Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
File: OXsxr3cA59mVkO39nVhKG1A46tc.cer (raw, json)
Hash identifier: ErPggmrsd3R5/apr+2UZlzwpL1CTITn6zrO6JuzheUM=
Subject key identifier: 39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ECFF4BF8122A89D38582723074D6725F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 09:21:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25453
IP: 193.110.147.0/24
IP: 193.111.94.0/24
IP: 195.245.196.0/24
IP: 2001:7f8:1a::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:ff:4b:f8:12:2a:89:d3:85:82:72:30:74:d6:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 09:21:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:c2:8a:fb:5b:20:2c:f6:d2:32:4c:f5:02:
0b:0e:17:97:36:53:9e:95:88:b6:88:92:a9:cd:27:
2a:06:90:d8:04:15:ef:a9:6d:7d:a4:3a:16:ba:90:
fa:fb:24:13:b2:87:23:ac:4b:05:3b:eb:5c:a1:9a:
e0:6a:51:97:a4:ff:f8:96:30:c3:0e:61:59:57:ec:
df:2a:09:1e:9b:ef:c8:0f:c8:a7:2b:90:1c:be:b7:
68:6b:33:a6:fe:74:ca:7e:10:21:10:5b:46:cb:98:
ef:7b:28:25:ac:3c:92:b6:82:6d:ff:01:b1:9e:a9:
8d:c7:2d:f2:56:41:e5:38:3a:cc:75:18:d0:21:e1:
c5:f3:bf:64:61:43:57:03:b1:17:18:a6:3b:08:5d:
3d:45:65:01:63:96:c7:98:53:f3:fb:ba:ff:09:1d:
0c:d2:b7:3c:b0:f2:54:b5:af:75:f1:77:44:3e:42:
a8:51:29:80:f8:5a:f8:a7:23:a0:5f:6a:47:ff:3a:
dd:88:d4:9f:f4:5f:f5:ba:a5:61:3a:b2:63:e2:78:
f5:91:d9:af:15:31:2d:e9:d3:b4:87:61:df:e0:22:
82:40:fe:e6:37:29:8f:20:47:19:5e:cb:e4:ee:61:
a2:71:e7:fc:a0:4f:1e:54:97:12:9f:eb:e7:46:56:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.147.0/24
193.111.94.0/24
195.245.196.0/24
IPv6:
2001:7f8:1a::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25453
Signature Algorithm: sha256WithRSAEncryption
8b:ca:a1:ab:67:80:8a:7f:b8:3a:0e:8c:64:5d:03:5e:84:70:
b0:9f:b5:cc:f5:ec:51:0d:80:d9:50:d2:97:df:e0:92:f5:97:
e8:1d:b0:ba:c5:6a:fe:b8:c5:79:58:83:84:03:5f:ef:42:5c:
ac:b8:42:32:2d:4e:42:fe:68:b4:3d:66:9c:47:cd:b6:56:e6:
b3:76:c5:64:8e:56:05:5f:c5:b1:b1:96:2d:fe:e7:7a:4d:97:
ac:48:14:1c:95:16:f2:4f:9a:54:c6:6f:3b:9a:73:03:02:e4:
6d:1f:a7:96:6a:e1:61:52:d0:b0:b4:d1:af:d0:f4:4c:b3:30:
18:e8:35:9c:e6:d4:89:76:7f:db:c0:62:ad:91:01:be:ef:31:
ce:63:aa:00:b9:78:64:e0:90:3a:8a:58:bc:55:20:6c:92:a6:
03:23:71:44:80:b9:f2:90:31:2a:8c:20:3a:41:0f:10:da:5a:
cd:e7:29:76:c8:c5:36:5d:ee:4f:7e:d4:71:b9:66:a0:f8:20:
c0:02:72:00:b6:80:0b:1e:4c:ff:3c:a5:da:32:49:50:cf:3b:
0d:28:cb:ae:79:1a:4a:e8:9d:93:a2:ec:28:6d:39:00:f8:93:
7c:00:a6:a8:9d:d1:e1:4a:85:69:92:64:0d:72:d7:cc:0e:7b:
7b:d8:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:39 2025 by rpki-client