Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
File:                     v1axbhD6Re7KFoexaJ_CHxgR53U.cer (raw, json)
Hash identifier:          KD4HPVST2l+/rxXmKB3rQlVcS9adTOndKUh17b1op6s=
Subject key identifier:   BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019EA78C6760194042599B8AC8047F734D59
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 08 Jun 2026 14:04:17 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 205472
                          IP: 185.255.4.0/22
                          IP: 2a01:f5c0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a7:8c:67:60:19:40:42:59:9b:8a:c8:04:7f:73:4d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  8 14:04:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:75:e8:cd:84:af:89:49:d1:34:c2:79:2c:
                    8f:90:47:54:b5:51:d1:88:0d:5d:61:71:d6:5e:0b:
                    b5:bc:a7:ff:dc:71:04:8e:7b:a3:1f:05:ed:ba:8d:
                    81:e2:d8:d8:53:c4:7e:35:5f:7b:cc:54:99:08:7b:
                    4c:b6:ec:83:dc:6b:1e:81:ca:39:16:c1:ea:be:88:
                    f5:b7:93:a1:8a:c5:39:9e:7b:d4:8d:50:38:9f:20:
                    33:9d:b9:a0:5d:68:e9:36:65:56:8a:a1:79:b3:76:
                    fe:8e:9f:64:43:78:43:76:ae:5d:b1:aa:e6:96:02:
                    e2:80:83:6b:3e:03:7f:97:24:93:d7:95:10:68:ae:
                    71:20:ac:b3:27:49:99:7c:96:2b:67:e1:6d:ce:9d:
                    43:b4:76:0c:85:db:ee:58:81:e0:40:21:55:91:13:
                    ca:69:13:ce:27:ee:ab:79:5d:32:f9:b2:f2:dd:0d:
                    96:a9:90:68:e3:63:10:94:c1:fa:c6:e2:ed:b5:75:
                    9d:9d:6f:cb:4d:01:8e:c9:d6:cc:ae:aa:66:60:76:
                    56:1d:aa:9c:54:6e:45:a3:4d:a0:3d:6f:dd:9d:6c:
                    ae:f0:bc:65:1c:07:3f:44:d5:0e:8c:1e:9f:f6:27:
                    45:f4:10:f7:5c:5d:ad:17:36:f0:99:8b:5f:57:dd:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.4.0/22
                IPv6:
                  2a01:f5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205472

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:46:b4:fd:55:de:b9:41:7a:95:0f:56:3a:d6:4f:63:45:
         6c:2d:9e:e7:21:ab:80:d9:ae:01:9d:55:6f:2b:c9:3d:37:28:
         ab:f4:6c:3c:9e:87:9e:85:ae:e1:d3:87:a6:82:ef:92:46:19:
         a9:79:76:32:08:f2:46:23:ac:fd:6f:e2:94:ae:79:48:37:13:
         53:ee:27:fd:cc:dd:42:93:ff:5a:e9:8a:73:ee:da:43:57:d8:
         7f:ee:e9:ce:51:30:42:b7:cf:0e:29:11:4a:ab:ce:09:c9:27:
         2c:f0:6d:c0:bb:7f:a5:b5:b9:e5:21:d7:28:9f:2c:ce:c9:48:
         4e:01:cb:d8:ee:98:87:89:2c:ba:5f:d0:38:10:8c:27:a7:28:
         0f:31:ec:91:e7:50:d5:86:35:3b:63:6f:55:42:a2:ce:6e:a6:
         d7:b2:3b:ab:18:8d:bb:e6:a3:4c:de:19:13:bb:d9:62:ed:c8:
         3e:42:48:80:aa:b7:c4:23:21:38:d5:e0:e3:7b:8b:59:07:d3:
         ba:c1:22:22:7d:21:df:ec:99:c7:3a:f5:37:6f:64:7d:cc:97:
         08:46:3d:85:17:ab:57:f7:c3:90:9f:7e:f8:d0:bb:be:f8:33:
         ef:40:1f:dc:1f:93:98:60:2c:5a:b5:bc:95:aa:8d:72:6a:a2:
         1a:1c:8d:34
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ6njGdgGUBCWZuKyAR/c01ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjA4MTQwNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjU2YjE2ZTEwZmE0NWVlY2ExNjg3YjE2ODlmYzIxZjE4MTFlNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa916M2Er4lJ0TTCeSyPkEdUtVHR
iA1dYXHWXgu1vKf/3HEEjnujHwXtuo2B4tjYU8R+NV97zFSZCHtMtuyD3Gsegco5
FsHqvoj1t5OhisU5nnvUjVA4nyAznbmgXWjpNmVWiqF5s3b+jp9kQ3hDdq5dsarm
lgLigINrPgN/lyST15UQaK5xIKyzJ0mZfJYrZ+Ftzp1DtHYMhdvuWIHgQCFVkRPK
aRPOJ+6reV0y+bLy3Q2WqZBo42MQlMH6xuLttXWdnW/LTQGOydbMrqpmYHZWHaqc
VG5Fo02gPW/dnWyu8LxlHAc/RNUOjB6f9idF9BD3XF2tFzbwmYtfV93KNQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFL9WsW4Q+kXuyhaHsWifwh8YEed1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzAyN2Zl
My0wY2NjLTRhMTctOTYwNi1iMDY0MzFiZWNhY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMDI3ZmUz
LTBjY2MtNGExNy05NjA2LWIwNjQzMWJlY2FjYS8xL3YxYXhiaEQ2UmU3S0ZvZXhh
Sl9DSHhnUjUzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuf8EMA0EAgACMAcDBQAqAfXAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMioDANBgkqhkiG9w0BAQsFAAOCAQEAQ7VGtP1V3rlB
epUPVjrWT2NFbC2e5yGrgNmuAZ1VbyvJPTcoq/RsPJ6HnoWu4dOHpoLvkkYZqXl2
MgjyRiOs/W/ilK55SDcTU+4n/czdQpP/WumKc+7aQ1fYf+7pzlEwQrfPDikRSqvO
CcknLPBtwLt/pbW55SHXKJ8szslITgHL2O6Yh4ksul/QOBCMJ6coDzHskedQ1YY1
O2NvVUKizm6m17I7qxiNu+ajTN4ZE7vZYu3IPkJIgKq3xCMhONXg43uLWQfTusEi
In0h3+yZxzr1N29kfcyXCEY9hRerV/fDkJ9++NC7vvgz70Af3B+TmGAsWrW8laqN
cmqiGhyNNA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:04 2026 by rpki-client