Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer (raw, json)
Hash identifier: d4H4WLedDMAhKadQ+qbpRtbMYDE7QdoSTIsqu6CfTGI=
Subject key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F83C15CFB4313D198BCDE6C6F85E6B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216227
IP: 217.65.68.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:c1:5c:fb:43:13:d1:98:bc:de:6c:6f:85:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:57:78:ca:c1:a0:5e:cd:eb:73:e2:96:cd:
d1:b0:f6:e4:1d:ef:e3:25:a2:53:ce:0d:1e:45:1d:
5f:31:7b:84:35:e4:eb:b7:a2:a4:c9:82:21:f5:f3:
78:42:89:b9:f4:17:56:a6:f6:d3:ff:47:63:15:a7:
d0:44:89:ff:92:6e:2c:4f:d2:27:89:be:f8:4b:81:
53:9d:ba:e3:15:e8:dc:f4:f1:dd:91:9f:c5:8a:ea:
3e:b5:84:0a:23:bc:9d:49:fa:c3:e1:1d:3f:db:6a:
61:48:9a:91:38:d1:0c:67:7d:2c:51:11:70:d6:77:
b5:6d:b8:66:5f:85:32:a1:be:bc:ab:0d:a4:cf:42:
04:f1:44:53:af:45:85:9f:91:db:71:06:d3:3a:e5:
a3:0b:c6:6f:81:a1:f7:5a:a0:54:f0:a1:16:ec:9d:
5f:29:08:17:bb:5c:de:88:1e:99:ca:09:3d:59:da:
f5:82:a2:be:80:60:ab:e7:07:71:ef:cd:32:04:9f:
98:ba:09:10:48:a0:3d:ee:73:c2:0d:32:a2:17:89:
1a:35:39:eb:48:64:76:90:26:59:ae:67:52:e2:b6:
cf:9c:ed:85:f0:7d:8b:a0:f4:f8:ac:70:2a:f0:dc:
f4:23:6c:cc:09:19:4b:70:f4:67:dd:87:97:92:86:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216227
Signature Algorithm: sha256WithRSAEncryption
ae:c1:1e:31:07:c4:63:f2:53:01:92:8f:b3:f8:e1:81:df:d3:
0e:66:b8:52:6a:2f:7c:20:e8:47:5f:fe:68:b2:16:67:6d:8f:
b2:14:26:de:27:40:6e:ad:d2:fe:c9:ba:bd:82:0c:b0:4c:9f:
07:a1:03:c3:e8:79:bc:8a:eb:4a:64:6a:5c:8f:d0:cc:69:35:
41:82:49:d1:f2:25:f9:35:db:42:f0:8f:16:49:93:30:09:ef:
b1:6e:dd:c5:b4:71:2c:32:56:43:13:70:dd:f1:83:34:c0:21:
b6:10:7f:df:70:9a:c8:95:b7:24:6d:c2:13:e0:87:00:50:ed:
35:0b:3a:c7:01:ca:d1:41:46:f4:79:6b:d6:5f:7e:ce:91:1c:
52:c2:f1:af:c1:1f:1f:43:18:9b:c0:83:e6:ca:f8:73:9a:08:
bc:30:8a:de:4c:47:30:63:a5:d7:b1:8e:9a:e0:83:1c:ae:f0:
63:5a:44:5e:31:5a:ca:ba:8f:98:69:f3:f8:43:57:49:4f:9f:
45:03:00:89:aa:53:3f:1e:ee:f6:0d:70:2d:5e:8a:8b:fc:c2:
b4:8b:20:65:d4:ed:2a:97:60:ef:b4:3a:99:31:6c:79:22:e8:
6d:b0:9c:96:38:d0:2c:de:b1:cb:e5:e8:d5:c9:52:22:f6:56:
55:34:92:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:45 2026 by rpki-client