Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
File: YTXB97cUDIcufz_zRitO3GMddnQ.cer (raw, json)
Hash identifier: IzNck9OJwBbwMHRPd4g8SpDqEj5xdFOkYtBXmucgs5s=
Subject key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D45AD73902750CE98ACE0A134B4E1DCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 14:30:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208427
IP: 185.231.244.0/22
IP: 194.147.114.0/23
IP: 194.147.148.0/23
IP: 2a0c:9300::/29
IP: 2a0f:4240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:5a:d7:39:02:75:0c:e9:8a:ce:0a:13:4b:4e:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 14:30:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:51:27:4b:8a:1e:15:ee:cf:e3:2f:d3:b2:
24:b7:dc:e0:ea:ff:b8:91:a0:15:67:53:bb:e7:8f:
4e:ed:8b:72:d2:21:45:60:70:88:81:5e:b2:83:a8:
1d:4e:a7:ea:03:b9:e4:a7:fe:7d:fd:61:50:04:8a:
28:09:88:2a:f2:68:08:7c:98:ae:34:fd:03:cb:f1:
42:da:85:44:3e:2b:4c:7b:c3:cf:67:eb:0c:9e:3b:
4b:26:84:40:ca:b6:19:6c:e1:e8:d7:27:5f:d8:eb:
f4:4a:ce:7e:48:3b:df:0a:06:2b:8e:37:e1:e4:61:
ff:a9:de:46:f7:02:64:15:46:b8:e6:52:af:fd:4e:
c1:2b:45:92:e3:27:59:b3:eb:39:fa:5d:d6:2f:77:
81:c0:7e:4d:33:fa:4f:5e:24:bb:36:95:84:8c:d1:
0a:5e:f2:c0:52:c6:91:9a:16:23:38:7f:04:eb:69:
66:1c:d3:b4:5d:f3:84:ec:61:f6:75:b9:74:aa:1a:
1c:47:fe:af:93:06:a9:5f:5e:26:fa:2d:c3:dc:bd:
3e:e4:1c:d1:0d:54:dd:c3:53:23:4a:cc:db:23:d1:
df:2b:e0:70:e2:07:39:d7:99:b2:c0:ee:17:f3:20:
c3:12:14:19:b0:15:24:4a:28:64:c9:7b:5c:71:5b:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/23
194.147.148.0/23
IPv6:
2a0c:9300::/29
2a0f:4240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208427
Signature Algorithm: sha256WithRSAEncryption
69:0f:21:50:46:7f:38:e4:8b:e4:54:33:c5:8b:7c:87:fd:fc:
5c:64:87:53:9f:dc:ac:7f:a7:01:91:f6:4b:74:67:6d:63:13:
9a:4e:37:fe:f1:73:13:4d:dd:3c:40:ac:f6:5e:bf:60:59:69:
3e:bf:e4:62:17:b0:3f:e5:92:d5:07:85:fb:21:fe:6b:f2:b3:
4e:cf:1b:91:89:0a:48:0a:65:c0:95:02:83:07:89:91:d4:65:
04:80:6b:21:8e:73:71:95:c9:79:aa:3c:d7:09:6a:c7:33:52:
a8:9a:51:ae:83:42:63:8d:92:e0:c4:f4:0e:fc:ae:69:de:1f:
41:68:2c:c7:36:72:45:4b:aa:21:92:2a:32:52:c2:5a:47:1d:
78:d0:ae:50:4a:21:a3:98:c0:44:6d:69:0d:d3:8e:84:4f:d9:
85:d3:33:54:21:b5:0c:6d:36:e9:36:87:24:c7:86:40:90:2f:
9f:bc:43:d7:d3:bf:1e:86:b6:39:fd:82:64:46:e7:5e:bc:6b:
01:24:8f:4f:36:db:ce:28:7a:a6:7e:4d:95:76:e6:92:18:5b:
8c:a8:e6:58:76:18:82:4f:ee:00:7e:02:46:13:0c:b2:c0:6f:
3a:4b:e2:d2:6e:f3:18:ff:05:af:f1:61:ba:e9:eb:cc:e4:ca:
ac:45:af:7a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZbUWtc5AnUM6YrOChNLTh3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTE1MTQzMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTM1YzFmN2I3MTQwYzg3MmU3ZjNmZjM0NjJiNGVkYzYzMWQ3Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nlRJ0uKHhXuz+Mv07Ikt9zg6v+4
kaAVZ1O7549O7Yty0iFFYHCIgV6yg6gdTqfqA7nkp/59/WFQBIooCYgq8mgIfJiu
NP0Dy/FC2oVEPitMe8PPZ+sMnjtLJoRAyrYZbOHo1ydf2Ov0Ss5+SDvfCgYrjjfh
5GH/qd5G9wJkFUa45lKv/U7BK0WS4ydZs+s5+l3WL3eBwH5NM/pPXiS7NpWEjNEK
XvLAUsaRmhYjOH8E62lmHNO0XfOE7GH2dbl0qhocR/6vkwapX14m+i3D3L0+5BzR
DVTdw1MjSszbI9HfK+Bw4gc515mywO4X8yDDEhQZsBUkSihkyXtccVutuQIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFGE1wfe3FAyHLn8/80YrTtxjHXZ0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzQzM2Vk
Zi1hYWY4LTQ2NjktODc3Yy1lMzc4MWQ4ZmU3NGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNDMzZWRm
LWFhZjgtNDY2OS04NzdjLWUzNzgxZDhmZTc0Yy8xL1lUWEI5N2NVREljdWZ6X3pS
aXRPM0dNZGRuUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDAYBAIAATASAwQCuef0AwQBwpNyAwQBwpOUMBQEAgACMA4DBQMq
DJMAAwUDKg9CQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLiswDQYJKoZIhvcN
AQELBQADggEBAGkPIVBGfzjki+RUM8WLfIf9/Fxkh1Of3Kx/pwGR9kt0Z21jE5pO
N/7xcxNN3TxArPZev2BZaT6/5GIXsD/lktUHhfsh/mvys07PG5GJCkgKZcCVAoMH
iZHUZQSAayGOc3GVyXmqPNcJasczUqiaUa6DQmONkuDE9A78rmneH0FoLMc2ckVL
qiGSKjJSwlpHHXjQrlBKIaOYwERtaQ3TjoRP2YXTM1QhtQxtNuk2hyTHhkCQL5+8
Q9fTvx6Gtjn9gmRG5168awEkj082284oeqZ+TZV25pIYW4yo5lh2GIJP7gB+AkYT
DLLAbzpL4tJu8xj/Ba/xYbrp68zkyqxFr3o=
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:38:49 2025 by rpki-client