Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
File:                     pyQJe3759ROznhJ2fV7c0-BiOoM.cer (raw, json)
Hash identifier:          YYom8XUCAwkZYsAw8OddWS0JuTYzhMfC+SjjnO28DR0=
Subject key identifier:   A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A01EC89B0439916DD93048593DB8C7385F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Aug 2026 10:47:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 219074
                          IP: 185.145.190.0/24
                          IP: 2a0b:e880::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1e:c8:9b:04:39:91:6d:d9:30:48:59:3d:b8:c7:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 20 10:47:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a724097b7ef9f513b39e12767d5edcd3e0623a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:51:65:eb:1d:e3:97:03:aa:6a:20:89:f0:
                    bd:7f:54:41:95:f0:25:e4:9e:ee:5f:58:36:a3:9f:
                    4c:14:64:79:ba:2f:84:ca:1a:ee:79:1a:b9:e4:3d:
                    3f:56:80:79:89:1d:36:ea:51:24:9e:33:8a:86:d2:
                    13:05:a6:85:14:97:21:94:1c:19:0b:99:b5:45:fb:
                    6e:64:d8:69:fb:fa:7e:ce:40:c4:f9:6d:dd:8b:98:
                    56:20:44:bc:2f:9a:4b:02:91:74:00:ed:3e:44:c0:
                    c1:3b:95:c7:ba:97:a7:36:51:53:00:fe:db:e8:2b:
                    f5:e6:0b:a6:e7:cf:ed:f9:ee:dd:4e:12:c4:74:f1:
                    3e:8a:84:9a:86:cd:4e:ce:d9:95:db:7a:1b:27:6f:
                    11:d6:11:82:b5:9d:53:92:d5:41:d8:b3:6f:16:c9:
                    e5:2d:45:6b:59:1a:3b:75:1b:db:6d:c8:e6:04:15:
                    80:ec:95:c3:35:a6:e9:e5:6d:37:54:50:d1:e0:6f:
                    3f:c6:6b:07:5e:9a:fa:a8:75:65:bb:34:42:70:ed:
                    f1:b8:0d:e0:52:e3:5e:7a:53:61:b6:6d:15:32:78:
                    79:2d:99:a4:38:e5:55:d8:46:23:e9:d9:55:c0:b4:
                    a0:96:e8:49:b9:62:a2:9f:93:d8:c6:52:7d:5b:2a:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.190.0/24
                IPv6:
                  2a0b:e880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219074

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:05:c5:21:9c:44:62:4a:be:25:57:53:e6:31:8f:7e:90:
         42:99:5e:6c:34:01:16:d6:37:fe:b6:1a:59:1a:8d:50:f5:bd:
         13:78:45:50:22:ad:00:50:98:de:8e:40:b5:ca:5a:58:05:59:
         3e:5f:00:a2:87:b5:82:55:29:97:e7:92:1d:27:b8:88:ca:6c:
         13:3c:5d:f9:3a:b9:92:94:ce:9c:35:6a:8b:71:58:50:20:fa:
         0e:9f:e9:5f:fb:82:92:07:94:95:67:bf:cc:7b:8b:d9:b9:40:
         c1:fa:f3:e7:15:ac:e7:c9:26:c4:09:29:f8:34:bc:86:f9:06:
         dc:90:6e:1a:4b:66:2c:45:b9:f2:b8:15:25:04:39:f6:65:2a:
         69:c4:d9:d4:e6:77:e3:cc:0e:b4:2e:01:6d:b0:8b:11:06:f4:
         c6:82:f8:20:0c:49:56:f0:e6:e9:bd:dc:2f:85:a9:fa:bd:96:
         6f:90:11:64:0b:d6:57:53:3c:8d:56:32:f9:1d:c7:20:c4:f4:
         a6:1e:5d:4f:90:21:ce:9c:82:4f:12:4c:a3:87:24:b7:d6:e9:
         94:bd:53:c5:3a:27:f8:0e:9e:5f:5a:4b:6c:c7:c6:4c:0a:57:
         9e:fc:b2:69:d5:f3:7b:a9:ea:fc:73:34:86:1e:3b:77:05:45:
         43:71:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:36 2026 by rpki-client