Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.cer (raw, json)
Hash identifier: Lp0HNi5+XiX36sH+hyzUYhKdFbe/IQzbtweyx3DlQXs=
Subject key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07C000EB09057A48DE4C25260AF4379F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 13:12:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201439
IP: 2001:67c:9a4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:00:0e:b0:90:57:a4:8d:e4:c2:52:60:af:43:79:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 13:12:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:c4:a5:21:f1:e5:13:7b:d4:83:5e:a9:d7:
02:13:f3:52:43:74:13:8a:02:70:e5:61:46:8c:1b:
ed:9b:86:95:41:52:cf:cb:b1:3d:b8:4f:e6:fa:7e:
e3:2c:31:9d:3a:05:cb:34:39:42:79:7d:14:35:82:
95:3f:f3:18:54:ff:ad:5e:1e:e7:82:60:19:ef:9c:
a6:3c:4f:20:cc:8e:bb:da:7a:7c:2d:3e:83:23:81:
02:f0:3d:07:a0:bd:a4:0d:29:77:39:cb:cb:47:4c:
ad:77:fe:e3:c1:5b:76:8c:6a:56:a2:56:14:1d:52:
96:b1:3f:6f:71:5e:6a:5d:69:87:e6:52:43:49:fd:
6e:20:1c:d0:ef:07:4f:09:5d:f8:33:b9:d0:8f:92:
bc:3d:c1:5b:76:b3:ac:ca:84:b2:1f:61:73:74:8b:
e4:04:71:3d:70:cb:f8:e3:a0:7b:52:28:91:93:52:
8c:79:79:65:3f:c5:5e:84:e0:77:75:0e:04:2d:9a:
8b:c1:ae:7c:45:27:8f:06:f7:fa:35:0b:24:aa:5c:
a9:f1:67:a6:ee:d8:23:70:f2:9a:93:25:2f:fe:2b:
b7:23:b1:1e:7a:94:47:1f:5c:d3:a9:75:18:de:68:
67:0e:ec:06:c0:66:9d:3e:49:04:c0:84:cc:45:e5:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9a4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201439
Signature Algorithm: sha256WithRSAEncryption
2f:67:aa:9e:26:55:88:58:5e:ab:b0:34:49:c2:ce:c0:8d:74:
b8:5a:6a:e8:34:a7:36:1f:b3:43:70:a4:28:75:fa:c7:44:3c:
fa:a7:af:07:e0:0d:45:00:1f:9a:f0:ea:9a:62:22:76:ed:0e:
7a:82:84:8e:f1:29:cf:84:a6:e9:0e:ea:4b:0d:40:49:d1:5e:
1a:9d:e3:91:78:b6:56:f7:0d:a7:23:a4:80:a6:21:0f:7e:86:
b8:34:b3:39:f1:18:42:9b:cd:6d:96:72:c1:b5:0b:e2:dd:fe:
ab:6c:f0:aa:5b:19:fc:d8:da:d1:ec:3f:3a:f2:00:38:ec:41:
50:e1:30:bf:e9:ea:ee:82:28:fd:a0:f8:aa:29:f4:2b:7b:9a:
3a:16:d6:95:94:51:6b:7a:3b:f9:d2:c1:62:9e:52:6d:b0:5a:
e0:9c:b7:62:95:5c:26:0e:fd:f1:5d:d3:d5:d7:46:e4:a7:3e:
6a:80:b7:68:cd:e0:02:b1:2c:57:36:a1:f8:10:16:2a:75:41:
43:76:fc:21:ef:5b:86:4e:1f:5e:50:14:0a:2c:c3:00:c7:b0:
6f:c9:1e:14:53:8a:f5:1c:c8:99:30:da:85:bb:9b:c3:35:0c:
d7:13:3e:da:f4:90:12:c5:96:54:d5:fe:26:d8:de:87:04:2f:
aa:68:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:15:36 2026 by rpki-client