Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
File: 4fNRL1HcQruesSq8C7UpZosu3uQ.cer (raw, json)
Hash identifier: w72V3v1fAFPBA9Ihb+sdTVkEEEDgbDfM4fmpDjl8CY8=
Subject key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019764879CE280D0F2257D699BD99EC38103
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 14:24:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207215
IP: 45.149.152.0 -- 45.149.154.255
IP: 89.150.49.0/24
IP: 91.231.126.0/24
IP: 91.232.99.0/24
IP: 185.33.26.0/24
IP: 185.123.156.0/22
IP: 185.162.176.0/22
IP: 185.234.100.0/24
IP: 188.94.191.0/24
IP: 193.17.95.0/24
IP: 194.99.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:87:9c:e2:80:d0:f2:25:7d:69:9b:d9:9e:c3:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 14:24:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:bc:b9:d1:a0:23:28:d4:7a:90:a7:6e:37:
2e:42:fc:ec:7e:3f:33:2f:5e:4d:6b:06:de:9c:3e:
ea:a5:b7:06:3e:80:e0:76:15:7b:94:a3:2d:ef:0a:
2f:34:36:07:8c:37:cb:40:36:9e:60:18:e0:0e:84:
7d:5a:cb:10:81:cd:70:a5:33:19:d0:34:65:56:30:
68:0e:1d:37:ee:28:48:70:d3:4f:b3:38:76:f4:ba:
82:b0:76:c4:2d:ce:e2:c5:1d:be:1c:cf:60:96:3b:
23:ac:73:17:93:a7:87:af:68:5e:de:d2:29:7c:5c:
b1:ee:e2:d0:cf:23:60:b4:61:43:d6:83:c3:22:e1:
45:03:e3:01:43:5f:d5:6a:09:50:21:ed:19:6e:9d:
7b:a6:58:fe:e2:8b:f1:2f:b3:29:1a:b0:25:0c:66:
d5:04:b3:4c:b5:2a:d3:c2:f5:13:c9:c4:bf:73:d5:
d0:09:84:c4:dd:b5:4e:6d:cc:93:ea:81:9f:53:c4:
ec:9e:8f:af:7a:bb:b6:70:e0:f4:b0:01:cd:7d:e0:
aa:fa:91:72:fe:70:89:4d:2d:2d:11:2f:a8:44:43:
5d:a9:7c:7f:7b:62:05:b3:fe:81:c1:83:7f:e4:bb:
a4:84:64:b6:a3:0a:a4:29:93:de:f8:14:29:95:25:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0-45.149.154.255
89.150.49.0/24
91.231.126.0/24
91.232.99.0/24
185.33.26.0/24
185.123.156.0/22
185.162.176.0/22
185.234.100.0/24
188.94.191.0/24
193.17.95.0/24
194.99.156.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207215
Signature Algorithm: sha256WithRSAEncryption
66:e9:0e:d5:97:58:3c:cf:55:b2:40:f0:74:e0:a6:e1:e4:52:
b9:bb:c6:ad:f4:6c:65:c2:b0:6e:30:0b:12:95:05:57:6c:67:
64:e0:a5:ec:7c:f8:7a:ce:96:dc:ac:99:f9:bc:0b:ac:92:51:
95:18:be:c1:8a:1d:66:4e:87:62:61:07:07:7c:d8:8e:28:ee:
d1:df:4c:43:6c:1e:c5:bf:f7:bc:6e:a3:e5:6e:6a:2a:1b:ca:
00:d5:a5:b8:d8:49:bc:2f:5f:21:f6:35:f6:de:ef:30:c6:b6:
8c:55:44:c2:4e:34:27:63:40:b0:0d:46:a0:73:4f:b8:68:08:
b2:c9:ef:85:e9:49:a3:41:05:f9:73:d8:1b:a6:7f:5a:81:c8:
48:71:81:0a:22:31:9d:4c:ce:c8:bd:31:05:ac:67:ab:d3:df:
7b:41:db:dc:44:5f:21:ea:6e:66:e3:ad:54:f4:fa:fc:54:ee:
13:3d:90:07:d7:b4:49:3f:13:d6:09:52:ee:c6:d3:00:15:b8:
e9:25:7d:a9:ff:57:5c:50:05:cc:87:ec:36:2e:35:d3:1a:49:
76:f5:a4:dd:09:bd:1f:c4:eb:5d:2a:29:b1:d8:d9:dc:98:38:
bb:ed:3a:64:b2:90:f5:f1:fd:db:b5:b9:a5:96:f8:69:c3:62:
bf:57:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:49:48 2025 by rpki-client