Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.cer (raw, json)
Hash identifier: RMirvgjLX1vG3tb7+yifqnOVvWFTfduX7bxZ6M4U8nI=
Subject key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019818808048A91CEE7BC2A5A1CDDE1B3E59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Jul 2025 13:08:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 33993
IP: 94.131.23.0/24
IP: 2a14:e080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:80:80:48:a9:1c:ee:7b:c2:a5:a1:cd:de:1b:3e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 13:08:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:9a:67:f0:c0:42:c8:4e:c1:51:99:d8:ab:
39:70:fa:96:1b:59:3e:7d:f3:89:ee:99:22:b9:81:
fe:5b:7d:1e:a1:ea:c9:d6:90:6e:5e:2b:ff:7b:f5:
ae:a1:31:71:1d:8f:b9:16:8c:32:43:9f:77:50:fd:
27:a6:05:14:47:62:50:40:f3:9b:9b:6a:af:b1:fa:
75:7a:fc:2f:be:02:1c:64:68:b0:67:ee:2f:b4:0f:
fe:eb:1d:15:5d:05:66:bd:6b:df:12:a7:22:9d:00:
fe:98:82:cf:42:dc:76:7c:0d:fa:a7:99:5e:3b:31:
df:34:45:4d:1a:ae:2d:5f:42:6d:93:77:df:37:62:
b1:ef:66:02:88:26:09:4c:31:f5:f4:63:21:1b:88:
5c:d5:a1:58:12:c8:27:c1:c1:c5:56:80:c9:43:9e:
59:19:80:3a:0b:6d:2e:27:10:2b:6b:44:df:5c:69:
9e:1c:87:7b:3d:61:fd:c8:0a:34:fe:c0:d4:f3:2a:
5b:d1:c5:dd:38:a0:fa:cc:3f:6c:e3:d2:dd:2e:65:
d1:07:03:05:6d:27:92:09:8c:c6:15:c2:a3:04:07:
e2:b3:69:4b:80:ec:2a:9e:f9:d4:2e:fd:55:ce:68:
5a:85:04:81:7e:6f:5b:a0:f6:e0:56:ef:ba:e0:29:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.23.0/24
IPv6:
2a14:e080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33993
Signature Algorithm: sha256WithRSAEncryption
1c:ba:8f:34:dd:69:96:7f:9a:63:5a:74:91:4d:11:bf:81:4f:
20:27:e5:32:d7:c3:d4:5a:af:bf:54:e9:ff:e7:bc:e9:8e:71:
35:1c:44:23:10:cc:d8:af:ba:c3:01:28:7f:d2:dc:cd:a2:63:
3a:f0:fb:d2:07:1a:01:73:d7:dd:9e:9b:81:9a:b2:ce:a1:f2:
84:84:fe:63:77:86:71:27:e7:e5:ba:18:12:a9:b9:05:6c:c2:
52:70:7d:c3:08:6e:c1:55:05:5c:6f:dc:41:40:d3:bc:9a:f6:
8a:ea:ef:3c:a2:5d:d3:0f:e4:78:c8:17:23:86:db:cd:88:bf:
9e:92:60:bc:b4:fe:bc:db:85:f6:a5:b0:21:23:47:4b:b1:cf:
7f:2b:cf:39:02:db:c7:05:2e:ab:c2:41:ec:39:fb:af:c1:41:
6c:dd:b3:94:33:e9:f6:a2:2f:98:f3:f3:d4:13:3e:b5:0e:95:
f7:2a:05:6a:08:1c:58:e3:d4:dd:1c:62:3f:99:d5:88:bb:9a:
02:67:44:c9:98:14:4c:e6:05:d2:21:64:75:58:2e:04:7a:6a:
9b:8d:4e:1d:ea:30:18:ea:6e:86:47:0d:8d:bd:e2:58:97:02:
44:c1:ea:cc:40:1a:f2:11:c5:95:76:5b:ef:0a:d4:80:65:00:
88:db:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:00 2025 by rpki-client