Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AAniz5CpmBqSQnMbbvjPQ93hR68.cer
File: AAniz5CpmBqSQnMbbvjPQ93hR68.cer (raw, json)
Hash identifier: aG2O9mFDu2FFYSkSpzCh6rrFqQnJgAbueyam79F/74Y=
Subject key identifier: 00:09:E2:CF:90:A9:98:1A:92:42:73:1B:6E:F8:CF:43:DD:E1:47:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1304796FBD25B5DE45EBA2A3548EBE864
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/718cc8-3f20-4a88-80d7-e8a352020c2c/1/AAniz5CpmBqSQnMbbvjPQ93hR68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/718cc8-3f20-4a88-80d7-e8a352020c2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 13:22:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204414
IP: 185.249.176.0/22
IP: 2a0c:740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:47:96:fb:d2:5b:5d:e4:5e:ba:2a:35:48:eb:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 13:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0009e2cf90a9981a9242731b6ef8cf43dde147af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:62:48:0e:55:a5:4d:b7:a7:51:4f:e6:e3:
25:75:39:a6:e4:4f:4d:c1:a4:64:08:96:50:52:50:
91:02:94:42:b2:b3:63:41:3c:0f:d5:6f:6b:56:a0:
b7:de:ad:e0:b5:ff:c2:7c:ec:a7:3e:b9:d3:10:6e:
fd:35:f1:3f:9c:f8:61:e7:51:41:60:03:9a:aa:0d:
a8:bc:74:83:89:55:a6:7e:84:bf:2a:1b:fa:19:18:
da:41:f1:66:e2:f2:12:75:b7:bc:e1:fc:90:45:ae:
b9:ee:7d:c3:bc:bf:fb:de:07:b1:2b:ef:82:73:5b:
92:41:a1:3e:6f:e9:9f:fc:ad:d7:19:e1:4e:aa:38:
30:52:25:9e:16:99:fa:c2:2d:ef:8d:6e:64:1d:5f:
ef:04:00:57:0a:1c:ee:7c:83:59:54:ef:b4:7f:e4:
84:3a:1f:be:fb:1d:a2:fb:e8:ca:7b:14:70:95:d1:
c9:e1:38:09:b0:0f:f3:96:71:ac:b2:f6:93:53:86:
28:df:0d:f2:06:07:16:b9:3a:b9:c2:3a:6b:c5:bd:
94:01:db:23:5c:d1:68:7b:5d:61:c9:1e:69:68:f6:
b6:92:a4:bf:05:48:2e:cf:6a:11:9e:e4:97:fb:0e:
29:a8:39:83:6b:05:1f:a8:d1:c2:ff:4a:03:59:ee:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:E2:CF:90:A9:98:1A:92:42:73:1B:6E:F8:CF:43:DD:E1:47:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/718cc8-3f20-4a88-80d7-e8a352020c2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/718cc8-3f20-4a88-80d7-e8a352020c2c/1/AAniz5CpmBqSQnMbbvjPQ93hR68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.176.0/22
IPv6:
2a0c:740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204414
Signature Algorithm: sha256WithRSAEncryption
63:e0:5b:27:ba:68:9b:dd:82:c4:c0:be:8e:31:0d:32:ca:e2:
b5:e0:4c:f2:bd:b0:d6:2a:af:cd:2f:41:b7:ee:cc:ad:39:ce:
90:f9:f3:af:71:7f:b6:3c:5b:4d:47:ca:4b:52:7a:8c:13:5e:
7c:98:ec:ee:f5:51:56:16:ce:22:a3:d9:ad:ff:2e:cd:14:31:
6a:39:f4:ff:cc:65:45:17:a9:44:21:33:4d:0f:67:bf:a8:dc:
c6:04:55:8f:f7:9d:13:31:2f:5a:5c:8b:32:d4:d9:73:89:d6:
a9:00:3d:2b:2d:a6:51:46:f5:97:87:ff:e9:28:1e:ef:03:b3:
3d:1b:db:4e:de:13:0b:e4:64:96:ce:fe:91:84:81:30:88:e4:
a5:a9:cf:5d:c6:98:d8:f3:35:65:58:df:bf:09:f4:c6:5b:ea:
52:fa:02:fa:3a:3a:b4:1e:e2:94:c8:75:1a:fd:57:3c:4e:40:
80:8c:4b:46:e0:af:0f:ab:03:b9:24:d3:69:72:5d:e1:8b:23:
1d:a7:2f:2b:10:f5:ec:9f:79:a9:d9:6c:b7:49:f3:ef:b8:82:
92:3d:73:0c:94:f6:f9:12:ce:a3:e2:fc:27:5c:ca:e8:d5:33:
79:02:d8:83:d8:0f:18:5d:36:e3:6c:47:69:09:a8:b5:da:6d:
fb:9f:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 00:00:30 2026 by rpki-client