Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
File: AjZvGu7zHF6R5JAmsD50cMzhV40.cer (raw, json)
Hash identifier: CbuezGnxet+l/czN32SyaW5Lnk90KqQR0s0jHr24vKk=
Subject key identifier: 02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F83AF3487BF4965C70B2B673FFC1CA0F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 07:58:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219356
IP: 165.65.196.0 -- 165.65.203.255
IP: 2a14:3b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:af:34:87:bf:49:65:c7:0b:2b:67:3f:fc:1c:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 07:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:91:65:04:19:06:50:73:b1:06:ed:98:2f:
50:f8:46:a3:7d:64:0e:30:d7:86:55:9d:0e:07:fc:
ab:9a:6b:1a:77:b9:e1:64:f2:c8:a8:e7:6d:5c:41:
8f:6b:d4:03:3c:af:f9:25:d3:44:a8:36:e3:4e:3a:
d7:69:16:04:b3:64:c4:a4:0b:00:3c:4b:db:03:11:
d4:73:e5:46:2e:4f:ae:15:3b:39:ff:a5:8b:80:a0:
e2:11:11:3b:9a:50:ed:f3:71:44:4e:94:ad:85:03:
4d:cd:8c:91:96:82:ab:a9:d2:f9:51:b3:33:7c:c8:
cc:50:60:82:4c:aa:c5:c3:73:be:e7:4f:98:02:dd:
d9:81:df:e6:2d:4a:58:12:07:e2:07:0c:31:77:f4:
a0:12:8e:e1:1d:ec:e7:c1:8d:d1:4e:70:ff:84:60:
d7:1b:a6:7a:65:e5:fb:85:8b:d1:f7:e7:e9:fa:73:
8c:44:da:c9:24:3f:03:28:aa:5f:8e:ea:3a:a4:2d:
e7:e5:9c:e2:0a:a4:1f:b3:8c:03:ce:ad:a7:87:27:
33:bc:39:e4:f0:40:df:0b:6c:82:38:25:04:d0:7a:
3c:59:91:ea:49:6c:c6:ee:1e:14:15:2e:91:4c:e2:
f0:ad:4d:ce:fd:34:c5:49:c5:ef:6d:ec:a1:67:73:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.196.0-165.65.203.255
IPv6:
2a14:3b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219356
Signature Algorithm: sha256WithRSAEncryption
69:62:79:a2:63:0a:03:54:e9:33:19:be:37:52:c7:7c:fe:fb:
6b:3b:d9:db:9b:e9:18:23:2d:33:60:5f:3c:e8:29:71:e7:90:
b6:8f:01:18:a5:ae:f2:1b:b7:35:60:b4:ea:0f:4f:08:f3:c8:
d6:53:d6:dd:32:26:5e:50:6b:94:14:0f:d8:cb:83:92:6b:26:
66:4c:48:53:c5:de:f7:db:3b:8f:63:df:dd:54:20:e5:bf:27:
1d:49:f1:64:e6:1e:06:8c:05:bc:dc:64:c7:39:35:b9:4c:51:
b1:e7:e0:df:56:08:d9:4f:76:80:e3:af:ad:8f:4b:fc:f2:99:
0a:ac:ae:01:ee:fd:27:da:2b:33:43:ec:31:ee:17:a1:bb:94:
db:3b:52:92:83:65:fd:fe:42:49:5d:02:36:f3:8d:bc:33:6d:
0a:09:3d:0c:0b:c8:37:a1:15:8c:bc:2d:38:07:81:99:98:55:
08:45:1c:82:86:3a:18:37:6d:c5:80:b2:e0:22:83:74:da:ee:
08:15:27:f9:a9:45:83:20:ce:56:37:3d:4a:19:f1:80:cf:ef:
ed:9f:6f:c1:74:1d:9a:07:f5:50:19:c0:f4:46:49:b6:63:58:
20:43:5d:ea:c8:5f:34:68:ca:83:90:2a:fb:25:c6:46:77:d8:
b5:e1:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:23 2026 by rpki-client