Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.cer (raw, json)
Hash identifier: XDKnFaYRkYrfdX5nexYi4F7fgEA9mgE5VSlMxr+EZ0w=
Subject key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE2DEA1BD96DE2FC820F3F5E7A33E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41458
IP: 91.201.170.0/24
IP: 94.229.0.0/20
IP: 185.50.132.0/22
IP: 195.3.164.0/22
IP: 2a02:de8::/32
IP: 2a10:4fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:2d:ea:1b:d9:6d:e2:fc:82:0f:3f:5e:7a:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:ac:d2:22:73:03:65:f4:81:c7:2a:bc:e2:
7a:72:e7:77:0c:5d:9f:98:bc:71:ed:96:59:39:14:
08:a9:f9:19:5a:38:c4:f9:54:36:95:37:87:d3:c7:
16:48:3a:c3:f1:76:70:35:26:0b:d8:de:a7:77:5f:
30:35:ac:f9:d0:83:74:06:f2:98:ac:1a:11:22:7e:
8b:cd:f1:93:04:e6:38:ed:b0:94:d8:fd:c5:b4:30:
18:33:06:94:c2:00:2b:c4:b1:76:cd:b4:b3:97:af:
7b:7e:5c:18:7b:93:29:de:02:58:85:dc:a9:f2:63:
54:1b:df:22:b8:7c:4e:89:07:07:c5:e1:c1:8d:66:
22:70:fd:95:7e:19:51:0f:91:1b:dc:1a:89:11:47:
47:4f:04:07:47:a7:e8:52:ef:23:b0:14:d0:25:a6:
cc:82:b7:66:c0:5c:05:03:72:b8:2c:41:46:ae:c5:
1e:75:2e:55:95:fa:ee:83:da:2d:ea:c2:19:a9:26:
e7:3f:1b:50:5e:5c:db:1c:e0:0d:79:54:8f:73:ef:
0e:ac:c3:0d:3f:5a:4c:d4:21:70:b5:d8:f7:8f:97:
bf:9d:8c:46:3c:40:4d:eb:19:1b:d6:47:31:45:b1:
bb:02:db:2a:f7:c3:22:42:e4:98:40:a1:e7:c0:06:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.170.0/24
94.229.0.0/20
185.50.132.0/22
195.3.164.0/22
IPv6:
2a02:de8::/32
2a10:4fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41458
Signature Algorithm: sha256WithRSAEncryption
26:18:1f:45:1b:91:cc:6d:01:ba:5c:ed:7b:56:25:26:52:58:
ba:af:5f:de:2f:71:d8:ac:88:06:a8:82:d4:f7:69:7a:9b:00:
fd:9f:83:ed:85:f3:e5:be:ee:9b:f2:19:25:ac:39:ea:00:3d:
8a:6c:30:54:73:7a:68:1e:1e:ad:ce:59:3c:d5:d2:b0:27:c3:
fe:ea:2e:fa:7b:da:0c:6a:a6:a5:d2:43:ed:ba:a4:6a:81:c0:
15:12:5a:5c:85:5e:e3:a8:c9:0e:93:73:f1:8e:7f:2b:4c:fe:
a9:c4:0f:8f:20:e8:5b:95:1f:ef:6e:df:78:aa:96:d7:aa:ad:
5f:b8:8f:11:b1:19:32:8a:d3:6d:bb:55:0b:b8:21:d3:b1:c4:
3c:53:d8:20:b2:2f:4d:e2:bf:05:df:16:12:4d:f8:85:fc:66:
16:24:29:89:3f:b4:66:f9:d2:ce:e7:93:36:26:ee:f6:66:13:
af:09:b7:70:f8:a7:b6:dd:a2:50:1b:31:4a:10:da:93:ac:2b:
fe:ff:4f:fb:4f:1c:e9:32:fc:ac:ea:b6:6f:91:15:fd:66:cd:
d8:60:d0:ce:06:85:f9:7e:c4:5f:2c:4f:4b:66:4a:26:1c:37:
7f:ac:0a:64:ef:cc:71:e4:7c:fc:06:46:85:5e:3d:36:8f:51:
4b:f3:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:10 2026 by rpki-client