Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
File: kFLex7dhf-OchVDuIMOCIBq5ryo.cer (raw, json)
Hash identifier: aczyErV3nkJ5q0ZTH0KRxJmLMJb7vOY+BLY2Bj8su0k=
Subject key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01983CDD7C4DB7BED7B778C330C97905FF83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Jul 2025 14:36:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211492
IP: 5.8.249.0/24
IP: 2a06:f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:dd:7c:4d:b7:be:d7:b7:78:c3:30:c9:79:05:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 14:36:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:7a:bf:8a:3a:94:73:16:e1:7c:11:5e:9d:
0c:dc:08:2c:13:7d:ce:67:a7:a4:cf:45:17:c9:9b:
f3:79:1a:cc:93:20:4a:1e:28:3c:17:b5:21:50:ca:
fb:39:dc:3b:c7:49:64:0a:39:69:06:dc:32:e2:60:
34:0c:8a:f6:d7:b3:d8:5c:aa:35:f7:8b:0f:6d:42:
41:bc:e3:82:64:8c:85:a7:e9:5f:88:da:98:b8:df:
d9:5a:51:1d:6a:0d:0c:8e:c2:d4:13:0c:ff:74:29:
41:4f:04:5a:35:98:d8:d6:01:21:2c:8f:d8:24:e3:
6e:8c:d9:10:77:59:64:e2:c6:0e:06:57:58:75:76:
56:95:a7:c1:4c:37:4a:09:9f:5d:ff:10:67:1f:8d:
99:d7:55:db:3d:59:a9:b6:17:e4:25:d8:18:85:70:
e6:af:61:e5:be:95:f0:7f:19:da:31:26:0a:20:cd:
83:28:98:7c:36:63:dd:0e:cd:7e:25:ca:31:c1:ff:
21:95:1d:58:b6:d2:46:76:87:24:87:56:00:8c:41:
28:14:0a:03:13:4e:ce:bb:93:05:d6:d9:86:53:1c:
78:6d:60:b9:d0:ad:bf:4c:4b:15:50:5c:07:02:6c:
7a:0e:a6:1a:0b:1c:f2:f8:f4:39:9f:3c:39:bf:f1:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.249.0/24
IPv6:
2a06:f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211492
Signature Algorithm: sha256WithRSAEncryption
65:1a:63:1e:a6:0f:82:29:02:1f:2c:72:c1:69:be:42:26:84:
bc:9b:52:b8:e1:c6:95:0c:a6:6e:20:a1:01:27:81:cc:29:f3:
5d:e2:e1:d3:c3:1f:26:0f:79:4a:99:b4:0a:1b:63:ff:55:24:
36:86:98:07:0e:7a:73:95:89:34:79:40:29:59:3e:ae:9c:16:
87:f8:99:4d:d0:88:dd:7c:2c:17:0d:ed:87:ab:b4:c3:8d:94:
22:ce:3c:81:37:ec:a9:52:da:3a:fd:af:2b:e2:f3:84:15:c6:
1c:e6:c8:91:d1:7f:83:15:16:d4:8a:ac:f6:28:4a:aa:dd:eb:
07:35:cd:2c:c5:78:42:d1:b6:53:34:dc:06:1c:7f:a7:b0:c7:
8b:c1:d5:87:5a:cc:43:9f:99:eb:3d:83:4e:a7:0a:d0:69:32:
b5:52:57:c1:0e:a7:c4:10:bd:67:f2:82:f0:67:8e:df:87:f0:
ca:32:01:bf:7a:d8:ea:55:08:62:c1:f3:12:ee:4a:88:e8:8f:
14:a7:64:fe:51:ca:29:53:d8:c7:ce:c9:41:45:5f:83:33:f4:
55:88:1c:b5:f5:07:99:67:86:b1:3b:6d:ef:d9:3a:a7:5c:c6:
90:4b:35:1a:be:6e:d1:cc:93:37:74:85:3d:38:f9:cd:0f:41:
5b:97:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:55:41 2025 by rpki-client