Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
File: AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer (raw, json)
Hash identifier: 8DKfhDM3tB5IGkfumfvRbL4unHEDra/gAfjiwk0l+r8=
Subject key identifier: 00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E509931FF6D543587EE403430AB7F5846
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 May 2026 16:51:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207295
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:99:31:ff:6d:54:35:87:ee:40:34:30:ab:7f:58:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 16:51:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0076aabf4a8b1633e174820517fc53c4d6480359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:e8:6b:e2:3f:1d:d3:8d:24:ae:59:37:a3:
0a:85:80:8d:5f:7e:79:63:78:99:ba:f2:04:c0:a1:
f6:ba:2e:83:c9:4e:11:e0:dc:a9:2d:d6:41:36:fd:
cf:49:5f:c7:92:93:78:28:30:3b:cb:80:93:8b:6c:
65:42:eb:b4:b4:fd:d6:7a:9f:06:66:7e:22:7a:b9:
70:b0:60:6d:f9:3e:47:96:2a:68:2e:ab:2a:d5:3a:
4b:a5:e4:a1:95:9d:b8:95:c7:a0:61:da:19:19:44:
b2:bd:0f:77:f6:66:34:97:b5:4f:d8:6e:90:04:ad:
c5:ce:68:88:04:a3:ad:d2:e7:0d:18:93:8d:8e:22:
2d:04:5a:b9:2b:2e:b9:f1:ed:31:8f:4b:ac:95:b0:
5d:e6:da:2b:3c:d6:4b:ed:05:60:9a:f6:d0:29:39:
7d:fc:8e:e9:e3:aa:c4:fa:1a:cb:40:8e:33:46:0b:
57:4a:a8:3d:f7:b1:45:48:b5:b9:0d:af:f1:69:5b:
cd:e6:73:2d:bc:5e:13:c9:89:64:2c:05:96:fc:1c:
e0:89:01:e8:0b:0f:7f:51:db:86:89:ef:a8:f3:8b:
6e:fb:df:54:e7:84:4b:34:5b:0a:c5:e4:7c:50:47:
cb:2a:46:df:9d:81:a2:3d:22:4c:a3:7c:16:03:a7:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207295
Signature Algorithm: sha256WithRSAEncryption
18:cc:2c:70:44:c5:de:31:31:15:c6:a1:f9:cf:df:d4:09:74:
f4:81:5c:b5:db:2d:d1:d1:e5:ba:ab:5c:af:c7:eb:8e:d0:0c:
0a:bc:23:3d:35:99:96:25:36:7e:eb:26:ba:d7:02:f0:6f:85:
52:4c:8d:fe:b3:23:c8:93:b3:13:02:de:38:e9:d7:13:ec:4f:
2a:ab:74:64:ca:e3:d2:ea:82:0a:cb:26:8a:4c:b1:44:ae:05:
1e:19:6c:00:5a:d4:e5:bd:77:a8:b5:90:db:4c:88:15:89:00:
30:b2:2d:4c:46:94:ef:fe:b5:34:2c:da:dc:47:98:9e:c5:3f:
bb:ec:cd:48:18:3f:48:9e:e9:dd:52:6e:ed:62:9c:2d:ef:6b:
5d:aa:22:16:59:2c:fb:fb:61:77:28:9d:b8:09:d9:1a:c4:f2:
ba:77:c8:19:c1:31:58:cc:ba:eb:fc:6a:4b:8d:e4:4c:a2:2d:
84:3c:3c:8a:43:ca:10:fa:57:12:2f:f8:5c:d5:f2:21:c1:e5:
5b:b8:ab:2d:f5:c4:3d:ef:2d:f7:a8:c8:78:a4:31:3f:47:1e:
49:b9:bb:f3:33:82:93:b6:4a:eb:7d:4e:dc:48:25:1f:72:ea:
da:18:bf:19:53:0a:ff:dd:1e:45:74:90:d0:44:54:29:03:ca:
f6:8c:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:22 2026 by rpki-client