Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
File: fcSs7cuGzd_tf23oyt_KAEabvI4.cer (raw, json)
Hash identifier: Binm5ycDKIZWM/Nr90QW3Pjkn8Ry8nxdR59I83/8VSQ=
Subject key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197687FD20017C86BA6E8695933E5C16B83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Jun 2025 08:54:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2116
AS: 3307
AS: 5381
AS: 6709
AS: 8896
AS: 9173
AS: 13052
AS: 13069
AS: 13212
AS: 25351
AS: 35094
AS: 41572
AS: 57963
IP: 31.185.24.0/21
IP: 37.191.128.0/17
IP: 45.138.236.0/22
IP: 62.63.0.0/18
IP: 62.101.192.0/18
IP: 64.28.0.0/19
IP: 77.40.128.0/17
IP: 77.88.64.0/18
IP: 77.234.48.0/21
IP: 77.241.96.0/20
IP: 78.24.144.0/21
IP: 79.135.0.0/19
IP: 80.64.192.0/20
IP: 80.241.80.0/20
IP: 81.0.128.0/18
IP: 81.175.0.0/20
IP: 81.175.20.0 -- 81.175.63.255
IP: 81.191.0.0/16
IP: 82.196.192.0/19
IP: 84.20.96.0/19
IP: 85.112.128.0/19
IP: 85.196.64.0/18
IP: 85.221.0.0/17
IP: 85.252.0.0/16
IP: 86.62.128.0/18
IP: 87.118.0.0/18
IP: 88.84.160.0/19
IP: 89.191.0.0/19
IP: 89.221.96.0/20
IP: 91.135.32.0/20
IP: 91.202.80.0/22
IP: 109.199.192.0/19
IP: 178.74.0.0/18
IP: 185.8.16.0/22
IP: 185.15.216.0/22
IP: 185.35.80.0/22
IP: 185.67.116.0/22
IP: 185.92.52.0/22
IP: 185.126.184.0/22
IP: 185.129.156.0/22
IP: 193.69.0.0/16
IP: 193.71.0.0/16
IP: 193.75.0.0/17
IP: 193.90.0.0/16
IP: 193.91.128.0/17
IP: 194.19.0.0/17
IP: 194.29.200.0/22
IP: 194.54.96.0/19
IP: 195.0.128.0 -- 195.1.255.255
IP: 195.18.128.0/17
IP: 195.139.0.0/16
IP: 195.159.0.0/16
IP: 195.204.0.0/16
IP: 212.33.128.0/19
IP: 212.62.224.0/19
IP: 212.71.64.0/19
IP: 213.52.0.0/17
IP: 213.151.128.0/19
IP: 213.158.224.0/19
IP: 213.160.224.0 -- 213.160.247.255
IP: 213.172.192.0/19
IP: 213.239.64.0/18
IP: 217.8.128.0/19
IP: 217.14.0.0/20
IP: 217.77.32.0/20
IP: 217.118.32.0/19
IP: 217.144.224.0/19
IP: 2001:840::/29
IP: 2001:8c0::/29
IP: 2001:4dd8::/29
IP: 2a00:1e18::/29
IP: 2a00:c440::/29
IP: 2a01:520::/29
IP: 2a02:270::/29
IP: 2a03:c000::/29
IP: 2a04:6340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:7f:d2:00:17:c8:6b:a6:e8:69:59:33:e5:c1:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 13 08:54:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:b3:31:7c:e6:72:30:1c:22:6a:a5:92:0d:
c3:c9:d1:f7:d3:76:b2:77:00:16:c1:49:5c:63:e7:
80:29:7e:48:76:52:9b:25:18:0c:58:33:79:86:13:
86:1a:33:c3:52:48:3b:3a:99:4b:6c:de:28:12:49:
e4:f3:75:55:33:70:57:30:d9:ae:c7:14:2b:6c:96:
87:c7:8a:ff:f1:34:95:ed:7d:d2:d4:f5:dc:66:de:
c9:8f:e7:49:5c:32:40:55:dd:ff:d2:6f:a5:a8:53:
5a:02:79:79:50:c1:ae:90:37:58:20:55:cd:99:22:
18:dc:26:f2:11:26:a7:2c:a6:8e:ca:36:72:dd:f4:
98:62:3b:bb:48:fd:c0:15:44:6a:a1:16:29:c8:68:
9d:32:c4:73:42:0e:30:fd:59:5e:64:70:89:bc:93:
8b:df:cd:0a:93:97:c9:66:ee:35:97:51:11:23:f5:
17:f4:bd:82:35:7d:85:de:43:14:72:f0:e0:be:a9:
41:1e:10:66:84:b5:57:77:98:da:b4:34:6a:b4:0a:
cb:6a:45:fd:10:52:39:c4:44:2d:ff:a8:95:49:2e:
a6:ca:ac:f7:47:ea:55:9d:d9:fe:27:3d:9f:45:03:
03:79:08:c0:2c:b1:d3:f3:3d:fd:cc:58:95:1a:16:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
45.138.236.0/22
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
77.241.96.0/20
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
89.221.96.0/20
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.15.216.0/22
185.35.80.0/22
185.67.116.0/22
185.92.52.0/22
185.126.184.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.33.128.0/19
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:1e18::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2116
3307
5381
6709
8896
9173
13052
13069
13212
25351
35094
41572
57963
Signature Algorithm: sha256WithRSAEncryption
8c:65:59:8e:76:3b:52:15:ef:f3:f0:46:03:02:e7:f5:a2:6b:
f2:1c:f0:cc:37:54:18:1d:6a:e4:2f:74:92:98:79:5b:60:2e:
8b:fe:7e:bb:89:04:d0:8b:69:4e:6b:32:54:24:bf:a0:fd:49:
b5:9e:ec:e3:9d:36:7b:a2:88:d0:d7:8c:b1:19:e8:b1:d6:87:
1c:a3:64:73:03:c6:93:c5:b1:d3:17:69:f7:af:14:09:04:ab:
e4:e9:2f:10:10:03:81:be:6b:e7:88:95:cf:29:e4:71:74:91:
95:d8:85:45:d2:dc:29:0f:fa:a1:58:6c:67:eb:39:b6:da:79:
01:ed:95:4b:ad:56:68:a8:ff:55:af:25:e4:fc:08:3c:7a:b0:
05:e7:28:b2:db:53:a3:c4:29:0f:b2:f4:ff:01:bc:7c:38:78:
f7:20:23:7c:a6:84:1f:72:e8:39:b3:c7:56:59:3b:33:8f:c4:
08:93:c2:6e:0c:ba:eb:4d:4b:db:92:31:c0:3c:7b:10:f0:fa:
10:ef:80:d3:f5:75:e9:cb:8b:84:7b:7c:56:39:53:8a:3b:4e:
ca:f2:3f:b2:76:70:c4:ba:ae:39:c6:14:35:a3:bc:db:3a:15:
a6:d5:70:d2:6b:2c:82:19:94:da:6d:f4:64:5f:d0:89:68:f1:
8c:fc:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:00:39 2025 by rpki-client