Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.cer (raw, json)
Hash identifier: rp5D+SBBusiKjZ2DuavMuzNK0Vly+0NUZPDrjMsghzE=
Subject key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019832559DCF66E178A0F479663AFF0143E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Jul 2025 13:32:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214937
IP: 14.102.90.0/24
IP: 66.220.47.0/24
IP: 86.54.81.0/24
IP: 192.100.68.0/24
IP: 195.248.90.0/24
IP: 2a0b:d500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:55:9d:cf:66:e1:78:a0:f4:79:66:3a:ff:01:43:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 13:32:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:de:8e:24:b1:0f:c4:29:00:01:a1:40:76:
94:f8:b1:31:60:0f:e3:34:28:69:be:da:3e:0f:bf:
48:73:52:d9:65:8c:d5:32:d4:ac:9d:e4:c3:b6:bf:
97:02:7f:1d:4e:44:d6:df:00:5c:7c:f3:bc:32:a5:
39:ea:fa:1c:d7:0b:33:9b:95:13:b0:14:76:3b:d3:
1d:e4:1a:4c:6f:77:3c:8f:0d:1e:73:63:2a:ef:2c:
9d:e7:4c:3a:7c:a1:1c:9c:40:af:bb:42:32:84:24:
93:c9:00:27:c3:cd:3c:34:3a:4d:d6:41:c2:d4:2d:
51:5e:69:5b:f2:62:ad:e7:27:c9:92:d3:86:b7:1f:
c7:ff:cf:b6:11:ed:ed:63:4a:51:8b:4b:35:9f:5a:
e1:c7:0a:ef:2e:a2:c5:03:a7:aa:e4:5b:18:a7:7e:
f3:02:53:6b:5f:e0:cb:9b:28:41:fb:9d:f3:fe:b7:
c6:6d:3c:b7:29:4c:a8:a8:1f:1b:1a:8b:67:c7:67:
98:8b:91:b8:c2:4a:be:45:35:ab:0e:82:ee:7d:12:
0c:54:93:61:7c:1a:78:dd:cf:58:3b:6c:55:ef:3e:
3d:d3:34:55:04:bf:d3:61:6f:28:85:e8:21:1b:89:
25:a7:dd:10:92:bb:68:3d:8d:8e:ec:ef:87:49:a8:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.90.0/24
66.220.47.0/24
86.54.81.0/24
192.100.68.0/24
195.248.90.0/24
IPv6:
2a0b:d500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214937
Signature Algorithm: sha256WithRSAEncryption
81:56:c3:3b:06:3e:de:88:cc:85:40:b5:72:3f:f8:f8:67:8e:
c8:6c:1c:7d:dc:12:58:9e:b1:ea:21:95:2e:f5:f3:17:a5:2e:
6d:a8:96:83:39:47:13:f2:2f:03:3e:2d:67:01:e4:5e:45:dc:
ef:56:6c:2c:4e:a6:83:0b:45:68:05:ea:e3:d7:82:b7:52:38:
d2:4e:f8:bc:20:e3:f0:53:69:66:32:62:f8:69:2b:83:d6:c6:
2f:cd:59:07:0a:01:66:6f:25:37:6e:0e:f3:a0:2d:5d:07:9a:
08:32:06:9f:01:46:53:81:be:33:06:df:2c:32:5f:d2:f9:89:
af:c8:ad:75:96:41:ad:7d:6f:e9:96:05:32:cb:84:2f:35:80:
c2:96:c8:b4:03:59:ef:4a:2b:b1:78:fd:98:ba:b3:4c:a8:a1:
9a:54:55:8b:9d:e5:6b:cb:2f:af:fc:1c:ab:09:49:3d:80:eb:
04:32:89:09:3e:f7:f1:b7:06:57:5a:c8:3a:20:8b:60:86:98:
a7:a1:88:ed:78:04:ec:51:de:81:2f:47:53:8f:37:9e:2f:0a:
2c:3a:fa:9f:fc:70:34:94:51:cc:71:3b:bd:55:89:3d:c1:32:
03:58:56:dc:01:fa:fa:96:ef:53:f1:ed:1e:13:a8:09:b1:13:
93:94:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:38 2025 by rpki-client