Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
File: anKTCVpV8Nd-JRZOfXS3qKI530c.cer (raw, json)
Hash identifier: ViB0IBprXBbjdwYQFZjWnskhDNG+LrjYj3/2UM1Amm4=
Subject key identifier: 6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07BB651AEA69643980886E12F899C4057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 11:52:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62299
IP: 185.203.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:b6:51:ae:a6:96:43:98:08:86:e1:2f:89:9c:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 11:52:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:08:bf:85:9d:b1:d3:77:4a:10:76:2b:35:
d0:fc:88:e8:0f:5f:e7:61:a2:d5:a0:1b:a6:d0:ed:
04:32:85:19:7b:1b:67:af:d4:f3:aa:34:6e:91:7e:
c6:4b:42:96:db:c3:91:a5:d7:7e:52:79:cc:ce:38:
aa:f0:ca:ab:e2:9d:2f:6f:e6:5f:1d:4c:8e:72:29:
3a:19:95:d0:12:7a:37:6f:f5:d2:f1:c6:03:39:6e:
ba:80:98:52:8c:fd:ff:fa:fb:66:1f:a9:20:1d:db:
bf:6d:51:39:b6:e0:52:27:08:e7:55:91:45:08:37:
50:18:e0:aa:6d:91:63:61:1a:04:ce:5a:f7:22:9a:
69:88:a3:3d:71:ee:70:f5:2b:18:7a:73:d1:59:f2:
fd:10:72:56:89:55:93:69:78:98:7e:49:9b:6d:08:
f6:0c:44:1c:4b:dc:f8:9e:4a:07:48:4d:ac:6d:b4:
24:3e:71:af:a1:28:dc:bf:29:41:6f:8c:76:65:66:
47:10:bf:0f:03:80:67:eb:8f:5d:57:0b:3d:26:bc:
04:bd:d8:15:68:4b:4e:b5:42:19:de:98:8b:8f:18:
6c:82:ac:bd:9c:f0:33:30:9d:9e:57:15:26:2a:a1:
72:3c:c3:cb:13:55:f1:ca:2c:63:89:47:80:81:db:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62299
Signature Algorithm: sha256WithRSAEncryption
8a:ad:16:bd:81:fb:ca:1d:3a:af:03:80:ae:10:43:9d:11:9a:
e6:2d:c0:09:80:c5:df:eb:34:f1:53:74:46:b3:1a:aa:11:cf:
6a:9c:84:2f:1c:38:7f:6b:ae:17:0d:ab:80:7e:13:a4:e6:ed:
31:53:4d:92:77:45:fd:58:4e:1e:3e:4b:89:da:89:54:c0:42:
86:a1:90:99:1c:f5:8b:6f:01:d0:33:fa:00:81:79:fe:d1:3c:
fe:7d:3f:e0:8a:09:eb:86:6c:39:2c:21:ed:66:ef:cd:a9:46:
66:2d:33:15:fe:9c:8f:b7:dd:59:b7:48:01:3c:60:8d:9b:58:
e1:1d:03:96:48:8c:ca:f6:5b:2e:6a:01:1c:91:38:8a:6a:35:
dc:3a:11:ca:00:de:e5:73:9f:d5:0d:d6:f8:f1:1f:56:4c:83:
15:67:51:0c:da:2a:e0:22:a2:39:e9:3d:b9:24:c7:fa:26:69:
0a:e8:91:12:e0:72:b0:5e:e4:f8:4d:fa:58:f9:16:d7:44:b8:
95:bc:f4:65:e1:62:41:92:3d:59:a2:43:ce:32:51:da:84:65:
c3:08:da:8b:91:71:3c:a5:c7:4d:f7:8d:a0:0b:07:40:cb:ef:
d9:81:19:84:1a:15:77:3a:5a:9c:71:5b:59:ef:04:c3:28:f5:
18:4e:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:42:10 2026 by rpki-client