Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer (raw, json)
Hash identifier: w2gkxfprDh2cOkcW1kyV1ropBiWe8Ue1MyLs3QfQgkg=
Subject key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973F75FE2EBFEA5F7A189108641AA71E94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Jun 2025 09:39:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202777
AS: 203764
IP: 185.235.141.0/24
IP: 2a06:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:75:fe:2e:bf:ea:5f:7a:18:91:08:64:1a:a7:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 09:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:40:9e:73:76:eb:64:85:56:62:51:d0:8d:
ee:56:33:13:98:73:2d:f2:ed:47:4b:73:da:9a:f1:
83:ad:d4:7f:72:7a:7f:60:e6:45:4d:a4:a4:6a:4d:
d6:d3:e2:7c:6a:11:c0:77:1a:f0:90:8e:7d:cb:97:
db:e9:a6:ea:88:4d:2e:d5:29:4d:9d:c1:05:9b:49:
1e:f0:cf:00:5c:df:29:04:c8:77:82:a4:8b:56:a0:
c4:db:47:ba:57:9e:b2:81:01:e7:1f:43:29:64:be:
8d:82:fb:a8:37:a1:a2:4c:4c:a4:c2:83:ce:52:ee:
88:63:26:13:1b:db:28:7f:fa:d1:aa:81:a7:5b:6f:
d3:4b:d5:d7:d9:52:7e:52:a7:67:56:26:5d:57:9f:
7f:fe:fe:00:1b:86:f5:6e:69:8b:b2:84:b1:54:80:
19:c2:6f:61:81:d7:ff:a6:9a:81:a4:a0:24:a0:a9:
1c:93:d9:0f:96:05:77:49:a2:e4:ea:7e:95:3c:91:
ca:04:8c:ea:b2:01:59:47:08:65:27:64:bf:98:31:
8c:e5:8e:ec:9a:00:9b:2e:be:17:f2:24:ce:01:31:
2a:3c:14:1a:8b:37:68:70:47:8c:bc:1c:f9:e5:17:
0e:e7:69:f9:56:d2:17:d9:b3:35:6c:ef:3a:b0:19:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.141.0/24
IPv6:
2a06:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202777
203764
Signature Algorithm: sha256WithRSAEncryption
11:62:bf:d6:93:59:78:01:d1:ea:42:48:78:d1:93:57:27:9b:
13:7c:d7:8a:ad:1d:6c:84:43:7b:99:b6:74:88:66:aa:5c:34:
53:96:83:65:43:69:46:de:be:9e:63:3d:44:47:d2:2b:4f:0e:
1b:62:1c:c0:28:18:58:16:d7:7a:b5:68:6d:73:86:2b:86:76:
bd:0c:97:04:14:98:dc:e6:c7:c5:ea:40:8f:fd:21:a9:d9:0d:
b4:4c:99:c5:06:da:30:8b:94:b8:78:94:04:e8:23:a9:15:7e:
74:dc:fd:f0:f7:b8:d6:fe:21:d0:68:dd:a3:07:ef:c1:1c:7a:
bd:87:3a:a9:a7:02:79:cd:eb:ce:57:27:c7:bf:f7:b2:eb:52:
44:32:61:44:7c:86:d8:1e:37:33:fe:08:c1:67:65:63:ab:1d:
30:07:31:c2:83:8b:95:de:a8:b1:3f:c3:1a:5c:f9:d6:2e:d0:
68:70:81:af:97:20:f1:e7:8b:14:e4:bf:d7:b5:b2:0b:57:73:
b7:c8:19:9d:b9:0e:b4:5a:c4:9e:48:5a:77:c5:0d:68:fd:99:
a2:69:6c:64:9b:0b:eb:19:99:73:20:c0:c1:1b:37:36:a1:a1:
9a:fd:1c:dc:0b:07:64:59:16:48:19:fd:1e:fc:68:10:a1:10:
79:04:5b:4c
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZc/df4uv+pfehiRCGQapx6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjA1MDkzOTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjJmOGIyYjk0NzIxZTkyOGY2MTg4YjVjZjE1MDUzMTQ0ZGVkZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz9AnnN262SFVmJR0I3uVjMTmHMt
8u1HS3PamvGDrdR/cnp/YOZFTaSkak3W0+J8ahHAdxrwkI59y5fb6abqiE0u1SlN
ncEFm0ke8M8AXN8pBMh3gqSLVqDE20e6V56ygQHnH0MpZL6NgvuoN6GiTEykwoPO
Uu6IYyYTG9sof/rRqoGnW2/TS9XX2VJ+UqdnViZdV59//v4AG4b1bmmLsoSxVIAZ
wm9hgdf/ppqBpKAkoKkck9kPlgV3SaLk6n6VPJHKBIzqsgFZRwhlJ2S/mDGM5Y7s
mgCbLr4X8iTOATEqPBQaizdocEeMvBz55RcO52n5VtIX2bM1bO86sBmrpQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFA8viyuUch6Sj2GItc8VBTFE3t+MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzRlNTkw
Mi1lMjgzLTQ5MTYtYTMzYy03MjI2YTg4NDVlMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNGU1OTAy
LWUyODMtNDkxNi1hMzNjLTcyMjZhODg0NWUwMS8xL0R5LUxLNVJ5SHBLUFlZaTF6
eFVGTVVUZTM0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAueuNMA0EAgACMAcDBQMqBu6AMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMYGQIDAxv0MA0GCSqGSIb3DQEBCwUAA4IBAQARYr/W
k1l4AdHqQkh40ZNXJ5sTfNeKrR1shEN7mbZ0iGaqXDRTloNlQ2lG3r6eYz1ER9Ir
Tw4bYhzAKBhYFtd6tWhtc4Yrhna9DJcEFJjc5sfF6kCP/SGp2Q20TJnFBtowi5S4
eJQE6COpFX503P3w97jW/iHQaN2jB+/BHHq9hzqppwJ5zevOVyfHv/ey61JEMmFE
fIbYHjcz/gjBZ2Vjqx0wBzHCg4uV3qixP8MaXPnWLtBocIGvlyDx54sU5L/XtbIL
V3O3yBmduQ60WsSeSFp3xQ1o/ZmiaWxkmwvrGZlzIMDBGzc2oaGa/RzcCwdkWRZI
Gf0e/GgQoRB5BFtM
-----END CERTIFICATE-----
Generated at Thu Jun 12 22:25:01 2025 by rpki-client