Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
File: YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer (raw, json)
Hash identifier: HUPYze/g875oTb1y/SitlhdR5ckRUqsw80lXEXpchYQ=
Subject key identifier: 60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0718BB6BA2712560F8D8D1F6B8BDB2894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 05 Sep 2026 12:29:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60356
IP: 194.32.210.0/24
IP: 2a07:300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:8b:b6:ba:27:12:56:0f:8d:8d:1f:6b:8b:db:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 12:29:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:03:fc:9d:7c:93:9f:a4:9c:0c:6b:65:22:
43:14:80:76:73:9b:89:a1:7f:63:4b:b5:d2:d1:10:
e3:9a:0b:5b:9a:28:4a:32:d7:d4:eb:ac:d2:82:ca:
a7:32:e8:17:02:d1:7e:39:40:4a:67:25:d5:ca:b9:
1b:33:0f:69:a1:d3:42:ab:3f:65:de:fc:0b:dc:8d:
32:29:3d:70:3d:5b:11:c7:6a:98:a3:63:99:03:8b:
d6:ee:15:e5:02:93:43:c1:65:8d:de:d4:cc:ca:96:
cc:dc:74:30:3b:27:df:d5:85:7d:ef:05:45:73:6b:
b8:6d:51:5b:24:e9:a3:0f:4a:ba:d7:d4:25:02:18:
e1:ac:bb:43:64:d5:8c:1e:dc:7a:9e:b1:df:7c:9f:
8b:56:42:35:b0:6e:61:5b:38:e3:e2:04:e7:f7:59:
5e:44:13:05:3b:0f:bd:e6:6c:d7:39:05:e7:e0:b5:
72:ab:55:e1:6e:46:f1:96:b5:04:12:e5:5d:31:01:
1f:b1:4a:59:e4:c4:6b:18:d2:70:60:4d:39:55:7d:
78:4a:1e:b3:59:b4:fd:f9:4d:d6:53:59:46:22:7c:
2c:50:3d:87:ff:de:68:1a:02:fd:7d:98:80:30:f7:
d5:ed:1a:c7:bd:03:1c:3e:af:91:bb:5d:1b:bb:22:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.210.0/24
IPv6:
2a07:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60356
Signature Algorithm: sha256WithRSAEncryption
83:18:61:07:bf:44:9f:90:7f:f5:65:b1:2c:11:5e:0a:18:65:
98:ae:19:96:fc:2d:31:39:38:8b:2c:13:5a:17:7d:dc:4a:e2:
42:83:a6:e2:83:1d:cf:62:bf:26:8c:48:6a:30:f3:7b:0e:ee:
5e:ee:27:37:b1:a9:48:23:9f:c2:74:5f:7b:67:a1:65:1f:3b:
11:6f:35:00:41:f2:e9:09:ea:7d:5c:57:82:c8:3c:e3:c6:ac:
e1:1f:41:5e:c1:4d:21:dc:d7:61:16:c6:b3:ce:4a:6b:fd:54:
c3:61:cd:98:d6:56:bb:de:46:6b:6e:80:da:d5:03:ff:d5:11:
e8:68:14:ca:e6:e4:07:5a:dd:65:36:a6:0b:92:53:50:c3:53:
bb:ca:c5:e1:dc:6d:87:92:7b:cd:47:18:0b:35:3a:86:3d:62:
51:0e:b5:e9:b2:bf:bc:03:e4:15:1b:d1:53:0d:1b:fa:c5:a9:
d0:f4:79:a4:2e:a3:03:e5:8d:c2:9b:50:4e:b6:db:f7:ff:5e:
6a:c1:de:77:76:10:04:ee:7e:9f:48:b7:c3:08:6e:08:2a:a1:
eb:27:ed:e4:d6:06:a2:6c:8e:0f:72:ec:2e:51:51:9b:f5:61:
ee:d5:5c:f0:f0:55:a7:83:bd:1d:38:53:dd:37:d2:76:9b:17:
c4:99:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:50 2026 by rpki-client