Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer (raw, json)
Hash identifier: CewfuZkKM26w8Aj278ebRuDm9Rj0CHwhEpmQ+nUnsGI=
Subject key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981830204F8E81951D4E9D3113EAF5A1F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Jul 2025 11:41:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199711
IP: 185.48.20.0/22
IP: 2a01:95a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:30:20:4f:8e:81:95:1d:4e:9d:31:13:ea:f5:a1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 11:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5259796c5f60c55501e458008611623b5049d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:51:6e:6f:da:fa:97:5c:f3:bb:c3:66:77:
aa:8c:55:f1:58:10:01:e1:04:22:41:1c:5f:68:ea:
32:64:8d:ac:05:01:8d:dc:5c:96:f5:9d:84:33:4e:
07:1b:d5:68:6b:81:72:93:db:a2:59:71:4b:1a:8f:
6a:3a:d9:bf:39:a9:9c:d1:2a:0c:48:4d:a6:f9:41:
ba:84:2f:39:be:19:d5:75:92:2d:92:ee:7b:3f:bc:
34:fd:05:40:61:89:6e:64:ea:0f:05:a7:bc:bf:15:
cc:38:c6:6a:34:3b:8d:8c:d5:c9:08:54:04:05:21:
27:11:08:95:b1:27:62:2b:a7:5b:eb:7c:25:91:5e:
d7:fe:58:21:c8:b5:fe:c8:bf:b3:2a:41:63:a9:83:
52:e8:83:88:9f:15:15:69:19:90:61:3c:ae:ca:8b:
f4:85:f9:be:94:dc:e8:bd:f2:b7:22:b8:0b:a7:d1:
b3:73:ea:ba:03:0d:75:42:02:52:4c:61:83:25:2d:
5c:68:82:16:97:eb:be:b5:9a:de:d2:a7:d5:98:de:
35:f1:03:c8:32:5f:16:0b:f8:7b:a0:6d:9f:c1:64:
3f:74:a6:04:45:45:43:11:75:5c:ce:37:43:a4:74:
2b:fd:39:7c:25:99:7b:d8:98:d8:2f:1d:8f:4d:e7:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.20.0/22
IPv6:
2a01:95a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199711
Signature Algorithm: sha256WithRSAEncryption
64:4a:f1:6a:7b:64:6b:b2:53:c9:a0:15:b6:bf:6b:fd:7e:5b:
ab:98:0e:e0:fe:9d:98:2b:af:b2:44:ea:fb:01:83:4c:fc:fc:
e1:5c:39:68:94:10:93:92:44:27:bc:b9:6d:7b:fa:60:a1:78:
3e:d2:5e:6f:7d:3d:0b:f2:a8:2b:1e:c2:66:9e:a4:42:6f:2e:
3e:df:53:cc:84:cb:c8:4e:a5:69:4f:61:18:c6:cf:ef:62:0d:
a0:e9:d7:65:0f:f4:d1:5c:49:25:fb:33:92:ee:52:ce:b4:5e:
47:38:15:4a:b0:fb:73:b3:1f:61:57:a8:d5:a0:a8:f9:0e:fb:
f9:c2:69:e5:fd:0f:17:40:fa:85:88:21:14:68:73:a2:5a:0b:
3b:21:86:23:51:63:ad:16:d8:36:9c:8d:8b:06:85:3d:3c:47:
31:05:e5:48:8a:ad:06:e0:4d:76:78:ed:bf:77:71:0d:e9:c4:
8b:2f:73:f0:8f:28:9f:75:cf:6f:50:c5:48:4b:0d:50:87:39:
be:58:94:3c:76:54:85:42:f4:ba:75:37:c2:11:f7:41:d7:7f:
e4:f8:de:34:a5:ca:76:8e:d9:1b:f0:ad:21:6c:1f:3b:a5:df:
17:92:44:19:6c:0d:c0:84:79:5c:0f:57:e0:60:4e:7f:f4:82:
9a:b8:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:15 2025 by rpki-client