Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.cer (raw, json)
Hash identifier: qeGneojh+FpAxTvHJB1qvh8WXwIlXg277Ae7r2yaTsA=
Subject key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D76348AEA295C98844DEC25F5B4B14EF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Apr 2026 07:04:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202986
IP: 2001:678:123c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:34:8a:ea:29:5c:98:84:4d:ec:25:f5:b4:b1:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 07:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:8c:c2:96:66:42:d9:46:e5:a0:ab:b0:f5:
38:13:15:79:48:85:1e:46:c4:62:10:ae:d7:0d:39:
19:43:fa:3c:31:ef:01:2d:0c:90:7d:c4:41:d1:0a:
a7:79:ea:2e:07:4b:df:e0:1e:3e:90:7c:52:a8:fb:
71:6d:64:66:60:54:9a:e0:ef:89:3f:10:61:ae:a2:
d2:c2:fc:14:85:12:79:19:eb:3d:29:21:8d:76:10:
94:9c:43:ba:3d:74:f5:38:18:33:55:b2:5a:a9:3f:
a4:19:c6:ab:07:06:28:0c:e0:4e:1e:3c:73:0d:54:
7a:14:e2:24:aa:91:02:2d:2b:aa:11:99:24:5a:85:
0b:64:da:d2:9d:44:85:4f:6f:00:b1:ee:19:ae:18:
7a:d3:4d:3a:e9:38:8f:fd:64:d9:ce:3f:8f:e2:44:
7c:99:73:38:88:71:f3:35:f2:60:b4:d5:91:cc:69:
95:48:73:e0:1c:a1:9e:59:5f:7c:78:7a:13:0c:12:
49:d5:1b:ea:e9:5a:ec:de:f9:21:6a:d0:1e:03:bb:
b7:c5:1b:ff:90:55:36:f6:b9:56:3e:79:63:ac:24:
94:14:ba:fa:6a:da:ce:16:50:4b:df:1f:0c:89:de:
8c:71:8b:55:53:05:2b:60:7f:8c:17:57:9e:0f:21:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:123c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202986
Signature Algorithm: sha256WithRSAEncryption
3c:94:9d:02:6d:fc:a7:3a:47:3c:4d:d9:ef:94:be:d2:0a:6d:
2c:f7:50:86:12:3c:bb:37:50:8e:72:b9:7f:f8:62:ee:65:b0:
e7:68:c1:f1:72:74:45:c9:53:cb:af:b3:08:78:05:6c:22:09:
45:0e:41:2b:d1:c5:6b:20:31:05:c1:95:78:ea:4a:34:d6:14:
df:bc:80:e6:76:9d:79:ef:85:13:f7:d0:41:3c:66:fb:eb:9d:
ff:ac:e2:24:e7:76:88:0e:32:e6:b7:dc:66:df:b5:e2:0f:1e:
7f:5a:d9:b3:22:40:c7:39:6a:43:d1:f1:a7:63:6f:65:c2:1f:
06:f0:c4:40:41:5f:93:13:d9:80:4c:2a:fb:9a:56:51:65:60:
8b:30:d7:bd:ee:66:fb:a6:0e:33:57:db:f6:5e:fc:7d:20:e0:
ee:53:c9:30:e4:bc:1a:80:09:cb:d9:f9:2c:f4:8f:ce:78:16:
ea:6c:8c:a2:9e:bc:52:ab:dd:0a:cc:61:80:dd:12:3e:7a:50:
77:e1:9a:f0:82:43:f0:ea:1f:89:1a:b8:3f:00:3a:e6:b1:0f:
f1:fe:fb:15:ac:40:62:f9:28:65:36:b5:e3:2a:77:bf:ff:3e:
cc:c7:c0:f5:93:65:fd:cd:bd:1a:42:a7:2e:84:ae:c6:76:ff:
a4:ed:e8:e3
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ12NIrqKVyYhE3sJfW0sU72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDEwMDcwNDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDk0YzBmNzM2OGMwNDc2NDNlOTFjNTdkNmNmZGE5Zjk5ODk3MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXKMwpZmQtlG5aCrsPU4ExV5SIUe
RsRiEK7XDTkZQ/o8Me8BLQyQfcRB0QqneeouB0vf4B4+kHxSqPtxbWRmYFSa4O+J
PxBhrqLSwvwUhRJ5Ges9KSGNdhCUnEO6PXT1OBgzVbJaqT+kGcarBwYoDOBOHjxz
DVR6FOIkqpECLSuqEZkkWoULZNrSnUSFT28Ase4Zrhh600066TiP/WTZzj+P4kR8
mXM4iHHzNfJgtNWRzGmVSHPgHKGeWV98eHoTDBJJ1Rvq6Vrs3vkhatAeA7u3xRv/
kFU29rlWPnljrCSUFLr6atrOFlBL3x8Mid6McYtVUwUrYH+MF1eeDyFTYQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzYzZWZi
Yi1mZTAyLTQ2OGEtOTYwZC0zYzI3NDJmMjhhM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNjNlZmJi
LWZlMDItNDY4YS05NjBkLTNjMjc0MmYyOGEzYy8xL0FKVEE5emFNQkhaRDZSeFgx
c19hbjVtSmMySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBI8MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMY6jANBgkqhkiG9w0BAQsFAAOCAQEAPJSdAm38pzpHPE3Z75S+0gptLPdQ
hhI8uzdQjnK5f/hi7mWw52jB8XJ0RclTy6+zCHgFbCIJRQ5BK9HFayAxBcGVeOpK
NNYU37yA5nadee+FE/fQQTxm++ud/6ziJOd2iA4y5rfcZt+14g8ef1rZsyJAxzlq
Q9Hxp2NvZcIfBvDEQEFfkxPZgEwq+5pWUWVgizDXve5m+6YOM1fb9l78fSDg7lPJ
MOS8GoAJy9n5LPSPzngW6myMop68UqvdCsxhgN0SPnpQd+Ga8IJD8OofiRq4PwA6
5rEP8f77FaxAYvkoZTa14yp3v/8+zMfA9ZNl/c29GkKnLoSuxnb/pO3o4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:42 2026 by rpki-client