
Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AS6L8tySEw8H20sWG38oiXuLNBU.cer
File: AS6L8tySEw8H20sWG38oiXuLNBU.cer (raw, json)
Hash identifier: hhrX/FMXLeZPwydYdMzFt0kgy/7hzQD5gEoGriY2ZEk=
Subject key identifier: 01:2E:8B:F2:DC:92:13:0F:07:DB:4B:16:1B:7F:28:89:7B:8B:34:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00077A0607DD6A820E91D76FD6EBCC3DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/0/012E8BF2DC92130F07DB4B161B7F28897B8B3415.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Aug 2026 13:30:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219015
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:77:a0:60:7d:d6:a8:20:e9:1d:76:fd:6e:bc:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 13:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=012e8bf2dc92130f07db4b161b7f28897b8b3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:e8:f3:10:d0:f0:5d:55:1c:27:1a:e3:87:
b2:2a:e4:c1:07:ed:a3:68:f5:60:1f:5f:b8:73:7b:
e3:4a:4f:a5:bf:0d:c1:63:0d:75:ee:c6:a4:4e:ad:
13:2e:88:3c:ce:df:5c:c3:b6:4d:99:39:72:83:db:
eb:5c:1c:ce:22:21:8f:bb:34:57:84:f1:c7:1f:4e:
11:3e:46:91:a6:bf:63:e2:a4:d3:b3:36:7c:2a:f4:
11:fa:59:2c:03:20:62:8a:22:79:d6:00:3e:c5:81:
fa:8a:28:b1:9f:e0:b2:c9:bd:b0:96:13:80:a7:0d:
92:8a:41:32:3a:ea:5a:df:67:0b:f0:5d:50:4c:f7:
00:4b:52:c3:bf:da:59:c6:f0:b9:64:80:5a:6b:96:
06:b6:0a:c2:37:60:ff:58:44:72:e8:9f:a1:42:5b:
54:dc:51:fc:df:cf:e4:13:7b:89:76:68:cb:ef:01:
49:81:1e:87:b9:31:14:77:97:de:d0:e5:fb:11:dc:
65:7a:20:36:c6:6a:bf:7a:84:6d:ee:ce:75:04:fc:
48:71:2c:3e:a2:11:0d:6f:23:81:e9:7b:49:38:b4:
ef:7d:f4:aa:3d:3f:68:df:57:63:3d:b9:fa:42:35:
ff:a0:dc:11:ad:ef:47:19:8a:69:59:46:bd:85:2b:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:8B:F2:DC:92:13:0F:07:DB:4B:16:1B:7F:28:89:7B:8B:34:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/0/012E8BF2DC92130F07DB4B161B7F28897B8B3415.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219015
Signature Algorithm: sha256WithRSAEncryption
16:55:f3:f1:df:a8:18:ea:3c:e7:c1:d8:2c:05:59:ef:c9:16:
11:5d:ee:99:d6:d9:c5:69:90:87:36:aa:34:32:98:c4:39:b0:
7e:44:28:11:05:0f:8d:1d:9e:81:c1:df:37:ff:1c:3e:bf:7f:
0b:17:86:6d:88:a7:d0:2d:7d:f5:4d:ed:41:a2:07:f2:03:61:
b9:d1:75:da:34:56:f5:cc:ee:94:ff:42:71:e3:6f:a9:c0:76:
c6:4b:9d:79:10:05:a3:20:e2:e9:6e:45:c4:ba:e9:48:86:79:
6a:aa:67:60:06:ac:5a:84:95:4f:a3:6a:af:f9:61:79:78:ac:
3a:5c:b2:ae:84:26:98:d0:5d:76:c0:0b:fe:bf:ce:da:ee:c1:
45:4e:9e:eb:3e:96:82:11:b7:84:18:70:e8:b7:6d:bd:d6:1c:
b4:07:4e:67:e5:cc:6f:f0:8d:2e:e7:e9:9c:ab:1f:4c:40:d0:
5e:59:17:38:ac:19:25:96:fd:5b:03:b2:65:2c:e3:e0:17:88:
9d:fb:c9:a6:9d:a7:9f:71:04:c5:b1:80:70:cf:e9:a2:d7:70:
c9:bc:2a:5d:bb:41:2e:ff:76:9f:13:92:cf:0a:2b:ff:91:38:
9f:9c:5e:47:1c:12:92:75:63:f4:e2:f4:0d:66:fa:cb:ee:d8:
2e:17:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:22 2026 by rpki-client