Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
File: AoXs_ogqAqGVABRSSDMybJ7V0D0.cer (raw, json)
Hash identifier: J7g9MeYhrwrk9EqiZ9OscuWdQqqPefJ4XPwUe5sGLmI=
Subject key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA619593A1A3FA31E820D729B0372D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202562
AS: 208249
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:61:95:93:a1:a3:fa:31:e8:20:d7:29:b0:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0285ecfe882a02a1950014524833326c9ed5d03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:dd:b9:02:3d:ad:55:d7:93:ff:44:b1:b1:
c7:02:e6:34:b6:e2:b3:3a:ee:5a:08:41:47:9a:b2:
fc:ab:aa:e3:a7:f5:d3:27:c0:f3:f8:f2:2a:fb:cc:
8a:84:e1:c4:54:92:f7:03:cf:4b:a6:bd:62:b5:7f:
1e:6c:51:52:11:ca:1b:36:eb:e2:5d:23:02:a3:00:
b5:14:97:01:2b:44:1e:65:c5:a0:a1:d2:4d:9e:b6:
e8:75:c6:27:b7:24:17:a0:f8:e7:b0:3a:80:17:57:
8b:71:4f:5e:d9:d3:f2:19:93:2b:6c:cb:65:89:b6:
49:c5:62:a2:e2:66:18:33:32:b1:77:a3:00:44:ed:
ed:5e:60:82:c2:9f:33:11:51:6c:11:29:85:eb:85:
ec:77:0e:63:eb:88:9a:6b:ad:04:ec:a9:75:2f:0c:
65:64:1c:8b:71:db:4e:49:45:84:54:89:af:08:b5:
4e:61:24:0b:a8:89:4d:f2:0a:9d:8c:dc:d7:36:15:
50:13:cf:93:ec:9e:63:ac:77:43:3c:e7:54:b1:d8:
20:01:86:c9:e0:b8:09:bf:ab:0e:a0:a6:b5:2d:b6:
c7:c9:75:fa:e4:7e:38:13:65:8e:45:57:63:36:3b:
4b:8a:fe:f4:ab:81:f3:63:4b:33:dd:0d:2b:1f:fe:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202562
208249
Signature Algorithm: sha256WithRSAEncryption
22:03:3d:f4:5d:3c:3a:74:9f:b9:be:b6:a9:aa:07:dc:d5:08:
52:e4:b5:7a:23:50:fa:ba:5e:2e:1a:ce:bf:eb:31:e7:4d:55:
67:a5:da:06:66:2d:65:54:cf:c8:a8:dd:a0:76:5e:61:92:ed:
4e:9f:53:6f:05:9f:40:e6:52:61:49:75:a7:ce:0b:87:7f:72:
09:8e:7d:07:40:93:8d:cb:fd:e5:a3:2b:d6:ee:fb:af:cf:4f:
53:39:8a:82:52:69:81:26:d3:38:5d:2c:42:ef:49:ad:89:ce:
05:df:f4:45:8a:71:5b:25:e2:ee:30:ba:3b:15:46:38:fc:fe:
33:5d:50:46:34:67:2a:3b:5f:29:cb:99:9b:24:89:f2:19:91:
4a:04:c5:30:f3:14:1b:9c:3a:66:c1:56:ec:c6:75:29:4a:8c:
53:18:e3:46:7b:62:81:26:29:6f:aa:ee:92:1b:cb:43:a5:e2:
a5:e0:31:06:45:35:2d:b1:29:70:65:8e:3d:6b:17:ac:2d:51:
44:52:18:d4:43:fe:f6:1b:06:ea:10:e8:4a:ef:3d:53:ba:88:
8f:60:86:89:e1:c9:e8:34:79:41:dd:e2:59:d4:34:0c:9e:7d:
0b:f2:b5:f8:28:a3:6f:ac:87:e3:3c:11:43:e4:ef:22:ee:f5:
08:fa:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:24 2026 by rpki-client