Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
File: AaujuyNnrFyrFjFdq3PzzXvKLkk.cer (raw, json)
Hash identifier: 8fDKf03SIOAQezN27YRdW7ZZw6jJS9H3UoLnLQGsTwk=
Subject key identifier: 01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F23318D5FF528739BAA85F7C82B5E2E33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jul 2026 14:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31628
IP: 95.215.52.0/22
IP: 194.106.192.0/23
IP: 195.93.202.0/23
IP: 195.234.40.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:31:8d:5f:f5:28:73:9b:aa:85:f7:c8:2b:5e:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 14:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01aba3bb2367ac5cab16315dab73f3cd7bca2e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:07:fc:f3:49:fb:1a:bf:e4:21:12:d1:7f:
26:39:d5:5e:d0:a9:da:e7:76:f2:2a:fd:35:c2:ca:
88:0a:7a:e2:d7:6f:e2:80:92:45:52:48:49:71:84:
fe:ab:bc:8a:ee:41:e1:5d:98:1d:7f:45:5c:02:a4:
8f:25:a0:44:e2:0d:c7:47:00:66:25:b3:0d:95:0b:
4c:da:4d:5a:03:e1:94:78:47:0c:65:65:4b:30:f1:
39:c4:8e:7b:f7:5c:00:b4:f1:ce:fe:72:86:26:a7:
0c:6f:c5:ab:78:f4:2a:ce:d6:c5:38:18:92:59:e1:
d4:c9:9e:b3:57:fb:59:50:39:ed:04:75:07:d5:68:
9b:a1:f7:74:f9:95:8e:92:e8:d6:6c:2b:d0:33:57:
04:08:1a:18:40:8d:e1:37:f9:8a:ca:fb:7e:6e:34:
f7:e2:a2:de:6e:d2:d0:64:46:f7:da:51:86:0c:77:
35:10:49:d5:8c:03:57:1d:84:98:41:a7:e5:54:56:
48:9f:77:85:d3:7f:c6:24:8e:98:4e:7d:04:c2:f5:
e4:38:5f:29:1b:81:d9:e3:9d:18:c2:c0:7f:4b:de:
98:f8:48:01:1d:b1:21:65:8f:d8:12:a0:77:ac:33:
c4:a9:ef:3d:67:55:f8:33:6b:98:af:6c:e7:18:da:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.52.0/22
194.106.192.0/23
195.93.202.0/23
195.234.40.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31628
Signature Algorithm: sha256WithRSAEncryption
78:7d:2b:04:c7:d3:45:dd:5e:3f:91:f8:ac:2a:11:0e:f0:82:
cf:83:fb:7e:3f:c1:68:8d:06:71:22:a8:42:a8:83:d4:96:85:
7e:4a:96:9f:58:eb:6a:57:a1:5c:2c:1c:b9:b8:4a:ee:6c:83:
e8:33:45:b0:fb:5f:17:25:62:85:a2:cc:2a:bf:ff:44:c3:7c:
5f:73:64:e6:0f:82:de:97:a0:55:f1:32:42:1c:60:bf:48:e6:
66:48:39:ab:c8:14:63:4f:90:93:4d:36:86:7f:ed:87:bb:05:
20:e9:56:52:a2:c9:c3:9e:7c:20:4d:53:bd:2d:42:74:aa:fc:
83:6e:1e:3d:59:b6:b5:e3:21:45:2a:f2:e8:33:f1:10:eb:78:
6c:a9:76:57:f5:10:c2:6d:a7:3c:ff:b6:9f:0d:48:07:10:15:
2e:01:d8:4e:fe:7c:7f:15:3c:9e:f1:38:fd:33:20:3c:35:3b:
23:fc:45:bd:57:4b:cc:fc:2f:a6:cc:ea:cb:9c:0a:fe:db:0f:
4a:a1:eb:de:44:83:46:5b:21:11:0e:cc:35:b4:12:a3:c3:44:
ff:b5:e4:75:89:7d:60:33:c3:dc:d5:f5:f8:52:aa:65:df:a1:
b4:60:51:31:c8:9f:c6:62:85:fb:44:52:db:46:e6:88:32:2e:
fe:25:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:01 2026 by rpki-client