Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.cer (raw, json)
Hash identifier: qDXW2CI8kG/50cgTw3NhXRFGF3e0UrKqJBzvNsVUDqI=
Subject key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A532DA6ED2132F322B3AAA7D5DE71A228
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Nov 2025 08:41:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204030
AS: 210161
IP: 87.101.84.0/22
IP: 185.116.80.0/22
IP: 2a06:7c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:2d:a6:ed:21:32:f3:22:b3:aa:a7:d5:de:71:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 08:41:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:bb:34:4b:47:59:0b:92:f0:fd:ab:8b:b0:
b8:94:d6:6c:23:0c:8c:12:3c:0e:db:85:89:50:ad:
60:e1:af:32:77:b1:67:b9:51:1d:e6:34:9d:54:90:
29:b7:17:15:11:0e:22:36:2a:52:2e:07:3a:19:ce:
11:62:4f:ac:cc:08:38:6a:15:5b:1d:b9:4e:b8:23:
a0:91:23:77:51:6a:ff:43:25:f6:70:11:b9:4c:92:
95:47:2f:13:5c:4b:e6:a5:73:ec:aa:ba:1b:12:0d:
ff:cb:fd:31:30:a7:dd:2f:82:9d:a7:d2:a1:dc:3d:
53:2d:07:76:dc:26:2f:98:66:f4:2d:90:8f:95:c0:
01:8f:b3:c5:7d:45:dd:60:1e:54:03:66:47:a7:e6:
66:e8:f5:6e:50:c2:dc:da:be:7b:eb:0b:f2:3f:10:
5d:5f:89:10:bf:44:7d:75:08:09:39:6c:0f:54:ae:
bc:e4:ae:09:b5:8a:cc:6b:6e:52:3f:69:19:d1:9d:
7f:06:e0:05:8f:f7:b6:00:98:24:7b:b5:fa:a2:36:
0a:3b:dc:ba:22:3b:9b:18:71:7a:6f:99:86:52:00:
32:37:f4:db:72:85:0d:e5:41:75:9d:ea:3e:d8:a4:
63:f3:b8:0b:d1:36:89:4c:84:a2:25:a0:e0:35:5f:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
185.116.80.0/22
IPv6:
2a06:7c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204030
210161
Signature Algorithm: sha256WithRSAEncryption
30:d1:05:db:0a:fc:a4:6d:89:a8:c8:f3:87:2a:79:c9:37:dd:
78:65:9b:f5:a6:c5:89:79:1e:c7:8a:19:8f:42:28:36:db:e1:
23:e0:c4:27:93:ee:c5:54:77:40:f0:7d:4b:19:e5:8b:b9:72:
a8:fa:4c:7c:88:6c:67:15:65:63:b1:18:db:c8:e9:12:79:e7:
65:f9:3e:b5:dc:20:98:d8:b9:d8:cf:25:39:f1:8d:03:9f:9b:
99:e4:bc:b9:d2:c3:a3:27:e9:81:90:07:00:ab:47:07:df:63:
d7:9c:1d:f3:b7:f2:0d:4b:6b:51:3c:e4:f9:54:7d:f0:11:fa:
37:fa:44:b1:44:2d:d1:50:03:09:32:0b:d8:ae:3c:6f:4c:4c:
fe:f5:fb:aa:66:95:b6:b2:2a:c8:a9:76:e6:a4:df:e0:26:cd:
df:0e:c0:d6:4e:c6:93:71:3f:0d:6f:13:3b:64:08:60:5c:6f:
24:25:c9:91:25:19:b9:96:00:ff:70:e8:be:d6:42:67:51:c4:
7b:5e:f3:b9:98:57:f0:f6:cd:9c:f2:5d:78:bd:3d:8d:84:e9:
ed:d1:a8:c7:b8:dc:d3:87:98:42:67:d4:1c:b6:ff:04:b2:b1:
95:39:9f:0a:2b:f3:a4:a3:f3:55:16:bd:cd:24:6f:67:98:c1:
98:d9:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:50 2025 by rpki-client