Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
File: AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer (raw, json)
Hash identifier: q3hsVl9r5Pqau1SHwVwC4T+Xs6vwx/eGjS0vyj46mwY=
Subject key identifier: 02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11C552B22CD95F620DE8B45EBC75293CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 16:25:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.101.64.0/20
IP: 160.5.208.0/20
IP: 168.113.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:55:2b:22:cd:95:f6:20:de:8b:45:eb:c7:52:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 16:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f37611530eaaa9596e68c467b253992a4ce7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:35:7b:96:c4:f6:c2:88:a4:56:32:1b:a5:
61:db:be:32:97:18:d9:f4:ba:b0:89:9b:c8:e0:58:
cf:c7:54:91:26:dc:cc:b5:2e:a8:06:b9:06:a7:72:
ef:aa:19:3f:13:b3:0a:2a:d9:db:c2:82:8b:e6:33:
fb:f8:07:ac:9a:a7:ae:29:33:4b:95:7b:81:26:1e:
b3:02:c9:e9:94:19:e4:84:5b:97:a2:7d:18:f2:5e:
17:1a:49:e2:61:bf:c7:a2:3f:15:4e:02:25:f3:9b:
40:97:b2:f5:1c:93:71:f5:3a:51:52:3f:35:f9:d6:
89:5f:d1:6e:ed:ee:a1:45:ff:9c:d6:69:15:32:db:
82:3a:09:48:d4:d3:51:b9:25:72:78:ab:f1:19:42:
67:01:63:3e:1f:9f:78:8e:6d:b3:e6:ef:43:42:a6:
cc:5a:6d:28:c1:b9:c5:a3:48:f6:53:59:64:96:57:
f1:a0:a7:64:60:67:99:92:26:79:f0:fe:56:a2:bf:
ec:63:e2:20:2a:49:55:cb:8c:8f:2c:b7:a2:b6:0e:
de:9d:57:20:90:da:79:e1:fa:ea:5e:55:74:97:1c:
2b:09:a7:ca:5d:ef:67:ce:8d:d8:58:e3:61:97:f7:
86:ec:fb:47:3b:c5:3d:92:c5:0f:df:1c:e0:4b:e1:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.64.0/20
160.5.208.0/20
168.113.128.0/20
Signature Algorithm: sha256WithRSAEncryption
51:80:ab:3a:32:d0:41:52:5f:11:78:fa:a5:6a:d7:fb:85:3a:
d2:ff:4a:48:a5:74:95:32:23:af:26:fc:c7:94:f1:0c:d1:82:
1e:c7:6c:aa:af:26:d6:b9:1a:0b:d0:9d:69:a7:67:92:3c:df:
5a:4d:e4:3e:ac:07:a9:60:6f:d7:74:d7:86:0b:86:95:f5:ae:
a0:2a:4b:80:83:c2:8a:5c:4d:44:97:cb:7a:8e:c7:0b:92:61:
2e:52:09:eb:f6:24:c8:b3:0f:ea:15:32:d1:46:e2:39:cc:74:
bc:7e:46:64:b7:00:51:13:d9:c3:c9:41:e3:b8:5b:b9:b5:47:
ce:98:78:84:bf:93:83:aa:db:d9:77:ed:c1:ad:80:c2:37:d0:
72:c3:50:f0:08:7d:34:7d:14:71:d6:90:a1:5c:6c:f5:76:2e:
30:78:83:42:83:ca:48:d6:ae:82:bd:c3:57:3d:b0:ee:7e:5c:
ea:11:33:cb:e9:6c:2a:e6:aa:90:bb:8c:1f:a4:2b:1c:bb:e9:
01:8f:94:64:8f:8b:33:e8:c0:d1:5a:b8:f8:ae:c3:09:d3:af:
6c:9d:d3:44:d2:a5:21:80:bb:dd:2b:31:8f:fe:eb:40:fb:0b:
a8:b9:7d:f1:73:37:1e:61:e1:a4:4b:fc:fa:68:85:3e:10:6a:
4a:13:ce:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAaEcVSsizZX2IN6LRevHUpPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTYyNTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmYzNzYxMTUzMGVhYWE5NTk2ZTY4YzQ2N2IyNTM5OTJhNGNlN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK41e5bE9sKIpFYyG6Vh274ylxjZ
9LqwiZvI4FjPx1SRJtzMtS6oBrkGp3Lvqhk/E7MKKtnbwoKL5jP7+AesmqeuKTNL
lXuBJh6zAsnplBnkhFuXon0Y8l4XGkniYb/Hoj8VTgIl85tAl7L1HJNx9TpRUj81
+daJX9Fu7e6hRf+c1mkVMtuCOglI1NNRuSVyeKvxGUJnAWM+H594jm2z5u9DQqbM
Wm0owbnFo0j2U1lkllfxoKdkYGeZkiZ58P5Wor/sY+IgKklVy4yPLLeitg7enVcg
kNp54frqXlV0lxwrCafKXe9nzo3YWONhl/eG7PtHO8U9ksUP3xzgS+HorwIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFALzdhFTDqqpWW5oxGeyU5kqTOfDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzVkODhi
OC1hN2QyLTQ1NzQtOWRiMC03MDNmZTU0YzBiMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNWQ4OGI4
LWE3ZDItNDU3NC05ZGIwLTcwM2ZlNTRjMGIzNS8xL0F2TjJFVk1PcXFsWmJtakVa
N0pUbVNwTTU4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQEgWVAAwQEoAXQAwQEqHGAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRgKs6MtBBUl8RePqlatf7hTrS/0pIpXSVMiOvJvzHlPEM0YIex2yq
rybWuRoL0J1pp2eSPN9aTeQ+rAepYG/XdNeGC4aV9a6gKkuAg8KKXE1El8t6jscL
kmEuUgnr9iTIsw/qFTLRRuI5zHS8fkZktwBRE9nDyUHjuFu5tUfOmHiEv5ODqtvZ
d+3BrYDCN9Byw1DwCH00fRRx1pChXGz1di4weINCg8pI1q6CvcNXPbDuflzqETPL
6Wwq5qqQu4wfpCscu+kBj5Rkj4sz6MDRWrj4rsMJ069sndNE0qUhgLvdKzGP/utA
+wuouX3xczceYeGkS/z6aIU+EGpKE86n
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:41 2026 by rpki-client