:
de:81:32:fc:14:36:02:3b:dc:47:f6:10:ed:98:23:
06:54:5c:35:1d:99:49:78:54:f9:72:b7:67:b9:fa:
68:bc:70:b6:c5:fc:8f:95:c4:ce:5f:bd:69:dc:93:
58:d3:4e:64:a5:48:f1:24:5a:26:71:64:a2:17:1d:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.176.0/22
217.18.160.0/20
IPv6:
2a03:9520::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42220
Signature Algorithm: sha256WithRSAEncryption
03:32:5a:38:f0:d2:b2:bd:39:6d:a1:c9:0f:a6:ad:ea:c2:59:
dd:ac:bf:e7:cd:53:69:51:93:a0:54:5f:62:5c:a5:a6:32:16:
00:fc:d9:fb:aa:01:2c:89:3b:dd:1e:18:0d:ca:7b:76:1b:6a:
0c:34:87:b5:38:c1:2e:66:59:45:4d:74:69:52:01:e1:0b:ab:
03:61:36:07:90:26:d3:c4:a1:39:6e:c7:41:74:89:8e:aa:88:
e0:93:39:9f:ad:bd:bb:ff:e9:6c:64:bd:51:9d:d6:25:69:57:
f6:36:15:39:b5:fd:bc:eb:95:ee:44:7a:13:ca:67:63:4a:33:
e7:6b:18:a8:18:cf:cf:88:a3:92:91:41:cd:c4:65:c9:f7:73:
20:d3:bd:f4:ed:c1:c7:d9:89:bf:9d:6f:72:f4:c2:db:a7:86:
85:53:42:e3:20:db:a5:bb:5f:81:a0:a1:cb:39:a8:47:12:71:
38:b9:4c:f8:43:e2:69:9c:6d:47:16:30:65:e4:d2:30:69:dc:
40:68:69:bd:b8:fc:60:87:d8:f2:ad:a0:9b:ec:ca:a1:4b:a9:
36:c3:75:15:69:45:33:0b:7b:03:32:6b:13:f4:9e:de:53:a3:
23:7c:e9:11:0a:01:ee:da:fb:2a:e4:cb:f1:59:18:cd:2e:81:
21:50:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:53 2026 by rpki-client