Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer (raw, json)
Hash identifier: j9U5jaI+Rn5nNgkSVEmOWSOjXdfD13XH9f0Iy8HLwNg=
Subject key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019874DF4743A129917F45ACFD99D2F3E32A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Aug 2025 11:37:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60150
AS: 202592
IP: 43.240.148.0/22
IP: 45.12.100.0/22
IP: 91.109.40.0/21
IP: 147.185.196.0/23
IP: 147.185.206.0/23
IP: 185.96.56.0/22
IP: 185.136.16.0/22
IP: 193.160.220.0/22
IP: 193.168.200.0/22
IP: 194.38.48.0/22
IP: 207.244.196.0/22
IP: 207.244.208.0/22
IP: 2a05:ff00::/29
IP: 2a07:5b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:df:47:43:a1:29:91:7f:45:ac:fd:99:d2:f3:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 4 11:37:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:0f:c5:55:b0:97:04:23:34:26:e3:70:df:
6e:ee:b9:56:a9:04:0f:9a:20:08:6b:91:ee:a7:82:
f0:2a:82:12:e4:91:a8:9f:23:86:6b:de:19:4f:28:
aa:04:a4:e6:dd:27:e2:f1:31:d2:83:fb:dc:2a:81:
f4:62:1a:3a:c3:50:25:2c:d9:bb:42:d6:44:db:78:
dd:b0:ab:1a:55:ac:cc:1d:a5:cd:80:2b:b2:14:db:
78:50:2b:e0:fd:15:33:75:bd:40:ba:27:c6:69:3b:
9d:97:b3:eb:99:a2:e3:ca:fc:ea:87:5d:1d:d4:27:
33:7e:f1:ce:f6:67:1d:d1:b3:67:c4:a2:83:aa:2d:
07:52:9d:72:b4:bb:aa:59:2a:ce:f1:83:46:66:f3:
6f:8a:af:83:2b:fd:3f:2f:f4:60:c6:da:01:b0:48:
37:1e:17:da:6e:5d:26:df:25:9a:09:b7:d6:3a:7d:
23:22:f3:50:de:19:1f:7e:0b:47:ad:24:18:fb:36:
47:e7:71:6a:a6:95:17:90:de:f1:2f:48:97:04:a7:
cd:a5:a2:a7:69:1b:c2:7c:22:24:9d:01:71:3b:eb:
73:93:b5:38:e6:e0:cd:65:19:65:94:02:63:fd:48:
d7:c8:e4:f3:40:78:5e:4c:45:aa:e2:fe:b7:4f:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
91.109.40.0/21
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60150
202592
Signature Algorithm: sha256WithRSAEncryption
8c:cc:a1:0b:d9:c1:32:fd:86:9d:50:5a:56:4f:97:bb:c7:17:
9f:0e:b5:45:24:44:6f:20:1b:ec:08:65:3d:49:69:b2:60:fb:
c6:de:93:33:25:dd:fc:6e:a6:96:ae:63:8e:ce:3f:0e:4b:6f:
d8:e4:24:c5:a3:36:40:b5:3b:ac:31:ee:5f:44:5b:5c:4a:b5:
a1:30:cf:8f:45:ef:c8:87:78:0d:ee:ac:21:a8:99:d4:96:16:
40:68:e0:07:88:47:75:23:5e:c4:c3:f9:39:18:b1:13:e5:4d:
1f:cd:1b:49:de:9e:9e:2d:71:f9:0b:17:99:bc:3c:96:b7:a8:
8e:d5:1e:bf:18:81:70:07:68:5b:1e:3a:ff:a9:75:58:b0:fb:
c4:d7:48:5f:4e:ea:64:d3:46:1c:58:d9:c7:b1:43:d3:79:13:
c0:65:b0:50:71:7f:5c:8b:ad:51:19:ac:d1:0d:67:2f:8e:6e:
16:02:d1:0f:1b:7b:dd:16:41:8b:61:a7:ff:a5:f1:ec:48:65:
a5:ab:70:b1:3d:15:64:b6:f8:eb:6c:c0:67:30:09:9a:e7:c3:
14:71:95:0e:4d:f3:04:48:1e:4a:70:1e:db:79:bc:fa:12:95:
ac:bc:68:87:3f:b7:0d:74:93:cb:aa:e3:2f:26:2c:77:8d:a2:
79:61:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:45 2025 by rpki-client