Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
File: AAydVUKlqozV4BmKuD_OD5RypGE.cer (raw, json)
Hash identifier: t6C4HPnkVwXj6pnZ+Anp7aVKxZGI8jTa7/Jeoo8jTFM=
Subject key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B775882A10ADE0CC03BE8A73998DEE11D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209682
IP: 95.214.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:82:a1:0a:de:0c:c0:3b:e8:a7:39:98:de:e1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:ad:3f:ac:14:5d:41:fd:64:10:79:47:8e:
12:4d:a6:3e:41:f9:c3:ef:c7:0b:42:3c:34:92:94:
e8:e5:b8:f1:f9:9d:3e:0b:20:fd:b8:f1:69:bd:fd:
c7:91:09:8e:14:fd:e3:1b:2f:a6:0f:41:21:f9:1a:
1e:b3:8b:24:68:f9:d9:87:73:44:84:6a:95:72:c3:
02:13:75:dd:17:34:7c:40:07:54:ed:13:06:d6:17:
5a:d5:de:ed:cb:31:df:39:e6:4a:7f:06:f2:50:db:
aa:5b:41:89:1f:e4:a6:18:d6:31:d6:43:67:34:b6:
7f:ef:ea:fb:f4:a8:25:a8:d3:47:f4:e2:74:e2:39:
6d:40:4e:c1:ba:eb:d7:34:8f:42:47:83:13:dc:1f:
36:a5:32:7f:ea:fc:29:67:8b:51:88:bb:3b:4f:a2:
01:dc:6a:22:53:7b:d6:b2:37:ea:35:03:3d:4f:66:
19:b9:2c:06:96:01:3c:78:b1:3b:e9:a2:58:46:34:
b9:57:6d:37:3d:0a:8b:73:9d:ff:77:8f:3c:c0:31:
12:39:92:a9:49:05:b8:49:46:ea:d9:a0:0a:f2:1a:
52:3e:4c:6e:e2:2e:71:70:dd:76:f4:ab:a3:50:5c:
ee:d2:7c:e5:76:53:64:e3:0d:1e:d3:55:2e:e4:91:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209682
Signature Algorithm: sha256WithRSAEncryption
28:d0:22:53:d4:b8:2a:0f:16:9e:c3:0b:2b:41:5c:6c:b0:f5:
76:7b:5f:cf:78:e5:fa:96:fe:5d:87:6d:cd:67:f7:70:27:9f:
55:33:a1:e9:55:0f:18:b2:98:30:55:22:cb:73:6f:9a:b2:55:
7b:92:86:dd:09:77:a0:70:22:47:7e:c5:5f:8f:37:c3:03:82:
9d:c1:15:0d:d7:a3:01:83:b3:54:19:cf:27:de:5e:9e:48:1c:
fa:c6:e9:1f:6e:49:a1:78:93:48:de:97:2c:53:00:15:af:bb:
9b:da:c8:a4:ff:80:e3:91:38:5e:c5:b3:b4:0f:43:9b:b4:0a:
ca:8c:be:97:50:4d:ac:41:51:b2:08:3e:c2:f4:9f:fa:10:de:
fb:6b:d5:aa:94:d1:17:35:dd:99:6a:78:41:42:32:da:72:d0:
15:51:88:5f:3e:77:3c:76:23:7a:f0:55:94:d9:df:f1:01:a5:
e8:35:fe:fb:dc:11:d6:39:15:e2:88:9e:d1:f9:b1:04:d4:bb:
65:c0:dc:78:ba:b5:d1:65:77:e6:01:4b:66:de:ad:51:be:e9:
ed:68:6e:7a:b9:7d:24:4e:08:78:64:4a:88:3f:b8:c9:1b:8c:
a6:ac:ef:78:3a:e3:92:41:fa:cb:d8:43:de:fc:82:d5:ac:a1:
c9:86:28:75
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZt3WIKhCt4MwDvopzmY3uEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDBjOWQ1NTQyYTVhYThjZDVlMDE5OGFiODNmY2UwZjk0NzJhNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOCtP6wUXUH9ZBB5R44STaY+QfnD
78cLQjw0kpTo5bjx+Z0+CyD9uPFpvf3HkQmOFP3jGy+mD0Eh+Roes4skaPnZh3NE
hGqVcsMCE3XdFzR8QAdU7RMG1hda1d7tyzHfOeZKfwbyUNuqW0GJH+SmGNYx1kNn
NLZ/7+r79KglqNNH9OJ04jltQE7BuuvXNI9CR4MT3B82pTJ/6vwpZ4tRiLs7T6IB
3GoiU3vWsjfqNQM9T2YZuSwGlgE8eLE76aJYRjS5V203PQqLc53/d488wDESOZKp
SQW4SUbq2aAK8hpSPkxu4i5xcN129KujUFzu0nzldlNk4w0e01Uu5JG6twIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAAMnVVCpaqM1eAZirg/zg+UcqRhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzE5ZDg2
Ny1mZDM5LTQwOWUtYjIwYS1kZGNjMjU4ODExMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMTlkODY3
LWZkMzktNDA5ZS1iMjBhLWRkY2MyNTg4MTEyOC8xL0FBeWRWVUtscW96VjRCbUt1
RF9PRDVSeXBHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCX9ZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMzEjANBgkqhkiG9w0BAQsFAAOCAQEAKNAiU9S4Kg8WnsMLK0FcbLD1dntfz3jl
+pb+XYdtzWf3cCefVTOh6VUPGLKYMFUiy3NvmrJVe5KG3Ql3oHAiR37FX483wwOC
ncEVDdejAYOzVBnPJ95enkgc+sbpH25JoXiTSN6XLFMAFa+7m9rIpP+A45E4XsWz
tA9Dm7QKyoy+l1BNrEFRsgg+wvSf+hDe+2vVqpTRFzXdmWp4QUIy2nLQFVGIXz53
PHYjevBVlNnf8QGl6DX++9wR1jkV4oie0fmxBNS7ZcDceLq10WV35gFLZt6tUb7p
7Whuerl9JE4IeGRKiD+4yRuMpqzveDrjkkH6y9hD3vyC1ayhyYYodQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:07 2026 by rpki-client