Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer (raw, json)
Hash identifier: 5HDSO8DrdBOypIeKDvTd7VTwTKHfwKDKsbq+IBbou/w=
Subject key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B360C3F173EC7507D7F84F5022AD2E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205854
IP: 185.185.188.0/22
IP: 2a0b:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:0c:3f:17:3e:c7:50:7d:7f:84:f5:02:2a:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:86:8e:a9:26:ef:4b:9d:1e:63:71:c3:dd:
15:ee:2c:f1:22:bb:8a:a7:8d:c9:12:91:36:57:1f:
b6:a3:e9:9f:3b:55:97:ea:b5:6a:04:20:1d:bf:e7:
b4:35:fa:a6:fd:99:28:47:95:29:d6:51:93:9f:28:
cb:37:51:df:94:8d:c0:1e:56:12:52:92:85:52:4b:
15:a2:47:25:04:b8:19:35:c0:5b:ff:14:0f:9b:4c:
49:05:4e:43:b6:26:b5:59:fb:e9:44:cd:84:a8:9e:
ad:04:0f:82:cb:4f:02:08:20:51:b7:e7:e5:26:9c:
0a:6c:61:65:fd:22:cd:30:c2:3a:35:c2:35:de:9a:
ab:41:eb:5b:ef:3f:bf:86:a2:b6:07:e4:87:c9:9e:
65:61:52:d7:db:aa:ef:70:bb:c7:b9:a3:b8:10:0b:
43:90:0d:d1:cd:53:b8:27:db:33:55:75:ee:31:76:
c8:67:a0:e5:d4:d5:4d:12:c9:c2:6a:0a:f5:01:32:
aa:6f:fe:36:f0:ae:84:d9:f4:d2:7c:ca:16:d8:2c:
67:9b:87:18:ed:65:85:31:7c:e9:d2:95:27:f9:78:
a8:17:7f:47:f8:89:36:d1:be:18:a5:a1:d0:5e:37:
81:8a:3f:fd:a1:df:77:f7:e8:ec:4a:90:dd:ff:89:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.188.0/22
IPv6:
2a0b:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205854
Signature Algorithm: sha256WithRSAEncryption
46:f4:ff:0b:e2:fe:eb:fd:24:f0:85:0e:2f:91:37:67:a8:50:
5b:2c:a4:a3:11:42:e6:b5:86:c9:14:86:86:60:f1:37:be:05:
7e:38:15:2d:1f:5f:27:7e:33:0b:d6:c2:53:d0:3a:1b:74:a4:
33:e8:3d:9c:08:b1:9e:af:49:3e:30:8b:53:ea:e2:cc:23:3c:
0e:a2:b7:c9:e5:8f:9b:66:3e:63:c0:f8:60:10:96:96:61:7c:
8c:c0:a2:a7:c6:b1:c7:83:4c:0b:2d:11:e7:d2:58:d5:b6:d5:
a1:b9:17:08:1d:a9:4b:6a:96:db:33:ff:e7:e7:e3:c1:ae:26:
6e:d8:5e:84:8d:a5:95:29:ca:22:8d:62:fc:f8:cb:87:56:8a:
92:3c:f1:6e:f7:5a:29:7b:ba:49:4d:11:f5:d0:7f:6c:69:45:
b1:61:76:02:2d:16:2a:a1:6f:7c:5b:5c:55:58:08:7f:ec:4e:
7d:39:12:d2:be:01:fe:94:81:2d:9e:f7:34:bf:4c:9d:98:a1:
7c:b8:60:bb:3d:8e:d5:cb:c2:04:73:a1:da:5f:b5:d2:1c:41:
5a:bb:71:8b:66:e9:79:dd:f0:47:34:68:34:46:f2:bd:89:f0:
6a:07:56:10:e2:f2:fd:a7:b0:2b:90:ea:86:47:a7:34:b7:96:
bc:2e:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:43 2026 by rpki-client