Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
File: axBPHkq67B7_gPJixi-WwlQ4yOE.cer (raw, json)
Hash identifier: hAYtclwo47G1vMbzBdxIsICzXQEMAsDPUK1cpM3eWlQ=
Subject key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019913C6C7285064A75611B874F8000294AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Sep 2025 08:10:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42881
AS: 49443
AS: 201813
AS: 203950
AS: 204794
AS: 204868
AS: 204872
AS: 205301
AS: 205745
AS: 205770
AS: 205884
AS: 206005
AS: 206127
AS: 206305
AS: 206340
AS: 206413
AS: 206535
AS: 206560
AS: 206582
AS: 206590
AS: 206623
AS: 206644
AS: 206744
AS: 206750
AS: 208317
AS: 209375
AS: 209396
AS: 209868
AS: 209883
AS: 209889
AS: 209896
AS: 209944
AS: 209961
AS: 209963
AS: 209982
AS: 213137
IP: 62.68.73.0/24
IP: 2a0b:2dc0::/29
IP: 2a12:1c0::/29
IP: 2a12:f9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:c6:c7:28:50:64:a7:56:11:b8:74:f8:00:02:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 08:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:4f:09:f0:7b:e0:da:c3:01:22:08:2c:f4:
a2:24:40:8f:55:6e:9a:de:f2:a0:c4:ba:45:30:03:
78:5c:01:c9:00:95:55:21:f6:2b:da:67:c4:4b:a8:
37:19:e4:94:77:1f:b8:1d:b0:94:12:90:74:d3:10:
c4:69:62:fc:79:fe:59:5e:ac:39:2e:8b:63:83:4c:
53:8a:d6:77:36:fd:24:b0:97:b2:75:19:84:22:49:
a4:a3:a8:28:d4:53:ff:f6:d8:7f:c4:1a:cf:39:99:
7e:bc:d6:50:10:ca:0b:32:90:ff:4d:2d:2d:d8:9e:
10:78:fc:c2:6e:f7:46:fb:2d:25:33:fc:9b:a1:86:
14:72:17:20:dc:e7:47:78:ff:de:04:ea:06:c4:ef:
7f:fd:ce:4f:a6:d4:95:8f:d5:19:86:4e:03:02:fd:
47:ed:8d:e5:ba:c0:a8:90:6e:3f:f5:0f:bf:47:00:
8a:aa:69:90:53:4f:cb:dd:c9:55:c0:c4:80:a0:b3:
31:86:35:08:bd:26:00:0d:20:3b:a3:18:c5:63:97:
75:e2:52:93:5d:dc:28:ac:84:af:69:03:21:1a:89:
1f:af:a9:55:63:97:2b:b8:09:85:0d:3b:93:92:a7:
19:87:44:1c:ee:16:31:89:50:bd:27:2f:ba:11:19:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
IPv6:
2a0b:2dc0::/29
2a12:1c0::/29
2a12:f9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42881
49443
201813
203950
204794
204868
204872
205301
205745
205770
205884
206005
206127
206305
206340
206413
206535
206560
206582
206590
206623
206644
206744
206750
208317
209375
209396
209868
209883
209889
209896
209944
209961
209963
209982
213137
Signature Algorithm: sha256WithRSAEncryption
55:2f:95:84:04:5a:a8:e0:f4:1b:05:f0:a6:96:60:43:87:4a:
cb:97:6d:28:8d:69:3c:73:31:76:ae:47:a5:27:c3:54:67:7f:
82:e4:17:f1:62:fb:32:bb:24:93:bb:7e:53:c7:20:d4:d6:3c:
0c:a6:01:8e:71:8a:69:5a:d1:03:6e:37:70:15:47:04:6f:87:
00:55:40:f1:0e:53:24:ee:f0:3a:5c:f6:9d:dc:24:e2:7d:c8:
44:7a:21:e1:04:46:fc:d0:44:c5:39:da:23:d3:ec:7a:ff:93:
2c:c4:9d:7c:15:9a:eb:f3:ab:7b:b7:f0:d0:a5:a3:52:06:9a:
a3:fa:50:7c:cd:83:a6:88:bd:cf:68:cf:50:3a:58:15:e2:b9:
b3:aa:94:37:32:9e:26:a3:2c:55:df:0b:2d:45:2f:8c:da:bd:
07:4f:5f:ef:29:3a:27:37:d9:3e:eb:df:38:70:cd:25:27:db:
70:56:15:6e:03:78:42:a8:4e:21:c4:33:03:62:57:ee:28:f6:
39:aa:3b:93:28:36:82:9b:d1:f5:33:eb:08:4d:0a:81:8a:52:
a6:5c:1d:de:e1:0b:26:3f:cf:52:8d:ee:32:3f:96:b7:7d:4b:
7e:56:15:7e:64:e0:eb:84:b1:4b:94:cb:a6:4b:95:8e:05:da:
cb:de:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:57 2025 by rpki-client