Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r9tcA5mPxmuPGCcplAPx5ejZmdc.cer
File: r9tcA5mPxmuPGCcplAPx5ejZmdc.cer (raw, json)
Hash identifier: UUnHLygXlQiximhPD2zgtWXe/gqAsDY573fVi4t6gDI=
Subject key identifier: AF:DB:5C:03:99:8F:C6:6B:8F:18:27:29:94:03:F1:E5:E8:D9:99:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01987A62EF11C868B6E93EDE45CEC334C1E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f560b-06cf-46eb-963c-67ad3ac7f83f/1/r9tcA5mPxmuPGCcplAPx5ejZmdc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f560b-06cf-46eb-963c-67ad3ac7f83f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Aug 2025 13:19:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210440
IP: 2001:678:120::/48
IP: 2001:678:10d0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:62:ef:11:c8:68:b6:e9:3e:de:45:ce:c3:34:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 13:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afdb5c03998fc66b8f1827299403f1e5e8d999d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:8d:2a:a3:cf:fc:08:51:07:9f:41:9e:2b:
86:4c:63:07:c0:22:0b:be:25:f7:28:62:60:48:81:
04:8d:d4:da:54:86:d8:1a:0d:23:4f:fa:1c:d5:91:
d2:7e:a2:08:62:f0:b5:e0:cd:c5:61:1b:11:43:33:
2f:ad:16:98:06:94:2d:b5:8b:8e:18:01:f2:d0:ce:
9b:7d:a5:45:b7:10:8a:b1:f7:06:4e:6b:80:36:93:
64:00:df:e5:2a:b9:27:94:39:e8:16:f7:cc:87:0a:
a7:b9:12:9d:5b:05:42:31:db:64:6b:02:4c:04:45:
bd:56:7a:d4:0a:15:77:01:a1:16:65:23:03:c3:45:
36:c3:70:e2:34:0e:c7:2b:6c:3a:29:fa:7b:37:87:
0f:78:d3:87:e9:ef:be:07:87:2d:1c:4d:71:13:e4:
c3:5b:59:da:be:37:e4:9e:09:99:72:b9:96:f2:46:
3c:31:57:71:5e:e5:c5:ae:7c:6a:9f:38:3f:01:10:
2c:3f:ac:b3:f0:ad:f5:3e:0f:6e:44:55:8b:79:80:
71:fe:f9:9a:80:2c:18:85:e4:79:68:6a:4f:84:d6:
d8:57:84:4f:f9:75:e5:b4:5f:09:4d:17:51:14:f6:
a9:3a:6f:e2:3b:a1:e9:e9:99:6b:ca:54:bb:1b:8a:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:5C:03:99:8F:C6:6B:8F:18:27:29:94:03:F1:E5:E8:D9:99:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f560b-06cf-46eb-963c-67ad3ac7f83f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f560b-06cf-46eb-963c-67ad3ac7f83f/1/r9tcA5mPxmuPGCcplAPx5ejZmdc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:120::/48
2001:678:10d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210440
Signature Algorithm: sha256WithRSAEncryption
a5:a3:52:dc:85:72:cc:1d:ae:37:bd:9e:db:3c:9d:86:8a:d8:
c5:1b:d2:97:cb:3e:09:21:77:a0:39:49:b2:ff:55:bf:eb:c5:
e2:fa:d3:68:55:f7:63:1d:e2:d8:dd:f6:e6:80:8c:bd:aa:6f:
d6:7e:60:04:a1:b1:b5:07:2f:9e:7f:f5:e7:56:67:55:9e:21:
c4:57:34:6a:99:c0:5e:09:ee:1c:40:78:69:35:bc:0d:da:17:
49:d8:b8:26:0d:3f:79:3b:5e:f6:8c:64:03:15:1b:c9:c6:d9:
93:31:6e:72:e9:34:b4:ce:b6:f6:3e:c2:fc:5b:f2:a4:e5:72:
8d:b3:c6:44:8b:29:5a:54:b6:e7:2e:0d:ed:d3:99:dd:dc:1e:
28:10:d3:d5:7a:78:98:68:32:41:27:2b:28:f3:2b:88:65:df:
3e:cd:eb:b4:6a:c2:70:71:fd:93:24:d1:7b:ec:ec:08:8b:c1:
d9:74:68:5a:4c:8b:33:3e:61:8c:82:94:7f:af:78:2c:25:6d:
c5:e7:00:c2:5c:98:28:f9:4d:61:29:ef:4a:79:e2:77:d8:2a:
63:36:6e:bf:07:8a:0d:68:df:3f:7f:28:2e:84:cd:d2:5a:96:
21:b2:06:06:a6:56:20:ca:a8:d2:94:59:88:cb:9e:4a:71:85:
d5:bf:d0:25
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZh6Yu8RyGi26T7eRc7DNMHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODA1MTMxOTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmRiNWMwMzk5OGZjNjZiOGYxODI3Mjk5NDAzZjFlNWU4ZDk5OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUGNKqPP/AhRB59BniuGTGMHwCIL
viX3KGJgSIEEjdTaVIbYGg0jT/oc1ZHSfqIIYvC14M3FYRsRQzMvrRaYBpQttYuO
GAHy0M6bfaVFtxCKsfcGTmuANpNkAN/lKrknlDnoFvfMhwqnuRKdWwVCMdtkawJM
BEW9VnrUChV3AaEWZSMDw0U2w3DiNA7HK2w6Kfp7N4cPeNOH6e++B4ctHE1xE+TD
W1navjfkngmZcrmW8kY8MVdxXuXFrnxqnzg/ARAsP6yz8K31Pg9uRFWLeYBx/vma
gCwYheR5aGpPhNbYV4RP+XXltF8JTRdRFPapOm/iO6Hp6ZlrylS7G4rCrwIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFK/bXAOZj8ZrjxgnKZQD8eXo2ZnXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzlmNTYw
Yi0wNmNmLTQ2ZWItOTYzYy02N2FkM2FjN2Y4M2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvOWY1NjBi
LTA2Y2YtNDZlYi05NjNjLTY3YWQzYWM3ZjgzZi8xL3I5dGNBNW1QeG11UEdDY3Bs
QVB4NWVqWm1kYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAEgAwcAIAEGeBDQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwM2CDANBgkqhkiG9w0BAQsFAAOCAQEApaNS3IVyzB2uN72e
2zydhorYxRvSl8s+CSF3oDlJsv9Vv+vF4vrTaFX3Yx3i2N325oCMvapv1n5gBKGx
tQcvnn/151ZnVZ4hxFc0apnAXgnuHEB4aTW8DdoXSdi4Jg0/eTte9oxkAxUbycbZ
kzFucuk0tM629j7C/FvypOVyjbPGRIspWlS25y4N7dOZ3dweKBDT1Xp4mGgyQScr
KPMriGXfPs3rtGrCcHH9kyTRe+zsCIvB2XRoWkyLMz5hjIKUf694LCVtxecAwlyY
KPlNYSnvSnnid9gqYzZuvweKDWjfP38oLoTN0lqWIbIGBqZWIMqo0pRZiMueSnGF
1b/QJQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:02 2025 by rpki-client