Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
File: aIt13GcpXVhht31RoCEYtg3FWGg.cer (raw, json)
Hash identifier: cwWsqDZZqgq+H7vkm0eXBMsRenaBeOkznLXZcl3yb0U=
Subject key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4E889D36E486615878B367499EB7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210638
IP: 62.233.58.0/24
IP: 2a03:6a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:e8:89:d3:6e:48:66:15:87:8b:36:74:99:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688b75dc67295d5861b77d51a02118b60dc55868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:6e:89:cd:b0:3d:07:db:9b:e1:34:03:85:
9f:02:c8:7a:ab:4c:95:dc:ba:11:79:2c:37:fc:54:
58:6c:0d:db:8b:d0:9a:96:5e:46:09:68:dd:81:45:
dc:0d:94:18:c9:a5:78:8f:ff:d1:a1:f7:82:3c:9f:
b8:ce:4b:ff:44:13:6b:7e:b2:cc:17:bd:0c:2d:0f:
61:1e:1a:76:ca:9e:e0:2c:85:3c:f0:e7:ce:75:19:
9a:f0:e5:fb:c4:c0:61:d5:13:c3:a7:dd:00:af:a1:
a2:dc:c9:a9:be:e6:39:9a:38:52:35:6f:63:f9:0b:
b8:c8:d9:c7:61:0a:8b:8b:81:ca:b4:d1:8e:23:6c:
f2:7a:4d:71:d8:e9:b7:3f:02:04:22:b1:16:9b:2c:
eb:5e:9b:34:d6:32:85:e6:63:37:26:6a:52:a3:51:
df:87:e1:56:ae:65:21:4e:d8:3a:26:40:b5:ba:ec:
2f:10:e8:ba:c1:3b:26:d1:fd:4a:45:96:90:a9:1c:
87:02:cd:23:94:bf:83:1e:0e:97:d8:e1:9e:76:93:
68:56:a8:7e:a7:9a:c6:81:c6:9c:f2:45:cd:6c:30:
0f:42:55:50:46:d2:c3:7b:bd:a1:c6:8c:2a:9d:5c:
0e:b8:89:17:3c:3e:e1:6c:0e:9e:a1:c9:e5:d2:d6:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
IPv6:
2a03:6a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210638
Signature Algorithm: sha256WithRSAEncryption
67:6b:3f:41:23:c3:11:fd:67:ee:5a:1d:f6:32:4c:ba:e6:ec:
34:23:4c:a0:d5:04:f3:c6:a7:4b:dd:b5:f4:05:60:ad:eb:29:
4c:fc:c2:62:8a:fe:2f:5a:8c:bc:76:30:5a:29:54:7b:3b:a3:
88:b1:c5:0e:02:29:9a:20:5f:e0:b2:6b:e5:03:fc:dc:bc:e9:
88:66:6d:79:45:2e:e4:8e:1f:9d:82:30:6a:4e:81:14:d9:6a:
c9:87:f3:da:6b:d2:6e:88:c9:37:9c:99:49:4a:50:9f:26:c7:
65:44:66:9b:97:b1:93:d2:f5:bf:75:c5:81:21:68:2b:7f:59:
92:15:04:c5:fa:d2:33:29:55:be:08:f1:5d:d1:37:ef:93:bd:
c3:5c:b1:2d:31:5b:7d:cb:43:af:dd:88:d6:92:f7:ae:2f:e0:
58:12:17:e9:ff:f2:d1:2a:15:ba:71:c7:ab:40:ce:33:c5:47:
ce:f8:ec:16:2e:b0:7c:0a:8e:22:a9:1e:0a:ae:f5:2e:f7:3b:
b8:08:09:81:2e:db:7b:ed:fc:95:41:83:4e:b1:79:9c:81:5d:
b8:70:a7:68:89:f6:6c:ab:ef:3e:8e:48:94:6e:0d:42:d3:2f:
19:7b:c2:df:1a:28:89:2d:b0:06:6e:0d:6a:04:7b:ec:87:03:
68:c7:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:43 2026 by rpki-client