Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
File: axBPHkq67B7_gPJixi-WwlQ4yOE.cer (raw, json)
Hash identifier: ybhsymsN8SxcInR/zZ4XaH86t7MSLUfejgMCb9bhfLk=
Subject key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C42CAC655F47BBB84A9E7F7E3A7F90999
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Feb 2026 14:25:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42881
AS: 49443
AS: 201813
AS: 203950
AS: 204794
AS: 204868
AS: 204872
AS: 205301
AS: 205745
AS: 205770
AS: 205884
AS: 206005
AS: 206127
AS: 206305
AS: 206340
AS: 206413
AS: 206535
AS: 206560
AS: 206582
AS: 206590
AS: 206623
AS: 206644
AS: 206744
AS: 206750
AS: 208317
AS: 209375
AS: 209396
AS: 209868
AS: 209883
AS: 209889
AS: 209896
AS: 209944
AS: 209961
AS: 209963
AS: 209982
AS: 213137
IP: 62.68.73.0/24
IP: 153.51.160.0/19
IP: 2a0b:2dc0::/29
IP: 2a12:1c0::/29
IP: 2a12:f9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ca:c6:55:f4:7b:bb:84:a9:e7:f7:e3:a7:f9:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 14:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:4f:09:f0:7b:e0:da:c3:01:22:08:2c:f4:
a2:24:40:8f:55:6e:9a:de:f2:a0:c4:ba:45:30:03:
78:5c:01:c9:00:95:55:21:f6:2b:da:67:c4:4b:a8:
37:19:e4:94:77:1f:b8:1d:b0:94:12:90:74:d3:10:
c4:69:62:fc:79:fe:59:5e:ac:39:2e:8b:63:83:4c:
53:8a:d6:77:36:fd:24:b0:97:b2:75:19:84:22:49:
a4:a3:a8:28:d4:53:ff:f6:d8:7f:c4:1a:cf:39:99:
7e:bc:d6:50:10:ca:0b:32:90:ff:4d:2d:2d:d8:9e:
10:78:fc:c2:6e:f7:46:fb:2d:25:33:fc:9b:a1:86:
14:72:17:20:dc:e7:47:78:ff:de:04:ea:06:c4:ef:
7f:fd:ce:4f:a6:d4:95:8f:d5:19:86:4e:03:02:fd:
47:ed:8d:e5:ba:c0:a8:90:6e:3f:f5:0f:bf:47:00:
8a:aa:69:90:53:4f:cb:dd:c9:55:c0:c4:80:a0:b3:
31:86:35:08:bd:26:00:0d:20:3b:a3:18:c5:63:97:
75:e2:52:93:5d:dc:28:ac:84:af:69:03:21:1a:89:
1f:af:a9:55:63:97:2b:b8:09:85:0d:3b:93:92:a7:
19:87:44:1c:ee:16:31:89:50:bd:27:2f:ba:11:19:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
153.51.160.0/19
IPv6:
2a0b:2dc0::/29
2a12:1c0::/29
2a12:f9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42881
49443
201813
203950
204794
204868
204872
205301
205745
205770
205884
206005
206127
206305
206340
206413
206535
206560
206582
206590
206623
206644
206744
206750
208317
209375
209396
209868
209883
209889
209896
209944
209961
209963
209982
213137
Signature Algorithm: sha256WithRSAEncryption
a9:d9:bc:f0:88:d6:b8:c3:b5:45:a3:29:5d:a0:c8:0c:30:c1:
bf:f8:6b:c7:e5:13:d8:b8:7f:c1:6d:b0:a8:41:9a:af:1e:6c:
6c:77:d7:5e:87:c0:2e:d2:24:4a:0d:7d:99:21:f4:02:3e:ae:
00:ce:06:56:5d:82:18:bc:b3:22:c6:65:ac:de:13:cd:be:32:
a7:92:0f:45:ff:c2:b8:83:39:6c:fa:83:51:c1:bc:a1:77:db:
2e:41:bc:0a:20:e6:5d:b6:8d:96:a8:00:40:c2:37:4d:c2:6a:
6d:c1:91:dc:3c:05:5a:7b:eb:89:ab:0c:36:ec:b0:66:10:1a:
30:5c:fb:1f:3d:76:c5:23:e7:f8:38:97:09:ab:79:94:64:fd:
b8:f1:84:e4:46:28:d1:46:fb:cb:2b:6b:e1:4e:57:e6:9f:70:
13:c9:70:47:ee:dd:27:6b:b5:01:bf:98:e1:86:86:2e:66:b2:
ac:c7:c2:1d:af:55:57:9f:fe:e0:f2:b0:bb:f4:53:04:d7:8a:
ae:35:08:2d:22:1c:5b:d6:8d:fd:d2:16:75:a7:1b:c5:cb:19:
4d:d2:1f:7f:4d:16:a0:d9:26:3c:23:78:57:73:44:97:9b:ba:
97:1d:3b:67:89:88:cd:36:fe:59:18:bf:dc:e6:a5:5a:d0:d4:
cb:32:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:08 2026 by rpki-client