Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
File: Afg1dg4UKs6kvwp_-K52do9dzcc.cer (raw, json)
Hash identifier: utlN6ukdTz4Aag1U9FZLgdRsbZb6v1rIckNKkxchh5g=
Subject key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA59B3544F900BC377F43053793890
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8898
AS: 60241
AS: 200898
IP: 185.1.53.0/24
IP: 185.34.60.0/22
IP: 185.120.128.0/22
IP: 198.52.44.0/22
IP: 2001:7f8:8c::/48
IP: 2a04:5d00::/29
IP: 2a06:9a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:59:b3:54:4f:90:0b:c3:77:f4:30:53:79:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:a7:2e:dd:e7:fa:ef:ee:c5:f1:1a:6f:dc:
1c:58:40:98:7d:14:7c:70:a8:d0:15:34:73:5a:eb:
2e:28:49:7f:4e:97:ba:da:c2:1a:b9:d4:dd:97:ca:
f8:7c:d7:4b:5c:be:54:9d:e3:53:2e:92:74:c0:47:
26:a4:87:a5:0b:e0:b4:ad:37:6b:07:8a:84:86:96:
41:d5:98:7f:20:c5:32:e0:a4:aa:32:4f:0d:45:d8:
37:6d:fa:a4:45:b0:7d:c5:94:9b:64:58:cc:b0:6c:
43:c9:c2:46:5c:59:95:48:d0:ad:0a:6c:0d:36:ce:
b1:8b:f2:45:38:94:8e:de:e2:34:80:d9:0f:28:d3:
12:03:da:b2:e0:44:d1:3e:d0:6c:d7:60:62:b9:68:
09:51:c9:3c:23:5b:cd:27:a9:fc:7b:c4:2f:98:11:
9f:a2:55:a8:63:ad:5e:eb:e4:23:94:94:f6:6e:d4:
69:09:00:d7:2d:fa:23:96:06:8e:42:94:61:7a:ef:
d0:1e:f3:34:23:67:4a:a4:3a:fa:97:ca:1f:df:22:
b4:c2:a8:f9:41:c6:eb:81:e5:19:55:b5:2d:92:06:
6e:2c:cf:b8:6d:5c:9d:07:36:03:f2:51:08:87:49:
01:61:6e:54:d1:06:b2:ad:d9:1f:6a:13:79:ff:73:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.53.0/24
185.34.60.0/22
185.120.128.0/22
198.52.44.0/22
IPv6:
2001:7f8:8c::/48
2a04:5d00::/29
2a06:9a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8898
60241
200898
Signature Algorithm: sha256WithRSAEncryption
b1:6e:d0:ee:ea:28:a5:44:61:d1:22:80:06:80:16:ca:d6:ab:
26:9d:c7:65:be:46:ac:5b:d0:43:bb:b8:b4:28:42:4d:00:1b:
cc:5d:73:eb:3d:e4:a1:2c:03:ba:67:ca:4f:7f:84:3b:2a:89:
29:89:ff:8d:5e:3e:da:59:87:84:fb:c4:ac:a4:87:0c:e9:c6:
bb:6f:97:98:73:e8:e3:b4:b2:2c:f4:43:e4:e4:75:33:ca:0c:
4f:48:e6:db:b4:c4:8c:3a:4f:98:aa:38:e2:9d:bc:1d:53:c0:
5a:77:d0:ce:3a:df:f3:a2:5d:54:17:5e:ed:dd:92:48:f4:dd:
46:0e:e7:dd:2b:7a:55:3a:63:d5:a8:4c:d7:9a:23:f1:52:b0:
6e:dc:a1:b4:11:f3:69:1c:73:4c:39:d7:46:29:44:55:9b:de:
4b:3a:29:8c:4b:2c:ee:bf:9d:44:e4:dd:d5:4e:28:5d:41:b6:
23:a9:7d:f6:4b:fb:dc:35:ed:d1:83:fd:65:19:4e:61:f4:d6:
fc:36:a9:e4:66:55:79:d5:01:82:9f:2c:8a:e0:bc:44:e7:67:
8c:06:e3:72:9f:df:1f:c5:ea:f2:b1:6c:f6:39:8e:a9:69:c0:
94:38:a7:29:da:57:c1:29:3d:e5:63:14:af:18:a7:0b:78:e7:
e5:44:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:15 2026 by rpki-client