Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
File: C4JANE7t1v9gI0SCv8MAHW4boJk.cer (raw, json)
Hash identifier: oOht8PgK4shPV9LcSEv/3wPB3KXy6KA95f9dF3y/onA=
Subject key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197EFB75D11CEEE0DA486CE1D0BF34F4200
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Jul 2025 15:04:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209443
IP: 185.108.148.0/22
IP: 2a0b:c740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:b7:5d:11:ce:ee:0d:a4:86:ce:1d:0b:f3:4f:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 15:04:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:ac:2e:71:e0:4d:c0:bc:54:04:b1:af:65:
60:2e:af:1f:05:03:35:01:88:fb:de:fc:2b:bf:ca:
4f:93:f9:67:03:20:bb:1c:93:b6:74:6f:be:70:c2:
cf:5c:11:c4:7b:af:86:e0:08:ba:da:75:5c:cd:18:
b3:f2:17:7e:8b:21:6b:ce:23:cc:0d:fb:bd:e6:14:
46:27:58:0c:0f:d1:92:b2:35:84:eb:05:2f:d4:2f:
3c:a2:0c:01:31:df:c4:53:c8:87:69:4f:f5:fb:55:
91:61:a9:5b:25:f3:53:fe:ea:0c:fc:a6:4a:56:ca:
a0:67:29:71:cd:e7:84:da:93:94:21:87:df:25:a5:
a6:42:88:64:6d:0d:33:7a:4e:7d:b7:54:4a:25:cf:
9e:2c:d1:58:f5:56:51:8f:2f:a5:07:c3:6e:e3:0e:
09:cf:7c:af:9f:ec:80:c5:18:e8:d9:c6:32:3b:ca:
ad:67:56:d1:35:2a:03:c8:b2:05:ba:2f:06:c6:14:
10:31:f4:65:65:ca:24:fc:07:0e:c6:0a:45:68:7f:
9f:49:ea:63:88:9d:23:7c:1e:dd:c4:dc:be:59:0a:
88:86:c6:9e:26:02:2b:6b:12:e1:f7:9d:dc:71:35:
6d:f6:4e:5d:89:85:c6:e6:c1:38:b6:71:c7:a9:f5:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.148.0/22
IPv6:
2a0b:c740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209443
Signature Algorithm: sha256WithRSAEncryption
49:4d:93:e5:5f:22:1c:2f:6d:d1:8c:87:d1:d1:7d:87:34:34:
5f:b6:4c:63:c8:e0:24:04:a0:7e:96:f1:f8:21:be:75:6b:8b:
a2:a3:44:36:1f:11:47:da:3c:1a:7d:59:c1:f4:80:62:05:0d:
a2:c6:0c:16:d2:55:29:5d:41:e4:40:ef:bf:3e:b1:03:4a:73:
c5:e5:97:d9:77:25:63:9f:08:66:ba:14:04:c4:89:91:f9:62:
9a:7f:01:90:4b:2b:1f:fe:16:b7:96:af:22:06:2e:96:96:cb:
6d:69:ce:f3:0d:ac:20:0a:e5:f1:df:fe:72:81:ac:cb:fc:2e:
0a:fe:ee:7a:53:66:fe:d7:96:7f:4b:97:ad:fd:17:e3:40:79:
19:63:4e:70:64:9d:61:66:96:7f:44:92:55:5b:f5:be:6f:25:
2f:bf:3a:19:e2:82:c0:47:2e:d0:46:81:3b:4d:92:a7:30:9c:
46:98:b3:83:c8:f2:7f:06:66:a6:d0:d6:86:ca:62:ff:7c:7c:
9a:4b:76:e2:67:d5:87:63:80:e1:c8:65:2e:75:41:35:5c:49:
fa:85:c5:64:da:d2:e3:bd:0c:c1:42:5a:92:74:59:11:75:37:
5b:19:cb:17:6b:cb:a8:cc:e3:4d:5d:68:57:66:85:65:a1:3d:
10:b4:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:34 2025 by rpki-client