Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
File: P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer (raw, json)
Hash identifier: t64XsCsYPzXHDzqX+D+HywmqqnIribzyZjHx4hz3H3A=
Subject key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01982C537FA84D2B09F12AC0CA9CE28B9DBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Jul 2025 09:32:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 34940
AS: 39179
AS: 41393
AS: 43198
AS: 60648
AS: 61341
AS: 196875
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.93.128.0/19
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 79.99.144.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.28.232.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.255.255
IP: 95.130.96.0/21
IP: 109.176.0.0/16
IP: 158.255.8.0/21
IP: 185.20.32.0/22
IP: 185.24.84.0/24
IP: 185.24.86.0/23
IP: 185.49.124.0/22
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:1c40::/29
IP: 2a02:21f8::/32
IP: 2a02:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:53:7f:a8:4d:2b:09:f1:2a:c0:ca:9c:e2:8b:9d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 09:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c4:33:c1:cb:64:46:09:6b:ff:d6:2e:92:
30:e6:08:0e:3e:52:f9:ec:68:28:48:7c:99:fb:e7:
e0:4c:fd:bb:1c:69:d0:18:0d:5b:bf:60:81:c0:e5:
87:76:7f:9f:2b:67:f9:6f:47:ab:61:f4:e9:8d:72:
63:35:1d:6b:90:87:f9:92:4f:d1:49:7a:50:27:c3:
88:69:b3:4b:13:5a:31:b3:51:a7:c0:71:0c:d9:a7:
6f:ed:5f:4c:84:e3:fe:b5:de:0b:a6:c3:81:6c:64:
d6:0b:6c:cc:4c:10:26:dc:ec:45:1c:e9:b1:23:e2:
54:ca:8a:23:fc:74:fb:81:ac:4a:c8:c1:ea:98:09:
41:3a:86:11:1f:14:ea:b9:07:03:09:7f:c2:ee:3e:
bf:58:a6:00:e4:72:99:6d:56:21:c8:b9:b2:c8:3a:
75:2a:38:26:68:da:1e:41:81:7b:67:ad:a2:13:50:
64:71:0b:a4:d1:36:a2:1d:24:9f:f7:44:a9:ed:15:
d6:31:2f:12:80:d9:4c:e3:41:d7:0c:04:95:3c:0d:
02:b4:8d:26:3f:3a:b1:37:5e:68:3e:33:b1:c2:a9:
33:03:66:ef:e8:3c:ac:8e:cf:2b:17:e7:49:58:55:
59:f7:5d:9c:04:20:ec:6b:93:5d:b5:02:74:28:a4:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.49.124.0/22
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a02:21f8::/32
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
34940
39179
41393
43198
60648
61341
196875
199291
Signature Algorithm: sha256WithRSAEncryption
2c:61:38:81:5f:56:0f:ef:da:41:68:ba:a6:3c:34:22:da:2d:
36:f7:27:15:85:7b:3c:0a:44:1e:90:32:07:6b:53:e2:9b:70:
16:fa:07:a8:82:24:18:14:2e:a8:06:e9:d1:a2:73:38:40:05:
0a:30:c1:88:18:7d:36:38:e1:91:e5:01:8f:a0:63:80:12:8b:
51:b8:91:e9:a9:2c:06:6d:c6:e9:82:9d:40:4f:99:d8:f9:6a:
74:dd:70:de:09:c8:9e:17:ae:05:44:05:d5:a8:76:92:e4:a2:
9d:49:20:39:37:9a:1c:c3:c2:e0:fb:4a:d8:df:98:5a:ad:67:
da:f5:cc:60:cc:2a:4c:05:b1:7d:7b:e8:93:4b:6d:f7:94:4d:
5d:9b:7c:97:6a:42:55:88:0e:87:e9:8c:7b:2e:c0:75:8c:9c:
9b:dc:41:3c:ec:9f:f4:ef:27:b9:32:75:97:d7:ee:7e:e1:1c:
30:5b:03:28:ed:1a:d4:a3:22:cc:6f:98:a8:a1:eb:07:db:7f:
07:4f:b8:cb:7a:8d:ba:bd:78:24:4c:10:83:48:09:c2:73:c2:
27:0a:d4:3e:e8:c4:ea:53:c4:81:b7:25:69:3d:76:0e:6d:7e:
d5:27:1e:e2:c2:c2:5c:bd:41:76:65:4e:2b:5a:4d:e6:83:44:
e5:35:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 04:13:50 2025 by rpki-client