Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
File: FrGYtu469o3rwjR6Xpj3Efsw8os.cer (raw, json)
Hash identifier: nUhfubCg5yhcU/fXhYLbd2Yq35pbC5aXrQmmCcAWV7M=
Subject key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198508E5EABE9C1F92A3166EFD13EC0CAA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Jul 2025 10:22:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214058
IP: 62.68.78.0/24
IP: 212.108.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:8e:5e:ab:e9:c1:f9:2a:31:66:ef:d1:3e:c0:ca:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 28 10:22:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:f1:08:8a:d8:49:29:6c:86:0a:55:c8:d2:
15:e6:6a:09:69:f4:04:3b:6b:5e:68:02:77:e2:4c:
49:ae:b2:f9:b0:c6:eb:1d:3b:6a:d2:52:f9:4d:17:
64:85:5a:84:48:4f:23:45:1b:46:cd:08:1e:81:56:
5a:93:f3:31:26:a2:d4:49:e9:4a:df:77:c9:f0:9e:
ea:3e:b9:f7:16:a5:f4:50:e4:1b:d5:5d:35:fc:0b:
35:2c:97:e8:9c:61:7f:60:c0:2d:f0:1c:7d:36:2e:
bc:19:84:7d:6f:4a:1f:6c:e5:50:9b:61:49:7e:6f:
8c:63:f5:e1:15:c6:04:96:c6:a6:84:78:8d:78:8d:
d3:da:e8:03:0b:ce:11:8b:14:ae:10:90:98:39:15:
92:46:76:b3:54:ca:73:71:2c:77:c7:85:54:b2:72:
06:8f:0d:61:5d:6c:da:68:3a:2d:f6:a0:06:6c:1b:
b0:d6:23:21:f6:8c:83:07:d3:2d:76:de:02:54:18:
3a:96:7c:b1:c2:05:d6:e4:83:68:81:8c:6f:c2:74:
3b:32:97:11:fb:81:c5:c7:fd:cd:8b:2c:56:b4:cc:
ea:0c:90:90:c8:d5:9c:58:07:b1:1b:07:60:5a:4f:
f6:54:bb:82:97:93:92:60:8a:e9:6b:e5:fe:d2:9b:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.78.0/24
212.108.99.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214058
Signature Algorithm: sha256WithRSAEncryption
9e:3d:3a:73:c1:5a:9b:c1:61:41:91:a6:e4:3f:47:0c:49:9c:
70:37:53:a2:28:cc:47:01:93:28:c8:d9:aa:1e:0a:d9:51:0a:
c3:dd:04:ee:54:cd:11:87:b9:0b:f1:f9:54:bb:7d:7a:72:1d:
f3:1b:ee:90:75:17:06:53:ed:87:6f:3c:6f:41:18:a6:30:30:
d7:9f:50:cd:07:a9:64:0e:33:37:bb:b1:cd:10:15:34:a6:61:
be:5c:a5:d4:6d:af:04:82:02:b3:1c:49:9a:cc:cb:91:bd:fe:
e1:8b:b6:dd:b3:1d:2f:ab:d1:5d:f3:89:7d:68:98:00:0a:21:
73:c9:fb:ba:b6:49:40:1f:af:9b:49:8b:03:ea:ee:41:fc:74:
c0:38:65:7e:d9:08:65:24:99:67:ca:93:57:2b:54:4e:7a:a8:
30:a7:6d:22:2d:59:fd:89:89:71:c2:5b:54:42:6f:a9:89:21:
0c:ca:69:d6:78:3d:d9:10:35:05:20:3a:d5:3c:25:8b:c3:61:
f4:3f:6d:2f:1f:6d:f1:bc:d2:c0:ce:2f:a3:12:47:24:1b:3d:
73:3b:1b:a3:0f:b6:91:83:0b:b7:78:d4:a6:8d:f1:d3:b4:fa:
89:13:41:05:d5:3d:33:2a:04:e3:69:eb:9f:db:74:c7:ea:cf:
b3:0d:fb:fe
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZhQjl6r6cH5KjFm79E+wMqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzI4MTAyMjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIxOThiNmVlM2FmNjhkZWJjMjM0N2E1ZTk4ZjcxMWZiMzBmMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp67xCIrYSSlshgpVyNIV5moJafQE
O2teaAJ34kxJrrL5sMbrHTtq0lL5TRdkhVqESE8jRRtGzQgegVZak/MxJqLUSelK
33fJ8J7qPrn3FqX0UOQb1V01/As1LJfonGF/YMAt8Bx9Ni68GYR9b0ofbOVQm2FJ
fm+MY/XhFcYElsamhHiNeI3T2ugDC84RixSuEJCYORWSRnazVMpzcSx3x4VUsnIG
jw1hXWzaaDot9qAGbBuw1iMh9oyDB9Mtdt4CVBg6lnyxwgXW5INogYxvwnQ7MpcR
+4HFx/3NiyxWtMzqDJCQyNWcWAexGwdgWk/2VLuCl5OSYIrpa+X+0pthYwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFBaxmLbuOvaN68I0el6Y9xH7MPKLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIyYWUx
NC1lNDVlLTRlZWUtYmQwNy00NDgyYWRhMjMyZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjJhZTE0
LWU0NWUtNGVlZS1iZDA3LTQ0ODJhZGEyMzJlMy8xL0ZyR1l0dTQ2OW8zcndqUjZY
cGozRWZzdzhvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAPkROAwQA1GxjMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwNEKjANBgkqhkiG9w0BAQsFAAOCAQEAnj06c8Fam8FhQZGm5D9HDEmc
cDdToijMRwGTKMjZqh4K2VEKw90E7lTNEYe5C/H5VLt9enId8xvukHUXBlPth288
b0EYpjAw159QzQepZA4zN7uxzRAVNKZhvlyl1G2vBIICsxxJmszLkb3+4Yu23bMd
L6vRXfOJfWiYAAohc8n7urZJQB+vm0mLA+ruQfx0wDhlftkIZSSZZ8qTVytUTnqo
MKdtIi1Z/YmJccJbVEJvqYkhDMpp1ng92RA1BSA61Twli8Nh9D9tLx9t8bzSwM4v
oxJHJBs9czsbow+2kYMLt3jUpo3x07T6iRNBBdU9MyoE42nrn9t0x+rPsw37/g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:47 2025 by rpki-client