Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
File: Vz035lyCKPeT9IuOmiDxLC-AuIM.cer (raw, json)
Hash identifier: XlTJYvP9orm1qN0pll0+OaVPTbqBnIWukoPg8I2B2Vg=
Subject key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197E4C9892019620536567A21C8ADB71E02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Jul 2025 12:08:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212204
AS: 212453
IP: 80.249.133.0/24
IP: 91.239.120.0/24
IP: 185.192.122.0/23
IP: 2a10:8d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:c9:89:20:19:62:05:36:56:7a:21:c8:ad:b7:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 12:08:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:66:d3:9e:ed:5d:d6:34:49:4f:80:c4:07:
ef:d6:33:ac:c3:28:cf:cf:cd:98:1e:5c:2f:8e:a0:
60:cf:d3:20:5c:c9:a0:ac:a3:8d:08:6b:cc:a7:f8:
3c:db:d5:ef:4c:f1:48:2e:c3:80:87:d1:6a:9b:34:
36:39:1a:8a:de:ab:44:73:02:d6:29:92:1d:e0:62:
aa:c2:0b:df:c6:76:41:34:2f:8e:48:ff:4a:1d:26:
6b:db:32:90:f0:43:9e:7d:ec:5b:a0:f5:2c:23:57:
c0:02:9d:28:59:ed:11:af:a3:c4:3d:93:c3:4b:b7:
3c:88:1b:5d:b1:f5:32:cc:b7:85:52:83:a9:40:ac:
21:63:0a:3a:8a:36:0a:04:f4:e1:61:66:82:2b:eb:
d1:ca:f8:03:da:e2:8e:11:e9:2b:a8:56:cb:30:9c:
73:9b:b6:4c:44:39:64:4b:fb:f2:cc:b6:5c:24:e6:
f0:75:e4:c0:2c:4b:96:0a:fc:cd:a0:17:60:58:b4:
56:8a:3c:6e:e9:c6:36:b8:00:2b:5c:2c:5e:34:9f:
31:71:2b:8f:b1:fe:2e:8a:5f:ee:bc:d5:7c:29:fe:
fb:d5:12:5b:d3:cc:a8:56:ad:13:35:ba:74:38:19:
3c:03:35:7b:89:3f:c3:e4:13:f5:c0:98:ef:51:90:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.133.0/24
91.239.120.0/24
185.192.122.0/23
IPv6:
2a10:8d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212204
212453
Signature Algorithm: sha256WithRSAEncryption
46:29:f6:8c:cb:fd:b9:9c:df:c8:eb:21:48:8a:9e:7f:72:44:
eb:ce:d2:32:d0:81:10:3a:ba:b4:c0:5f:3f:a8:2d:73:3a:f8:
d1:ac:73:c3:3f:f3:fa:c8:51:bb:52:6d:e1:2a:c0:84:92:80:
00:6f:10:55:cc:4f:eb:76:2b:f3:af:63:32:50:c3:72:8f:28:
ed:0d:c2:09:d6:22:ad:38:00:c7:eb:96:40:d3:14:ff:92:61:
72:21:c5:2a:3f:67:4f:3c:ac:d6:f6:04:04:ba:db:93:35:29:
d3:1d:4e:eb:86:44:4a:62:cb:69:2d:e3:c1:3c:37:82:d2:30:
60:eb:bf:73:e4:08:54:5e:81:c2:2c:72:c6:59:87:f2:21:8a:
48:b7:b0:47:66:18:c9:ba:f4:22:11:8a:45:78:a1:6a:25:40:
9d:7e:5f:64:cf:45:46:3b:e5:4c:7b:e7:c0:98:2d:33:19:ac:
42:88:25:ce:9e:f8:df:a3:b0:b7:0f:c2:74:7a:65:9b:13:a8:
42:11:82:ad:74:d1:9c:fd:69:52:df:00:78:c0:c9:3e:52:7a:
07:1a:c5:ef:b3:7c:fe:c1:11:99:18:e4:a7:1f:29:2f:bb:d5:
c7:f0:2d:21:eb:a8:76:1a:03:a5:ba:20:9e:61:3f:8a:79:70:
c8:02:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:08:04 2025 by rpki-client