Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
File: ANK417oWAu9cE23Tn_aLK9s6hMI.cer (raw, json)
Hash identifier: rjUKNLhRc79shv5xEsF0WAOCalJHOsY2nNLpC8wZNM8=
Subject key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CAFF48AC7014E59F08D90ECDA1BA8B111
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 19:09:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203365
IP: 185.136.196.0/22
IP: 2a06:fe80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:f4:8a:c7:01:4e:59:f0:8d:90:ec:da:1b:a8:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 19:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:66:e9:d6:9e:d2:56:fe:f6:73:e8:ac:32:
b0:50:bd:ea:e7:07:4f:31:c1:e7:47:af:4c:0b:7e:
cc:77:dc:7d:64:b4:30:de:14:48:3f:8e:f9:9b:6b:
29:8f:02:4f:48:1e:a6:fb:10:56:50:b5:30:4b:37:
1a:22:0d:a3:18:a4:bf:5b:a4:9f:94:d2:d5:ab:dc:
2f:1d:b6:84:38:96:e4:8a:07:08:99:7a:c6:7e:b0:
d1:f4:35:fe:9c:7d:5b:84:53:07:ea:ee:11:4f:02:
49:b1:b5:62:2b:a5:e6:2f:b7:87:49:8f:19:ee:13:
67:be:5d:1f:94:ed:ce:cc:ca:75:89:12:3e:1e:54:
04:7b:4e:c0:44:1a:20:ce:fa:b6:a7:ea:9e:a0:8c:
d6:24:05:c1:d2:2a:a4:a1:fa:5c:25:5b:8a:1c:42:
1d:ff:75:c2:44:eb:ec:7d:27:ef:7c:b7:a2:0f:4c:
a9:d6:93:97:c7:a4:45:7a:fe:c6:25:f3:0e:73:68:
cc:41:19:c4:4c:a6:3a:85:3a:9e:75:c9:28:88:73:
5c:e9:2a:c3:d1:2f:90:f8:a8:8d:3b:68:80:59:90:
a6:bf:1c:e5:4b:f1:d2:87:cf:3d:e1:1f:95:0f:1e:
66:74:66:19:84:7e:1e:b6:54:41:17:2f:72:f6:c2:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.196.0/22
IPv6:
2a06:fe80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203365
Signature Algorithm: sha256WithRSAEncryption
51:a2:87:ef:f8:fc:4d:2b:b0:f1:69:2f:2e:ce:70:85:35:86:
bc:2f:ff:73:a6:cc:09:7c:23:ed:d9:0a:c0:56:46:ef:30:be:
7b:65:fe:f0:27:fb:74:01:d0:44:77:e8:ed:c4:30:3b:4c:c9:
22:66:03:6f:b4:e3:a3:a2:83:03:8c:17:c1:2e:31:8e:c4:9c:
84:2f:26:15:76:fb:08:a0:ab:a5:00:44:a5:01:00:59:a9:7e:
6c:eb:c1:c9:0d:e2:b6:4d:58:9e:fb:fa:0b:5d:04:41:23:8e:
29:b0:0c:85:ba:14:1a:f1:eb:8c:19:90:1e:21:07:64:89:fb:
54:d6:78:ad:0a:94:86:0b:e2:9d:78:60:8d:92:75:82:96:1a:
a0:63:57:58:b3:a1:2f:34:c2:33:e6:04:b5:c6:e0:40:3b:a7:
5a:bd:e4:fe:c1:d0:24:be:88:ec:12:d1:2f:8a:01:dc:b2:fe:
04:78:5d:49:56:96:a7:8d:14:8e:e4:4f:7a:d6:1a:36:a9:f9:
35:75:d1:9c:8a:7c:07:7e:12:5c:fd:69:cd:fd:38:a7:aa:29:
f9:85:6c:5b:44:0c:e9:da:83:42:a3:13:6f:5a:ed:04:f3:fd:
be:f3:e3:ea:6c:76:09:bf:c0:b0:dc:7b:b6:cd:db:f1:ec:2e:
c6:c6:53:de
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZyv9IrHAU5Z8I2Q7NobqLERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzAyMTkwOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQyYjhkN2JhMTYwMmVmNWMxMzZkZDM5ZmY2OGIyYmRiM2E4NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFpm6dae0lb+9nPorDKwUL3q5wdP
McHnR69MC37Md9x9ZLQw3hRIP475m2spjwJPSB6m+xBWULUwSzcaIg2jGKS/W6Sf
lNLVq9wvHbaEOJbkigcImXrGfrDR9DX+nH1bhFMH6u4RTwJJsbViK6XmL7eHSY8Z
7hNnvl0flO3OzMp1iRI+HlQEe07ARBogzvq2p+qeoIzWJAXB0iqkofpcJVuKHEId
/3XCROvsfSfvfLeiD0yp1pOXx6RFev7GJfMOc2jMQRnETKY6hTqedckoiHNc6SrD
0S+Q+KiNO2iAWZCmvxzlS/HSh8894R+VDx5mdGYZhH4etlRBFy9y9sJOBQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFADSuNe6FgLvXBNt05/2iyvbOoTCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzQ2MTg0
ZC0zZTVlLTRlNTQtOGUwNS01NjVmZjIzNzQ0N2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNDYxODRk
LTNlNWUtNGU1NC04ZTA1LTU2NWZmMjM3NDQ3Zi8xL0FOSzQxN29XQXU5Y0UyM1Ru
X2FMSzlzNmhNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYjEMA0EAgACMAcDBQMqBv6AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaZTANBgkqhkiG9w0BAQsFAAOCAQEAUaKH7/j8TSuw
8WkvLs5whTWGvC//c6bMCXwj7dkKwFZG7zC+e2X+8Cf7dAHQRHfo7cQwO0zJImYD
b7Tjo6KDA4wXwS4xjsSchC8mFXb7CKCrpQBEpQEAWal+bOvByQ3itk1Ynvv6C10E
QSOOKbAMhboUGvHrjBmQHiEHZIn7VNZ4rQqUhgvinXhgjZJ1gpYaoGNXWLOhLzTC
M+YEtcbgQDunWr3k/sHQJL6I7BLRL4oB3LL+BHhdSVaWp40UjuRPetYaNqn5NXXR
nIp8B34SXP1pzf04p6op+YVsW0QM6dqDQqMTb1rtBPP9vvPj6mx2Cb/AsNx7ts3b
8ewuxsZT3g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:40:05 2026 by rpki-client