Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
File: AEp1iisKfpOKnw3uZCzsXkECdrU.cer (raw, json)
Hash identifier: xPaBN7QBTd17twJ1xURivqr/klI4v4gY1p/lgwnLF+Q=
Subject key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA537ED2F8C0A84562377DF34DB6D97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.160.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:37:ed:2f:8c:0a:84:56:23:77:df:34:db:6d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:14:ef:8e:82:07:e2:d0:b3:b2:9a:e8:e5:
f3:dd:2c:2d:3d:59:8c:71:90:d5:6c:9e:88:e6:4d:
89:dc:cf:4d:f8:22:4e:ce:e7:c7:cb:02:11:1b:fd:
52:8c:0e:7f:1d:03:a2:a5:7c:47:82:ab:47:85:86:
1f:47:40:7e:91:77:21:ac:31:be:b7:47:ab:95:fe:
65:bc:f9:54:b9:5f:d5:d1:79:e9:72:27:ed:27:0c:
b8:ec:3b:40:8f:0b:e7:f4:e1:1f:10:fb:1d:cd:be:
53:23:80:c4:d1:1b:2b:60:5f:9a:ed:97:22:4f:99:
ec:d3:24:5f:bb:44:48:e9:a0:bf:b1:3c:8d:c1:86:
4c:ae:f4:58:b5:8c:e0:ab:7e:04:c0:9b:ae:30:c1:
74:ae:27:2e:63:5a:40:a4:4a:91:8a:2c:0d:a7:d0:
00:03:db:4d:ba:02:79:c8:69:d2:40:86:ca:13:a4:
82:02:38:26:0c:87:3b:54:02:58:f9:34:fd:75:9e:
77:14:51:73:1e:9d:d6:dd:5e:70:34:e1:cf:ae:a4:
60:9b:f4:94:b1:6b:ad:da:17:35:d2:f7:8e:47:9a:
b2:79:7b:0b:d9:54:60:cf:dd:78:2b:3f:14:95:78:
f6:f2:57:69:b7:64:9c:f4:e9:1b:a5:b6:5d:0b:e6:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.228.0/22
Signature Algorithm: sha256WithRSAEncryption
41:d5:66:6e:d8:b5:b7:2c:6a:17:1e:0b:ca:2d:bb:2e:1a:11:
2d:07:dc:2d:75:98:a9:c9:71:53:74:4a:56:69:b0:5e:2e:72:
5b:82:e9:62:70:80:8c:06:41:c0:84:7d:05:46:81:38:a1:61:
70:3f:3e:d5:d2:3f:e4:94:be:4e:00:b9:56:a7:a8:ad:66:a1:
aa:90:f3:76:99:e2:3c:4a:b0:00:cc:bc:fb:d4:c8:9b:1f:a0:
73:e3:bd:17:93:08:cf:74:df:2d:41:df:49:8f:1f:eb:77:a6:
41:f2:77:65:79:57:fd:bd:12:0f:98:17:b3:69:7b:68:6a:f6:
82:95:b0:2b:52:60:07:18:47:e5:77:c0:ec:b6:cd:2b:16:a2:
e8:50:0f:51:d8:2f:52:65:5d:75:64:83:6a:d4:7e:ab:1c:93:
52:73:05:8b:80:f0:48:13:e0:9a:e5:e7:c8:9f:ac:70:a7:3a:
e8:9f:e1:f3:1d:89:d3:53:ca:7f:e7:04:5e:6f:56:a9:60:e8:
0d:b2:df:30:62:9d:3d:95:d4:26:13:4d:fa:07:80:3d:ca:0e:
a7:d2:15:c3:17:69:42:76:2b:6b:af:5b:13:da:6e:01:70:93:
1f:7e:02:ff:9c:11:22:cf:6c:9b:41:18:95:40:5c:ad:30:61:
0c:b2:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:06 2026 by rpki-client