Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer (raw, json)
Hash identifier: +l0mFLZA/ESGQWJ/tPKo8iLlvUKUtoRX1GASGDVFexA=
Subject key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A4E82E3E4B5E8254877DA6982A51EE848
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Nov 2025 10:56:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50411
AS: 62060
AS: 210104
IP: 45.138.152.0/22
IP: 85.115.212.0/22
IP: 93.177.88.0/22
IP: 94.103.252.0/22
IP: 109.196.144.0/20
IP: 185.49.200.0/22
IP: 185.92.248.0/22
IP: 185.215.74.0/23
IP: 194.124.220.0/22
IP: 195.2.212.0/23
IP: 195.2.242.0/23
IP: 2a0d:b240::/29
IP: 2a0f:3080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:82:e3:e4:b5:e8:25:48:77:da:69:82:a5:1e:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 10:56:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:85:e2:3b:7f:f2:aa:a5:27:0e:e1:ec:d0:
ab:16:a2:1c:dc:98:81:42:e4:27:cd:f5:e8:fa:4e:
81:dc:64:b9:45:c4:8b:62:93:d2:ed:62:30:21:40:
70:54:4d:99:86:16:0b:a7:5c:bd:c7:33:49:02:f2:
83:a9:78:e2:75:42:00:5d:3f:f3:65:64:33:bf:4e:
87:8a:9d:4a:f5:8f:df:b5:10:74:c0:97:4c:61:ea:
44:ab:a3:da:8e:aa:22:ab:63:a4:6c:96:fe:7c:df:
1b:27:a7:f9:09:06:16:ec:97:e7:5b:81:b5:be:74:
62:ce:d5:f9:aa:e9:de:66:44:93:55:6f:c3:9c:44:
e6:f5:0b:36:46:5e:c7:38:40:6a:42:9e:5f:6f:da:
65:fa:4c:71:1e:73:e9:00:0d:af:38:04:6b:77:c6:
f2:77:2b:99:00:54:aa:27:3b:6c:1f:bc:cc:da:3f:
bc:fb:62:0d:ee:98:2b:15:b8:6e:fb:aa:5c:a9:e2:
e8:a1:0b:60:40:28:15:06:f5:60:ea:f8:35:76:e4:
12:70:1f:98:9d:34:33:c2:a8:df:45:c0:0a:dc:cf:
d3:d6:61:2c:17:69:7b:ce:24:6b:76:25:dd:c4:4e:
cf:32:c9:e3:94:28:4e:5a:ae:1f:be:56:17:eb:8b:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.152.0/22
85.115.212.0/22
93.177.88.0/22
94.103.252.0/22
109.196.144.0/20
185.49.200.0/22
185.92.248.0/22
185.215.74.0/23
194.124.220.0/22
195.2.212.0/23
195.2.242.0/23
IPv6:
2a0d:b240::/29
2a0f:3080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50411
62060
210104
Signature Algorithm: sha256WithRSAEncryption
7a:83:36:7a:e2:fe:b1:64:0f:99:48:b0:2a:cb:00:2b:78:65:
51:1a:cc:ae:d1:c2:28:3f:21:6d:6b:5f:59:41:9c:34:db:b9:
9e:21:5f:14:13:27:a1:91:42:0f:db:b0:d0:ab:87:61:a0:3d:
5a:40:25:4a:66:c3:aa:fb:85:32:dd:cb:b0:6c:83:5b:d8:e7:
cf:3e:65:cb:02:61:ac:bf:45:66:aa:c2:48:5d:46:65:be:9d:
6c:5f:d5:a2:20:94:96:24:67:81:f8:a7:4a:33:c5:06:ab:75:
f4:17:70:10:eb:ac:e7:c8:b8:a7:8a:6e:05:20:40:0f:ea:4a:
bb:d5:9d:c3:6b:50:b4:72:4e:a1:8c:89:45:87:ce:f7:73:63:
ef:fc:e0:da:97:8a:6a:30:20:34:d8:12:35:88:3b:a4:f5:8a:
4c:7f:c7:8a:f2:a3:09:d4:af:04:cd:b5:48:65:2f:0b:8d:dd:
54:3b:13:49:b2:c1:db:78:d7:62:c8:76:d7:4a:35:ea:43:8e:
31:56:49:da:ab:da:49:d7:ed:36:6a:62:17:e8:9c:42:63:b7:
15:b2:45:0b:74:84:f6:bb:8e:35:b7:93:2a:4f:16:2b:c0:af:
e4:be:72:6d:75:63:33:58:01:f8:d0:ef:b6:6c:ba:72:77:f5:
70:83:54:a2
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAZpOguPkteglSHfaaYKlHuhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMTA0MTA1NjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDA0NmI0MzQ1MjZiZjI4MzZlMjc0OWNlMGUzNmUwODQ0M2Q2YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+uF4jt/8qqlJw7h7NCrFqIc3JiB
QuQnzfXo+k6B3GS5RcSLYpPS7WIwIUBwVE2ZhhYLp1y9xzNJAvKDqXjidUIAXT/z
ZWQzv06Hip1K9Y/ftRB0wJdMYepEq6Pajqoiq2OkbJb+fN8bJ6f5CQYW7JfnW4G1
vnRiztX5quneZkSTVW/DnETm9Qs2Rl7HOEBqQp5fb9pl+kxxHnPpAA2vOARrd8by
dyuZAFSqJztsH7zM2j+8+2IN7pgrFbhu+6pcqeLooQtgQCgVBvVg6vg1duQScB+Y
nTQzwqjfRcAK3M/T1mEsF2l7ziRrdiXdxE7PMsnjlChOWq4fvlYX64vYIQIDAQAB
o4IC/DCCAvgwHQYDVR0OBBYEFAAEa0NFJr8oNuJ0nODjbghEPWuRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2QzN2Y4
ZC00MTBkLTQ1MTgtODBlNi1lY2Q2NzEyODJjMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvZDM3Zjhk
LTQxMGQtNDUxOC04MGU2LWVjZDY3MTI4MmMxZi8xL0FBUnJRMFVtdnlnMjRuU2M0
T051Q0VROWE1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF
BwEHAQH/BGIwYDBIBAIAATBCAwQCLYqYAwQCVXPUAwQCXbFYAwQCXmf8AwQEbcSQ
AwQCuTHIAwQCuVz4AwQBuddKAwQCwnzcAwQBwwLUAwQBwwLyMBQEAgACMA4DBQMq
DbJAAwUDKg8wgDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAxOsCAwDybAIDAzS4
MA0GCSqGSIb3DQEBCwUAA4IBAQB6gzZ64v6xZA+ZSLAqywAreGVRGsyu0cIoPyFt
a19ZQZw027meIV8UEyehkUIP27DQq4dhoD1aQCVKZsOq+4Uy3cuwbINb2OfPPmXL
AmGsv0VmqsJIXUZlvp1sX9WiIJSWJGeB+KdKM8UGq3X0F3AQ66znyLinim4FIEAP
6kq71Z3Da1C0ck6hjIlFh873c2Pv/ODal4pqMCA02BI1iDuk9YpMf8eK8qMJ1K8E
zbVIZS8Ljd1UOxNJssHbeNdiyHbXSjXqQ44xVknaq9pJ1+02amIX6JxCY7cVskUL
dIT2u441t5MqTxYrwK/kvnJtdWMzWAH40O+2bLpyd/Vwg1Si
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:21:07 2025 by rpki-client