Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer (raw, json)
Hash identifier: +rx2YXPPCLTCQ9jvvCKAe0loUnkWMyLieHRPLS3MAjI=
Subject key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A49D81B970D88B45B0647135767E40692
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Nov 2025 13:11:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15743
AS: 205831
IP: 37.131.240.0/21
IP: 62.48.64.0/19
IP: 185.210.208.0/22
IP: 193.35.198.0/23
IP: 193.35.218.0/23
IP: 193.98.1.0/24
IP: 194.45.127.0/24
IP: 217.26.224.0/21
IP: 2a00:e68::/29
IP: 2a0b:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:d8:1b:97:0d:88:b4:5b:06:47:13:57:67:e4:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 13:11:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc127864cd43048550ed1699c584b5c14d80e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:99:b9:61:a4:2c:c0:95:c5:11:09:90:a8:
9b:b3:5f:a5:bc:34:55:ae:f1:46:b6:c6:e3:9a:90:
a7:4d:44:87:d7:e7:0a:2f:9d:17:c6:59:f9:21:e2:
97:46:32:2f:0e:04:70:54:30:68:ee:ff:3f:ab:d0:
0a:2c:ab:5c:a8:7e:c6:b6:ae:db:c7:ae:a5:22:91:
87:6e:23:a2:4f:3d:ef:ce:91:a1:4c:99:ce:8e:fa:
37:91:1a:b3:4f:ca:47:ab:bd:48:87:5a:9e:28:8a:
17:b0:f2:eb:e4:53:d0:c8:07:7e:dd:1f:65:c7:6e:
46:c5:bb:1a:a0:50:c0:92:e4:3b:5e:9f:89:c5:cc:
2e:81:b0:ec:94:ec:58:0f:79:91:44:08:d3:92:26:
b5:23:4d:eb:8a:e6:e8:b1:5d:e1:d3:96:3e:42:d4:
aa:b1:47:d5:5b:2b:d1:ed:4d:cc:4a:85:c1:b1:bd:
d5:0f:76:0d:7f:a5:c0:a1:a1:94:74:03:5b:0d:5e:
2c:bb:e7:e1:e5:42:b2:b8:69:79:fb:96:76:26:af:
21:3d:38:94:37:2d:ae:da:1d:3b:f4:08:ad:b8:28:
fe:b5:83:17:dd:5a:34:88:42:c2:f1:1c:69:19:28:
70:9a:c1:31:c3:91:c3:a6:2f:b1:92:59:0c:6d:11:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.240.0/21
62.48.64.0/19
185.210.208.0/22
193.35.198.0/23
193.35.218.0/23
193.98.1.0/24
194.45.127.0/24
217.26.224.0/21
IPv6:
2a00:e68::/29
2a0b:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15743
205831
Signature Algorithm: sha256WithRSAEncryption
6e:d0:3d:03:0a:2c:6a:fd:ec:c8:74:f7:88:c6:ed:4e:f0:d6:
94:7b:f3:72:e2:1c:3f:89:00:4a:65:45:f2:74:21:d6:86:7f:
62:23:26:91:f2:55:b5:16:90:17:9b:32:6e:d6:87:ef:24:8d:
bf:89:fd:3c:23:8e:dc:ba:c3:64:6b:73:ac:e2:17:16:a9:3c:
18:1e:15:a6:0c:bf:44:34:25:10:b5:88:de:8a:78:83:f0:5d:
cc:9a:d2:30:6f:50:02:ec:04:d7:43:8d:e4:6b:df:a5:e8:5b:
d8:f9:7b:39:db:8c:a6:81:4c:5c:fe:f0:9d:91:68:e5:1c:5f:
ae:9b:ef:91:f7:a9:a8:22:e7:39:d6:fb:d0:c0:d8:c5:0b:5d:
6c:17:c5:84:24:0f:0b:3a:e2:f1:21:62:56:b3:a3:63:78:52:
bb:b4:ab:85:03:59:2c:53:35:b4:c3:e1:c5:4f:89:04:cf:f3:
3f:c9:6f:30:a5:6a:cd:46:f3:a7:b9:4d:7d:ef:a9:a9:2d:89:
d3:2a:c2:4a:45:a8:71:e8:2d:a2:90:bc:ec:a0:25:11:7d:aa:
8c:ae:6c:05:ef:16:82:c9:b3:99:7c:e6:e4:79:e4:96:33:15:
a2:63:52:52:07:db:5c:b7:7f:99:e8:e9:52:4a:65:0e:47:ac:
f6:4e:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:37 2025 by rpki-client