Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
File: Lokc9xG_fhxC4ILWoviaBL7rldE.cer (raw, json)
Hash identifier: G1l1ReL+dHc8vt3MWsQxDTfYPPCaICkW5orQUc6lhaQ=
Subject key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019807C2EC1E32F192ED112D6492472890F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Jul 2025 07:07:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.203.56.0/22
IP: 194.88.214.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:c2:ec:1e:32:f1:92:ed:11:2d:64:92:47:28:90:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 07:07:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:d7:57:38:7c:11:8b:79:4d:41:95:52:42:
7b:39:cd:73:88:66:a6:f3:cd:9f:bf:03:a2:e4:90:
9d:91:b8:86:fc:92:fb:16:07:59:6c:1b:40:fd:07:
01:c6:d2:db:dd:7f:bc:0c:a8:2c:76:54:e2:82:ae:
0f:f1:b6:74:dc:47:0a:cf:75:e7:2a:bf:a4:4f:04:
2b:08:76:af:e2:85:1b:8c:0d:21:8f:1a:db:15:33:
ec:27:4c:32:4a:d0:25:1c:83:9b:8f:fb:00:d8:81:
58:fa:18:24:58:1b:c4:a2:54:36:22:cb:31:db:37:
3c:4c:cb:82:88:bd:dd:92:c1:d7:ee:de:9e:24:f2:
34:2f:46:c7:f5:74:23:e7:ce:e9:45:b4:20:09:7a:
af:e3:69:2d:63:4f:77:01:d3:4f:b3:bb:ad:30:c4:
bd:d5:05:0f:f0:59:32:d9:35:b3:a7:72:04:f8:45:
4a:6d:35:b3:12:39:b2:db:46:85:26:03:44:48:33:
48:2f:f6:4e:78:94:54:fc:de:f3:46:7e:45:25:c4:
8a:ea:96:4e:0d:7a:28:2b:ee:30:d0:fe:79:58:47:
af:69:93:02:e6:58:bf:89:41:dd:16:e5:4d:dd:c7:
7b:e2:68:43:c1:70:5c:8d:e8:75:27:7f:40:02:1e:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.56.0/22
194.88.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:a3:06:ac:54:17:13:54:68:5e:b6:67:1e:08:43:71:f8:c5:
79:9b:bd:a1:32:64:57:02:2d:da:51:97:e8:d0:cc:b2:0f:a6:
94:47:37:7f:61:db:9d:e5:60:fb:da:ce:19:3f:35:8f:ba:05:
75:d6:04:55:ab:c4:fc:a6:02:3a:29:c9:26:f5:88:44:a3:ce:
70:a8:d8:0d:55:a9:01:3f:b8:38:37:e8:8f:5f:81:ad:e4:04:
fe:2d:d1:7f:9b:3d:d0:e7:94:b2:2d:08:4c:1a:d8:57:8c:6c:
ba:15:e6:c9:a2:60:cf:f3:99:88:99:ad:fb:f9:cf:23:d6:0b:
84:07:ec:b5:84:d9:17:32:80:dc:78:63:08:a2:fd:aa:ad:cb:
23:c0:ab:47:44:78:84:0d:75:ff:c6:b2:d2:69:4f:57:ee:a3:
a5:12:eb:04:9d:f5:d2:67:ea:50:95:70:1e:b1:ad:06:78:a1:
09:07:26:c9:02:8e:3c:b1:67:76:73:78:e7:2c:35:d6:a0:73:
ba:0f:2a:c8:e6:0b:b6:84:fd:b2:b5:fe:50:82:ba:a1:a3:91:
bd:90:d5:8a:6d:e5:df:b1:b1:12:d8:9f:a8:1d:17:a3:3a:9c:
20:73:27:af:73:ae:51:68:ba:fc:bd:fb:7b:a1:3d:b4:24:bf:
8d:4c:8d:38
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZgHwuweMvGS7REtZJJHKJD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzE0MDcwNzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTg5MWNmNzExYmY3ZTFjNDJlMDgyZDZhMmY4OWEwNGJlZWI5NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYvXVzh8EYt5TUGVUkJ7Oc1ziGam
882fvwOi5JCdkbiG/JL7FgdZbBtA/QcBxtLb3X+8DKgsdlTigq4P8bZ03EcKz3Xn
Kr+kTwQrCHav4oUbjA0hjxrbFTPsJ0wyStAlHIObj/sA2IFY+hgkWBvEolQ2Issx
2zc8TMuCiL3dksHX7t6eJPI0L0bH9XQj587pRbQgCXqv42ktY093AdNPs7utMMS9
1QUP8Fky2TWzp3IE+EVKbTWzEjmy20aFJgNESDNIL/ZOeJRU/N7zRn5FJcSK6pZO
DXooK+4w0P55WEevaZMC5li/iUHdFuVN3cd74mhDwXBcjeh1J39AAh7JTQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFC6JHPcRv34cQuCC1qL4mgS+65XRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzUwYjU1
MC1mODVlLTQ4OWItODQ3My1lMDM2NTM4MWJiODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNTBiNTUw
LWY4NWUtNDg5Yi04NDczLWUwMzY1MzgxYmI4NS8xL0xva2M5eEdfZmh4QzRJTFdv
dmlhQkw3cmxkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCwcs4AwQBwljWMA0GCSqGSIb3DQEBCwUAA4IB
AQBvowasVBcTVGhetmceCENx+MV5m72hMmRXAi3aUZfo0MyyD6aURzd/Ydud5WD7
2s4ZPzWPugV11gRVq8T8pgI6Kckm9YhEo85wqNgNVakBP7g4N+iPX4Gt5AT+LdF/
mz3Q55SyLQhMGthXjGy6FebJomDP85mIma37+c8j1guEB+y1hNkXMoDceGMIov2q
rcsjwKtHRHiEDXX/xrLSaU9X7qOlEusEnfXSZ+pQlXAesa0GeKEJBybJAo48sWd2
c3jnLDXWoHO6DyrI5gu2hP2ytf5Qgrqho5G9kNWKbeXfsbES2J+oHRejOpwgcyev
c65RaLr8vft7oT20JL+NTI04
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:59 2025 by rpki-client