Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer (raw, json)
Hash identifier: wkjmekuvP2NjwCjAfiiDuwkI6Levx9oKupuvl/Ad2jI=
Subject key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A36AFEE376DFC2604FA8780EADEAFA7EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Oct 2025 19:54:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204225
IP: 203.12.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:af:ee:37:6d:fc:26:04:fa:87:80:ea:de:af:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 19:54:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:c3:83:e5:37:40:e0:ef:54:e0:6b:0c:72:
6f:f4:e4:05:8d:fe:a2:dd:31:59:21:e7:1b:99:22:
5b:65:f0:d5:4a:b3:92:f4:ff:99:62:02:19:10:a7:
51:56:f9:91:56:c3:99:03:8b:fa:30:91:a5:41:ca:
6e:e2:00:cb:2b:a3:e7:c8:ec:e3:a2:73:83:23:2b:
ae:99:22:c8:64:16:5c:d7:5c:f8:50:87:7c:4d:01:
3a:88:0c:4a:ab:b7:57:62:e5:ea:2f:7f:87:81:da:
4d:42:85:01:f6:9e:44:4c:95:b6:19:6b:71:7d:ef:
fd:c1:02:67:e3:3f:66:ec:49:00:18:b9:9b:b2:a0:
a3:85:6d:af:e3:d4:4f:e6:f6:8e:db:b8:f8:13:c8:
ae:b2:3e:f6:67:3e:6d:03:f6:81:d6:11:48:ad:02:
76:e9:48:28:72:1c:26:f3:37:3b:43:3c:73:1f:58:
be:ee:a1:ec:03:5e:e9:98:6b:eb:31:14:3a:ad:fc:
4f:af:a6:40:d6:c3:85:58:43:d1:4b:69:ee:57:43:
02:95:0e:f0:36:69:fc:f9:40:70:87:27:9c:72:3c:
77:51:7c:5d:dc:03:b8:78:ee:a9:41:16:d5:44:99:
3b:02:d2:03:db:ca:12:8e:3c:dc:0c:e1:98:51:89:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.12.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204225
Signature Algorithm: sha256WithRSAEncryption
22:af:43:82:5c:e5:5f:16:f7:2d:75:4b:14:a1:b0:8b:ad:de:
7d:37:b1:10:d8:b1:94:dc:81:1d:ee:48:9f:e4:1a:38:82:96:
cf:06:36:56:7d:68:4c:6b:97:c8:89:db:55:9c:fc:80:9d:05:
99:80:1a:8d:01:09:6f:b3:93:31:3a:a1:6c:c6:9e:63:7b:52:
68:c7:c9:be:d8:58:85:92:e3:2b:8a:87:24:ca:ee:c3:0f:fd:
69:a6:c1:2f:cf:f7:9b:8f:dc:a7:e9:b7:43:1d:08:d4:ff:1c:
7c:6a:99:8a:d1:7c:bf:be:8a:0c:1c:e0:ee:57:ab:8c:d7:48:
f0:b7:23:c1:d5:ef:5a:c1:72:46:d2:7e:6b:75:74:b4:27:c9:
d0:78:15:97:05:eb:93:a3:f8:96:57:59:d3:69:ea:f2:03:70:
85:82:44:7c:60:28:54:fd:1f:f4:42:21:d2:9b:99:fc:38:ba:
b7:a4:b9:70:80:cb:a2:e0:33:df:5c:d7:4f:81:61:fe:2a:f2:
0f:47:df:a6:d6:96:a6:e7:2c:ac:d7:c5:18:87:57:83:52:e5:
e3:be:32:ed:41:ec:d6:5d:54:cb:de:ae:c0:93:f8:05:c6:a0:
32:b3:17:d5:b1:97:4f:94:49:60:43:0c:0c:f5:11:25:20:c8:
da:96:7c:93
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZo2r+43bfwmBPqHgOrer6fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDMwMTk1NDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmY3NmEwNmVhYTJhMDNjNzk5MTM0NzUwOWI4NjA4ZjRhNzEwNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjDg+U3QODvVOBrDHJv9OQFjf6i
3TFZIecbmSJbZfDVSrOS9P+ZYgIZEKdRVvmRVsOZA4v6MJGlQcpu4gDLK6PnyOzj
onODIyuumSLIZBZc11z4UId8TQE6iAxKq7dXYuXqL3+HgdpNQoUB9p5ETJW2GWtx
fe/9wQJn4z9m7EkAGLmbsqCjhW2v49RP5vaO27j4E8iusj72Zz5tA/aB1hFIrQJ2
6Ugochwm8zc7QzxzH1i+7qHsA17pmGvrMRQ6rfxPr6ZA1sOFWEPRS2nuV0MClQ7w
Nmn8+UBwhyeccjx3UXxd3AO4eO6pQRbVRJk7AtID28oSjjzcDOGYUYnbUQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFL/3agbqoqA8eZE0dQm4YI9KcQcfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzE0NTk0
My02NTFmLTQ2ZmYtOTNiMi05NDk2NjJiMjcxYjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMTQ1OTQz
LTY1MWYtNDZmZi05M2IyLTk0OTY2MmIyNzFiMi8xL3ZfZHFCdXFpb0R4NWtUUjFD
YmhnajBweEJ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAywwfMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMdwTANBgkqhkiG9w0BAQsFAAOCAQEAIq9DglzlXxb3LXVLFKGwi63efTexENix
lNyBHe5In+QaOIKWzwY2Vn1oTGuXyInbVZz8gJ0FmYAajQEJb7OTMTqhbMaeY3tS
aMfJvthYhZLjK4qHJMruww/9aabBL8/3m4/cp+m3Qx0I1P8cfGqZitF8v76KDBzg
7lerjNdI8LcjwdXvWsFyRtJ+a3V0tCfJ0HgVlwXrk6P4lldZ02nq8gNwhYJEfGAo
VP0f9EIh0puZ/Di6t6S5cIDLouAz31zXT4Fh/iryD0ffptaWpucsrNfFGIdXg1Ll
474y7UHs1l1Uy96uwJP4BcagMrMX1bGXT5RJYEMMDPURJSDI2pZ8kw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:29:45 2025 by rpki-client