Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
File: IMXuAtLgWGHdkG_gazhE8E03jHM.cer (raw, json)
Hash identifier: qsWgP0ec5Wioqo79+M32ciyQw7Nlldi7Bi/sfXgZo+8=
Subject key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01970C71B61AF77617F05F66BAC7DCEC4EEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 May 2025 11:54:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35594
IP: 83.137.197.0/24
IP: 93.177.124.0/24
IP: 109.71.190.0/24
IP: 185.179.80.0/22
IP: 195.137.160.0/24
IP: 2a0a:7d80::/29
IP: 2a10:dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:71:b6:1a:f7:76:17:f0:5f:66:ba:c7:dc:ec:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 11:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:8a:d2:8c:ce:52:cc:dc:f0:bf:11:fb:1a:
a9:f8:9a:96:70:fd:57:7c:d9:17:f8:c6:98:08:dc:
ab:a2:14:fa:65:41:f5:80:75:66:68:f1:11:54:08:
eb:b0:f9:07:5a:0b:18:2d:ae:b3:3e:b0:92:3b:ba:
ac:fe:1c:f1:aa:06:6b:5c:ed:4f:b6:1a:eb:fd:79:
32:44:0a:a9:49:2b:1c:03:12:ca:94:23:67:f3:5b:
01:8f:49:1c:a6:5a:d6:50:2d:4c:c7:65:54:60:f0:
aa:00:fb:b9:19:ad:74:da:01:0d:cf:82:c2:25:a3:
5d:5f:5e:a3:ab:c2:5c:6d:c5:bb:13:6b:65:ba:32:
fc:95:e1:02:b6:3f:4d:6a:d4:82:48:df:0c:01:71:
31:46:69:43:30:02:a8:c0:a5:a5:6f:a4:cf:6f:4c:
e8:d8:a1:34:17:99:06:ec:bf:9b:af:8f:76:e7:93:
cc:35:30:c5:67:c6:03:a2:22:ec:87:92:20:84:ff:
24:b3:0a:86:af:bf:3b:6a:f1:47:ec:1b:e5:43:58:
39:7b:56:95:15:73:32:82:43:8f:e6:b5:79:99:7d:
c0:93:a9:c8:b6:87:27:f8:aa:fb:7f:48:48:74:54:
2e:3a:5f:d8:ae:23:a7:44:50:5a:8a:c3:d4:62:2e:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.197.0/24
93.177.124.0/24
109.71.190.0/24
185.179.80.0/22
195.137.160.0/24
IPv6:
2a0a:7d80::/29
2a10:dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35594
Signature Algorithm: sha256WithRSAEncryption
1d:ef:cd:b2:4e:3d:4f:82:91:19:8a:9c:31:b3:05:19:4e:52:
91:bb:2d:e3:b8:c9:8f:ce:dd:76:90:cb:21:7f:86:ba:f5:1f:
75:3d:bc:4a:cf:ed:36:e4:3e:50:79:5a:58:bf:2d:8d:c3:8a:
22:1a:f0:55:cf:f0:f6:09:db:2d:01:2c:5e:8b:12:c5:b1:15:
f6:8e:dc:96:fd:c8:11:0b:e1:e1:4e:aa:c3:cc:f2:c8:80:04:
c4:6d:39:39:06:99:fb:8d:ed:2b:e3:c1:a2:be:70:de:94:1b:
68:39:5e:22:db:49:85:bd:9a:4b:1b:f7:2b:17:4a:59:f4:3d:
26:01:03:7d:58:08:4c:87:bb:64:ae:1e:e2:7e:7e:e3:ac:7e:
fe:8c:f7:af:d9:9f:c5:68:3a:84:5e:4e:e2:d8:21:fe:75:7b:
20:b7:d2:7e:47:09:8c:69:c7:7e:8f:91:53:db:72:8f:5f:01:
1e:e2:90:17:05:34:44:3f:4c:38:5e:e8:63:f3:cf:58:2d:16:
94:ea:cf:30:70:e0:ef:d7:b6:e7:c7:c8:ab:40:89:04:11:a5:
7f:37:11:55:7e:ba:64:95:4a:79:a3:e1:9f:9e:91:d5:db:80:
2c:f9:3c:f6:ef:c8:43:e7:27:79:d0:cc:6b:98:f2:31:a9:1b:
67:01:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:00 2025 by rpki-client