Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer (raw, json)
Hash identifier: WyQ9vLKtv8QenS2RPM+0UKrUiIbSCd/Ht7oi1otg52I=
Subject key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196CEFD849C32DC831913C68C94C9473A9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 May 2025 13:30:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8639
AS: 208521
IP: 185.121.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:fd:84:9c:32:dc:83:19:13:c6:8c:94:c9:47:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 14 13:30:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53435f4be2c543bf3483e377f80314d28230184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:e6:52:56:b7:cb:4a:8a:11:c8:83:34:b3:
a9:7c:d2:62:5d:86:c9:e8:eb:1c:52:49:ae:6b:9f:
7c:84:b8:3b:27:b9:44:64:ec:a4:96:ab:7e:ec:4b:
c4:31:e2:6e:fa:8b:83:5b:df:08:f2:80:70:dd:13:
ce:cb:89:4d:28:2a:f1:06:a5:21:84:4f:e2:92:4c:
de:a4:af:b4:0e:60:08:f7:64:da:81:20:87:cb:42:
87:22:8e:61:97:6e:d8:92:76:19:15:37:d8:09:72:
76:05:dc:62:c1:aa:46:9d:84:ec:17:18:5c:1d:c1:
93:11:3d:79:cb:0d:81:53:3d:7a:1e:d1:19:7c:6d:
de:dc:8c:23:af:52:e6:fe:7e:64:1b:a2:2e:ea:26:
32:e2:ac:ef:52:05:43:2e:0f:e5:2c:00:82:99:32:
72:cb:e1:f0:98:24:33:dd:ac:2c:d9:ba:aa:88:e1:
a5:3d:fd:53:a9:33:69:7a:6e:cc:d3:d3:3c:dc:06:
e3:11:de:11:e8:9d:95:0f:4b:3d:6b:65:bd:31:98:
49:cb:9b:11:5a:0e:53:6b:87:fc:0e:69:3c:dd:2a:
74:7f:b9:32:f7:14:a9:78:b5:62:89:2e:59:f0:ed:
a5:2c:3e:e3:2b:eb:f2:7c:82:88:6c:7d:70:35:18:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8639
208521
Signature Algorithm: sha256WithRSAEncryption
87:7e:fb:e0:fd:dd:6b:5c:d9:a1:dc:b3:41:8b:ad:94:ec:6b:
e9:df:21:ae:17:ca:bb:df:79:3d:af:76:78:bc:90:27:9f:3b:
30:2d:2d:64:f1:8b:7a:ef:7c:2d:a9:84:d9:ad:c1:a0:ab:82:
94:d8:41:3f:f9:1a:57:ee:4e:1d:51:c2:bb:94:7e:74:28:bd:
3c:c5:1b:4e:07:89:21:66:1c:b8:e2:fe:c3:02:7f:88:27:28:
f2:dd:d7:09:2a:54:7b:34:91:d5:27:a4:2e:8d:c2:81:4e:01:
36:72:d7:34:bb:20:ba:bd:17:93:2a:86:88:4e:ab:69:6f:2f:
0a:b2:f5:27:14:ef:4d:92:b4:46:7a:80:36:6b:bd:4a:56:61:
9d:70:9c:79:69:47:cf:3e:16:6a:88:3a:24:0b:23:0a:d4:fe:
9a:a4:5b:c1:8c:0b:71:0c:32:3d:c3:40:74:f1:2b:f6:e0:37:
55:f1:ea:00:86:67:bd:a9:85:fe:bc:71:ae:70:d1:25:22:10:
36:33:b0:25:1a:fb:02:35:2e:98:ec:89:a0:d5:cc:fd:e0:b1:
62:1b:de:3a:d0:4c:1d:d9:28:b6:f6:7f:3a:da:09:b2:23:0e:
69:e8:8d:d7:cc:b6:4e:49:64:b1:ba:78:be:e2:32:c9:ff:0c:
b9:56:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:17:53 2025 by rpki-client