Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
File: AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer (raw, json)
Hash identifier: 4QOpXMB9WmmSbg/Ol57Z3H/DyEw5a42871uosOjmEhY=
Subject key identifier: 01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A03E60B26CC22D1196405B2BADFBF3F014
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Aug 2026 14:01:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.107.50.0/24
IP: 2a0e:f580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:b2:6c:c2:2d:11:96:40:5b:2b:ad:fb:f3:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 26 14:01:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:ab:12:e3:65:5d:2b:0c:49:0a:cc:cd:3f:
71:bc:57:02:dd:ed:89:26:1c:68:5c:34:00:78:42:
9e:ba:5a:4b:69:f3:35:2c:ad:c9:a8:8b:56:e6:dc:
fa:c3:89:df:8b:51:e5:dd:f6:d5:0b:32:22:69:31:
66:23:ad:6e:f2:1d:da:9f:ea:bd:39:45:be:80:fe:
19:54:b3:27:2a:82:40:03:e1:e8:8c:cd:e8:45:e2:
d1:ae:ef:92:17:f6:91:b9:51:b4:9c:eb:ed:c6:4c:
6c:57:55:11:e7:22:f1:8a:2a:a2:9a:6e:2f:e6:e0:
67:de:b5:6d:df:e5:74:8b:a9:04:bf:ae:7e:7c:cc:
bf:59:4c:8a:62:09:2e:7f:d8:3a:d6:3f:93:f6:ef:
e1:0d:f2:a3:67:9d:c5:d2:dd:3c:0f:c7:26:bb:ac:
1c:af:3f:01:12:06:5e:3a:51:eb:38:30:c2:06:0d:
f3:fc:b7:5f:01:85:1d:3c:5f:07:09:fc:c3:24:54:
97:51:fa:6e:6b:92:9f:6c:a6:ea:dd:2b:7f:94:a5:
ef:11:78:f9:5b:ab:da:16:08:fa:96:2d:7c:97:80:
d4:cc:a3:5e:ef:b5:c1:5c:05:32:e4:42:d3:98:9e:
f7:7f:39:10:89:37:02:62:58:89:2e:76:64:fc:bd:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.50.0/24
IPv6:
2a0e:f580::/32
Signature Algorithm: sha256WithRSAEncryption
43:ce:83:4f:bd:35:a2:24:22:0b:94:41:bb:04:f8:69:58:86:
35:74:2e:e3:f0:ee:b3:d7:b9:35:0f:b9:43:63:3e:e7:61:ea:
12:6a:d2:e4:c5:43:9d:98:96:4c:33:3f:99:ac:3e:4d:37:65:
37:4f:84:47:0b:93:95:52:ca:3b:43:e6:21:c1:e9:80:9a:88:
78:12:d8:44:e1:cf:ce:86:b4:6a:0f:35:53:81:06:8f:d3:3c:
6e:66:01:a5:2c:1a:25:c7:00:8f:56:25:11:0a:a9:fd:82:e8:
b1:57:6e:b2:71:0b:02:ed:57:56:b6:a9:67:2e:01:9b:49:c4:
ea:6b:68:9a:05:95:7d:4f:47:a4:b2:58:06:3c:fa:3a:b5:09:
98:67:47:40:42:fe:47:5d:a3:91:f0:c3:fb:f4:8b:4c:9b:df:
19:37:46:e2:59:6d:11:17:21:53:ec:c2:43:29:0c:9d:08:48:
db:0f:d0:be:a4:6e:0a:47:d7:ea:40:6e:52:8a:96:57:3a:81:
41:e6:1f:af:f5:b6:8d:76:d0:d0:10:3f:7a:21:3a:49:b1:fd:
ae:a1:73:89:ec:f9:77:17:9f:4d:fd:fc:f4:28:7d:84:dc:08:
d2:8f:f9:ab:37:eb:9b:95:47:c0:a7:e2:4a:f7:85:3e:ba:2c:
ed:46:13:92
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAaA+YLJswi0RlkBbK6378/AUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODI2MTQwMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWYyM2Y1OTE2ZmIwMjdiZGZiZmIwNDY4Y2Q2ZWRjMDBhOTk0MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10qrEuNlXSsMSQrMzT9xvFcC3e2J
JhxoXDQAeEKeulpLafM1LK3JqItW5tz6w4nfi1Hl3fbVCzIiaTFmI61u8h3an+q9
OUW+gP4ZVLMnKoJAA+HojM3oReLRru+SF/aRuVG0nOvtxkxsV1UR5yLxiiqimm4v
5uBn3rVt3+V0i6kEv65+fMy/WUyKYgkuf9g61j+T9u/hDfKjZ53F0t08D8cmu6wc
rz8BEgZeOlHrODDCBg3z/LdfAYUdPF8HCfzDJFSXUfpua5KfbKbq3St/lKXvEXj5
W6vaFgj6li18l4DUzKNe77XBXAUy5ELTmJ73fzkQiTcCYliJLnZk/L3fLwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAHyP1kW+wJ737+wRozW7cAKmUA1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzNjMjZj
MS05N2FkLTQyNTYtODJkYy05NzEyOGE3MmJmMDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvM2MyNmMx
LTk3YWQtNDI1Ni04MmRjLTk3MTI4YTcyYmYwNy8xL0FmSV9XUmI3QW52ZnY3Qkdq
TmJ0d0FxWlFEVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwWsyMA0EAgACMAcDBQAqDvWAMA0GCSqGSIb3
DQEBCwUAA4IBAQBDzoNPvTWiJCILlEG7BPhpWIY1dC7j8O6z17k1D7lDYz7nYeoS
atLkxUOdmJZMMz+ZrD5NN2U3T4RHC5OVUso7Q+YhwemAmoh4EthE4c/OhrRqDzVT
gQaP0zxuZgGlLBolxwCPViURCqn9guixV26ycQsC7VdWtqlnLgGbScTqa2iaBZV9
T0ekslgGPPo6tQmYZ0dAQv5HXaOR8MP79ItMm98ZN0biWW0RFyFT7MJDKQydCEjb
D9C+pG4KR9fqQG5SipZXOoFB5h+v9baNdtDQED96ITpJsf2uoXOJ7Pl3F59N/fz0
KH2E3AjSj/mrN+ublUfAp+JK94U+uiztRhOS
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:01:15 2026 by rpki-client